Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa
File: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (raw, json)
Hash identifier: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=
Subject key identifier: 43:99:FE:82:C4:D3:7F:B8:60:E9:E2:64:55:44:E4:EA:47:6E:C2:6C
Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Certificate serial: 0194611B11AD6A5AE313BBA39204F744E0FC
Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa
Signing time: Mon 13 Jan 2025 19:19:11 +0000
ROA not before: Mon 13 Jan 2025 19:19:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213322
IP address blocks: 193.169.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:1b:11:ad:6a:5a:e3:13:bb:a3:92:04:f7:44:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Validity
Not Before: Jan 13 19:19:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4399fe82c4d37fb860e9e2645544e4ea476ec26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ce:56:e8:77:cc:84:a9:6b:8e:6c:0c:ed:44:
f1:da:1d:91:1e:1c:76:44:fd:36:cf:3a:c2:96:75:
e0:32:10:25:dd:bf:f5:fa:12:1c:f9:e7:8d:58:9c:
a1:79:d5:27:7f:a7:8e:89:3b:03:10:c0:3a:96:a4:
08:43:3e:01:4e:2d:9b:d8:94:44:94:22:50:ee:78:
2f:ea:2d:2d:fc:34:2e:56:42:04:90:0d:86:9c:1c:
c6:81:2f:c8:ab:56:93:7a:03:9a:10:78:ee:ef:0d:
8c:f9:e7:ff:3d:0b:ae:0f:8c:0b:96:e1:cc:70:75:
94:01:a4:bb:4e:ca:1b:85:89:e6:cc:ab:e8:aa:6e:
7b:f8:73:bf:e3:f6:b9:67:e5:a5:58:d0:60:dd:7f:
ca:86:d1:b9:0c:05:c5:0f:cb:db:52:84:79:fa:48:
01:5d:d0:27:e5:b0:7a:1a:2e:e3:16:bc:4c:da:f1:
d2:66:80:60:92:87:50:2f:e1:9d:6c:93:aa:21:f3:
05:3c:f6:71:83:0e:0a:fc:d6:e6:0e:d5:44:51:d1:
8e:10:ed:69:7c:03:87:f5:7c:54:2c:e2:83:8c:37:
2b:85:d0:26:d5:ae:07:b6:9a:ef:02:79:df:5e:c8:
96:10:72:cd:23:d5:20:91:47:ef:83:91:80:86:f3:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:99:FE:82:C4:D3:7F:B8:60:E9:E2:64:55:44:E4:EA:47:6E:C2:6C
X509v3 Authority Key Identifier:
keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a7:31:b4:49:ce:47:b2:34:69:bd:80:ac:59:ce:cd:39:33:
21:fb:03:7a:d5:c1:87:3e:02:2b:2e:f4:34:b2:96:41:f2:1d:
ae:d9:c5:dd:86:33:bc:fd:fa:a9:3c:1a:ce:ff:c0:ec:66:b4:
be:b7:74:83:37:eb:a8:b7:03:7b:2c:1e:7d:54:58:af:e7:c2:
39:51:ad:18:ca:5b:65:2a:73:bb:3a:85:e4:b9:28:71:6f:eb:
1f:d2:b9:92:93:48:52:c6:54:6d:df:c0:ac:b7:c8:f0:f9:3f:
2b:0e:5c:61:2a:c0:c0:d8:55:53:f7:62:76:02:7a:02:8e:d8:
8b:a2:64:70:03:10:64:86:e9:21:1a:db:60:0d:d5:de:fd:57:
e8:b6:b4:d8:bf:84:9e:76:26:ae:da:f5:35:7a:6c:11:e1:b2:
78:4d:73:ac:ac:ec:90:f5:8e:53:e2:41:4b:87:cb:a1:ed:c3:
d5:f7:a6:8f:1c:a6:1c:0f:e6:45:fc:7d:c9:bc:4b:07:3f:7c:
a5:9e:8a:24:be:05:ac:74:af:ab:bf:0f:d2:99:b4:b3:a3:ff:
6f:33:81:99:81:c2:c6:73:16:a7:45:66:13:a4:46:7b:a7:2c:
db:f2:b6:ae:b9:d8:7c:3d:8d:a3:07:74:2d:50:da:e4:b6:75:
5d:cd:93:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:40:52 2025 by rpki-client