Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/EJJjIWEkSJVR16lMZ3JAA3Erae4.roa
File: EJJjIWEkSJVR16lMZ3JAA3Erae4.roa (raw, json)
Hash identifier: cEYNtBA9K74UcwqPRIFv+v9Gz/Ga0WnXLgpuQ29y8a4=
Subject key identifier: 10:92:63:21:61:24:48:95:51:D7:A9:4C:67:72:40:03:71:2B:69:EE
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C497E471BECD847D47B15598C8F56
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/EJJjIWEkSJVR16lMZ3JAA3Erae4.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49596
IP address blocks: 5.202.34.0/23 maxlen: 23
5.202.36.0/23 maxlen: 23
5.202.38.0/24 maxlen: 24
185.103.128.0/22 maxlen: 22
188.253.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:49:7e:47:1b:ec:d8:47:d4:7b:15:59:8c:8f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=109263216124489551d7a94c67724003712b69ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:60:72:aa:94:e4:7f:3c:76:6b:2c:3a:23:
1c:48:69:cb:c1:82:f2:80:84:f1:dd:ad:e5:66:38:
a1:89:72:68:d3:82:1a:e3:d3:7c:6c:22:b5:96:38:
cb:f7:b3:f2:2f:41:54:4a:b9:a5:6b:5b:6a:b0:13:
aa:e7:5d:a6:6a:84:60:d0:08:99:14:d3:c4:e3:1d:
fe:d0:df:6a:e0:3b:c3:91:e7:4e:55:ed:28:79:41:
78:32:3c:27:60:74:65:c2:9e:23:7f:f5:3a:a4:3b:
2b:ae:25:88:84:1b:ea:1d:7f:fd:55:2f:e4:2c:c8:
53:e6:21:15:04:fa:44:24:cc:48:87:d8:60:91:fb:
d9:27:b8:2d:df:d2:cf:51:e3:d8:a4:60:57:22:ea:
0f:73:d2:76:7e:13:6a:a7:3e:af:7e:e4:22:f2:d5:
cd:15:b0:58:b3:69:fc:c7:4b:a3:02:fd:39:7d:75:
45:f6:3a:e5:9e:c6:a0:81:2d:f1:ef:d3:ee:80:c4:
d3:d3:5d:3f:7a:94:2e:2c:c3:6d:d3:b7:b2:16:91:
c3:c9:86:7a:c0:b7:f6:22:a7:77:99:6b:62:91:97:
c9:1d:6c:7e:d2:b7:fd:bb:b7:76:fb:d3:6a:64:7a:
e8:8d:76:f5:90:d8:37:1f:0f:b2:1c:2f:2d:e6:ff:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:63:21:61:24:48:95:51:D7:A9:4C:67:72:40:03:71:2B:69:EE
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/EJJjIWEkSJVR16lMZ3JAA3Erae4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.34.0-5.202.38.255
185.103.128.0/22
188.253.84.0/22
Signature Algorithm: sha256WithRSAEncryption
32:c2:86:ad:c4:3a:0f:b1:60:8d:9b:ca:7b:44:5d:ce:d3:a7:
6e:10:73:5b:df:ea:e2:27:3d:62:5d:69:58:35:78:3e:ea:93:
bc:cb:9b:69:f7:62:aa:7e:ba:ae:02:b0:10:6d:6e:af:21:b6:
dc:bb:f5:15:c6:5c:da:f0:ec:8e:7b:03:52:be:9a:32:6a:eb:
97:28:af:f5:02:ae:05:3d:ab:52:07:4e:a6:5c:c9:37:e6:34:
90:8b:16:08:4d:fe:2f:ea:94:24:af:fc:4a:fe:99:48:ad:72:
09:13:05:19:04:7d:02:d9:5f:09:6b:c9:30:69:d6:0c:0e:38:
b2:22:77:53:2b:c6:ea:ff:a2:99:1e:6f:ea:26:ac:a0:94:fb:
05:a0:b2:29:62:f7:d7:f6:fc:9f:75:86:93:fd:89:17:fa:63:
a1:8b:2e:ab:10:d8:5b:60:c8:3b:2a:d6:12:6b:18:d6:40:fa:
57:ad:28:15:f8:3f:75:95:d2:e5:d8:5d:f3:4f:2b:c7:61:43:
47:c3:6d:bd:7f:1b:08:95:9c:c7:a1:f3:c8:df:c6:16:f2:7e:
3c:4f:ba:c1:4b:5e:e7:ac:3c:ca:b3:81:14:e0:74:d3:69:52:
a4:6c:d9:9a:98:72:0e:ca:47:b7:37:44:16:ba:47:0c:8e:24:
a8:15:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:20:41 2025 by rpki-client