Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/kjCBwq1j9xX1EaDBTI424dSK14A.roa
File: kjCBwq1j9xX1EaDBTI424dSK14A.roa (raw, json)
Hash identifier: y34Z+vhK1gAu2AvvEzAPgCnHcDqbgumJZa/tYihBKvk=
Subject key identifier: 92:30:81:C2:AD:63:F7:15:F5:11:A0:C1:4C:8E:36:E1:D4:8A:D7:80
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C455C395BF3761D9F0E190C3D0289
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/kjCBwq1j9xX1EaDBTI424dSK14A.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39074
IP address blocks: 5.202.136.0/22 maxlen: 22
5.202.136.0/23 maxlen: 23
5.202.136.0/24 maxlen: 24
5.202.137.0/24 maxlen: 24
5.202.138.0/23 maxlen: 23
5.202.138.0/24 maxlen: 24
5.202.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:45:5c:39:5b:f3:76:1d:9f:0e:19:0c:3d:02:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=923081c2ad63f715f511a0c14c8e36e1d48ad780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:bc:e9:dc:71:26:63:54:d6:39:96:b6:91:
68:c5:89:0e:02:90:69:04:af:3c:43:d7:d2:00:46:
36:9d:91:ea:09:a7:5a:90:6d:f3:66:90:7a:00:a0:
22:46:8f:4b:c3:af:29:8a:22:40:61:7e:14:e7:ad:
15:76:bc:97:8d:45:9d:2b:f0:01:b3:8b:7e:7d:67:
45:c1:96:fd:ec:1c:dc:e0:e6:38:c8:51:42:9a:90:
a9:0a:ed:00:c0:34:c1:9e:27:f0:a4:f0:92:39:9f:
f9:95:ac:28:63:6f:68:72:a7:2e:bc:da:30:67:43:
45:5a:f7:a5:d1:60:47:b3:41:2d:f5:51:dd:98:ee:
3d:a4:8d:4b:a3:6c:d5:94:2d:03:e9:c6:24:d1:5a:
f1:6c:cf:0e:b9:32:48:3c:77:ae:dd:9e:71:47:02:
e2:ce:c5:28:85:11:ac:b0:96:fb:17:83:39:0c:08:
c1:95:d5:28:4c:b2:b2:48:b3:2d:77:78:f8:97:21:
29:54:b3:6b:f5:b6:df:74:59:1b:84:89:b6:25:ed:
fd:57:ea:47:4d:1a:10:97:7f:13:23:67:48:f1:55:
74:82:00:6d:27:37:0d:96:e7:85:42:51:0a:7e:61:
8a:7c:dc:3a:83:62:c3:a5:84:02:48:7b:13:79:60:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:81:C2:AD:63:F7:15:F5:11:A0:C1:4C:8E:36:E1:D4:8A:D7:80
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/kjCBwq1j9xX1EaDBTI424dSK14A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.136.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:da:2c:7b:96:20:86:14:c5:23:6f:36:2c:bf:4f:66:53:ae:
75:d9:2b:26:d6:7f:e6:33:aa:44:05:29:de:69:87:a7:c7:e0:
ab:ef:ca:46:bf:d9:ae:38:55:4f:5c:37:9c:33:1f:40:22:e5:
f9:6a:c5:e9:76:60:27:f4:42:e2:06:f7:f4:4c:c2:d3:63:55:
df:23:77:6d:a1:77:c8:ea:74:9e:31:1d:21:0a:58:6d:ec:88:
50:33:24:1b:ca:4a:a8:03:e6:72:2d:f1:b9:88:e7:2c:cd:fe:
60:65:07:f7:d9:5d:ee:3c:8a:10:59:80:91:fc:c1:90:d4:fa:
62:5d:1e:ac:aa:84:74:d1:4d:5d:cf:60:a5:80:9e:58:e0:08:
f3:05:f9:e2:82:02:cb:f3:00:20:4d:d9:90:32:56:aa:e4:ac:
cd:d1:43:97:5c:81:ed:a6:68:8f:f6:bd:b3:4a:f9:65:34:ce:
51:47:40:07:8a:1a:6a:94:54:c0:24:f9:6a:c7:7b:44:d8:d3:
46:ca:53:15:02:80:f9:af:fb:fa:e7:8d:4e:5e:ba:51:d2:df:
1e:62:e0:2a:3a:5f:84:03:7d:e2:94:68:d1:ef:17:61:10:6e:
fd:4a:0c:a1:db:d9:b9:7d:da:b1:1a:b2:b7:d2:8f:44:99:c9:
c2:0e:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:43:23 2025 by rpki-client