Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa
File: 5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa (raw, json)
Hash identifier: rJBWopYkkYdyW3mSVPW+i2geLeI7RuDFMOG3B57hJQA=
Subject key identifier: E4:AB:3A:47:A0:0D:3C:EB:AA:0E:2E:AF:A0:D8:49:1A:E0:99:31:6F
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 0194228DFBCEC0CDEA5112A008C229EFF35B
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21422
IP address blocks: 193.110.240.0/21 maxlen: 21
193.110.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fb:ce:c0:cd:ea:51:12:a0:08:c2:29:ef:f3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4ab3a47a00d3cebaa0e2eafa0d8491ae099316f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:bd:a2:c9:7e:d9:11:8f:fd:bc:ce:6d:8d:
0c:40:bf:de:05:94:2e:ce:4f:83:89:b4:33:53:17:
84:0f:46:97:5e:5f:d1:ed:dc:b4:75:55:df:24:f3:
38:b3:a3:64:5f:06:97:c0:86:fe:06:5d:08:df:da:
3e:c8:63:19:52:b3:77:05:cb:57:73:7d:05:18:f0:
54:e4:46:d4:ad:00:c7:ad:d5:05:53:03:9d:3c:da:
65:b4:83:b3:74:e7:18:bc:1e:f6:a4:ef:af:ad:68:
ff:95:1d:76:a5:d7:63:9c:77:73:46:c1:38:46:40:
d7:02:dd:06:91:17:02:d4:61:e5:16:08:27:9f:ac:
66:0a:8b:15:23:da:37:19:80:90:f7:d0:6e:c0:75:
e3:a6:ac:d2:ce:7f:af:fd:c8:44:9c:f8:5e:7a:22:
e3:43:8d:37:30:21:ed:a6:a7:3c:ce:38:d2:8d:e9:
b6:de:33:6a:28:f2:89:3a:c1:01:62:5c:ff:4f:ed:
6a:7f:f5:fe:50:29:4e:ed:d9:a7:d7:34:6c:b7:19:
43:b0:97:41:fa:c6:66:41:de:de:e7:ed:16:a1:70:
91:5b:d9:09:5a:5b:da:b9:6d:90:91:27:c7:75:3e:
66:7f:ed:60:b7:73:04:bf:30:95:f6:5c:92:1e:9c:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AB:3A:47:A0:0D:3C:EB:AA:0E:2E:AF:A0:D8:49:1A:E0:99:31:6F
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/5Ks6R6ANPOuqDi6voNhJGuCZMW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.240.0/21
Signature Algorithm: sha256WithRSAEncryption
60:1e:8d:5c:12:46:2e:e0:39:93:4a:3b:89:71:ec:fc:16:4e:
e4:58:a0:3f:3f:3e:fc:1d:da:42:56:f9:2d:9a:a1:4f:6f:fd:
67:db:ad:d5:71:d7:e2:0c:45:67:ab:02:c1:70:08:59:aa:31:
4e:59:5f:f4:db:ee:57:fb:da:f9:4b:a9:77:97:80:19:31:1a:
a4:4c:99:b9:d7:8e:74:4f:fc:8c:ef:a0:04:e3:e2:a5:95:b9:
50:80:12:b2:a9:ef:54:87:87:d5:ea:66:ff:e0:a9:e2:39:0d:
f0:ac:38:c6:2c:5b:4a:bf:ee:e6:51:b6:9e:2b:03:25:37:b0:
4e:d1:47:91:0a:c5:d9:23:05:98:70:5f:0f:2b:25:ed:67:e2:
22:21:d9:4b:ab:d7:31:fa:08:e3:a8:be:02:ac:8d:21:c4:f0:
30:34:91:a2:02:e2:0c:99:97:ca:81:a2:b8:0e:0f:50:f8:e7:
62:05:98:bf:c3:50:aa:04:89:3b:8c:fb:0b:20:fc:f7:e4:b0:
e9:dc:ee:3b:a4:a9:74:59:1e:b9:a9:a7:df:ab:67:3b:61:3c:
77:1f:2f:0b:de:2f:a9:7f:bd:6c:d1:04:e9:a9:2d:0a:8d:bc:
a7:01:23:78:36:7d:6d:26:84:e0:a9:12:c9:80:6a:d2:de:85:
48:96:40:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:26:07 2025 by rpki-client