Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/as57UZV986n6VRNtG6RRqjdPhF4.roa
File: as57UZV986n6VRNtG6RRqjdPhF4.roa (raw, json)
Hash identifier: bAxzeajNU06FeyC+mfOJtGJLhcgc+9AxJO6pNZ7A/CI=
Subject key identifier: 6A:CE:7B:51:95:7D:F3:A9:FA:55:13:6D:1B:A4:51:AA:37:4F:84:5E
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 0194266C354EB29860EE0B50ABFBA8127863
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/as57UZV986n6VRNtG6RRqjdPhF4.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39130
IP address blocks: 5.102.38.0/24 maxlen: 24
195.5.124.0/24 maxlen: 24
2a10:d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:35:4e:b2:98:60:ee:0b:50:ab:fb:a8:12:78:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ace7b51957df3a9fa55136d1ba451aa374f845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:af:5d:27:1b:56:8d:8e:c9:58:6d:18:40:
4d:d0:2b:5a:47:6e:75:37:d9:db:4c:7e:0a:a0:ce:
76:61:e1:e8:60:10:92:9e:b9:b2:eb:39:b0:e1:9b:
40:e6:3e:ea:b1:72:f8:0c:0f:bb:8b:03:09:c2:f8:
57:d3:25:9a:5d:f8:da:67:eb:15:40:76:bf:35:ab:
31:52:f8:47:c1:26:01:29:d7:12:f8:37:65:43:53:
0f:e6:d8:82:c1:d6:fc:a1:c1:c8:96:fb:b4:15:37:
8b:35:1e:7e:36:f6:9d:f5:35:01:b2:4f:9a:14:7b:
0f:93:f2:32:52:71:d4:80:1e:cb:70:2c:97:f7:26:
fd:10:1f:d6:6a:f8:1b:d7:fd:5b:a8:47:57:9f:45:
c7:40:02:f1:87:3e:60:59:b8:5b:69:b5:6a:2d:5d:
c6:80:a5:2b:94:9f:fb:53:75:ce:37:63:8b:6e:56:
24:00:6f:50:3f:ba:5d:7c:be:3b:21:2f:29:87:62:
c7:7a:c1:f5:f9:4e:2f:da:85:dc:eb:fb:5d:7a:fd:
cb:c2:89:aa:a5:c1:66:6b:82:b3:3f:a8:1f:3f:74:
88:8e:b2:f6:d9:02:75:10:56:af:c5:ed:dc:cf:4c:
4b:c9:f3:95:78:74:dd:7a:84:e1:22:71:99:e6:50:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CE:7B:51:95:7D:F3:A9:FA:55:13:6D:1B:A4:51:AA:37:4F:84:5E
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/as57UZV986n6VRNtG6RRqjdPhF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.38.0/24
195.5.124.0/24
IPv6:
2a10:d80::/29
Signature Algorithm: sha256WithRSAEncryption
5f:95:b9:f3:39:e1:bf:35:26:68:7c:e7:96:81:51:d1:8b:fe:
c3:db:40:db:2f:6a:fb:89:fd:b8:fc:f2:59:33:85:9f:5b:9d:
a8:e9:78:e1:66:1d:c1:7d:68:70:27:31:c8:ad:24:bf:96:55:
e6:da:f4:30:ca:a6:c8:b9:14:20:c4:09:a4:ad:8b:83:62:30:
cb:a8:36:53:2c:63:90:da:d5:4e:2c:51:fa:71:8d:08:a5:31:
01:e2:15:43:ea:23:9d:ea:89:70:a1:12:7b:6d:ce:81:e6:aa:
e6:41:e9:8b:96:39:99:89:2e:61:5e:27:84:41:8b:e7:3b:d6:
ce:34:90:d2:95:ed:ff:b8:45:29:cf:c7:f0:4c:52:56:cb:25:
c4:e3:b3:80:05:24:d6:0f:53:f4:92:ed:8e:69:3c:80:5c:96:
65:c6:7f:73:ce:2b:4c:ba:6f:f6:b1:45:1b:28:52:f1:96:12:
73:61:99:9c:22:20:37:df:f2:c1:92:5b:42:a5:d9:e4:1e:5a:
b6:d5:b2:d3:b9:23:22:65:75:79:0e:ed:7a:58:2a:2e:b0:a2:
f2:02:41:a7:7c:96:82:d1:b3:f1:f3:d8:ee:b4:bb:25:1a:16:
5d:02:ef:98:75:73:77:d3:1b:d4:99:06:38:0e:7b:14:e2:22:
58:04:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:38:40 2025 by rpki-client