Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/iG-a-0OB3JsooDyDHaUQpSdFO90.roa
File: iG-a-0OB3JsooDyDHaUQpSdFO90.roa (raw, json)
Hash identifier: IqjmiS8/sZfMQvXcGWuiejnb14xAQBwKq7ZbApQuIzQ=
Subject key identifier: 88:6F:9A:FB:43:81:DC:9B:28:A0:3C:83:1D:A5:10:A5:27:45:3B:DD
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F99699C10CEC77E9FC0215B171544
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/iG-a-0OB3JsooDyDHaUQpSdFO90.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57784
IP address blocks: 5.133.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:99:69:9c:10:ce:c7:7e:9f:c0:21:5b:17:15:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=886f9afb4381dc9b28a03c831da510a527453bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:a2:da:12:35:35:5c:01:46:13:68:3f:ff:
19:6c:93:08:92:16:83:ee:b6:db:d0:9c:5c:71:b8:
58:7f:71:f7:17:90:8b:55:5e:28:41:4f:51:24:e4:
63:83:e5:91:ad:e5:ad:11:9c:5e:e4:38:c7:c0:e4:
95:37:cc:60:f1:65:21:32:55:cd:b4:8a:b6:fd:3f:
80:7a:26:42:d9:0f:58:f9:24:63:e3:84:13:59:f8:
dc:83:31:b8:31:bc:d4:d1:f0:cd:d8:95:93:fe:fd:
4e:7d:66:93:38:0c:02:64:ea:a1:8a:e8:b3:48:93:
06:3a:76:0a:af:05:6c:26:5c:59:c3:61:6d:5d:c2:
28:90:4a:a2:07:41:6a:d6:30:52:4b:0a:98:90:10:
ce:6b:2d:7e:af:11:07:f1:81:bf:28:0a:e7:bf:26:
67:17:ba:50:b9:4e:80:00:f6:89:b4:b3:de:0a:30:
68:be:cc:0a:c9:1f:5b:71:85:bf:9b:78:ca:bb:57:
91:e9:d6:c8:5a:b4:a7:04:b3:92:9f:65:e1:4e:a2:
c7:2a:a9:d2:8b:4d:99:88:1b:ec:1c:64:92:ad:95:
f1:c0:1c:82:e8:3e:ca:74:b6:bc:a0:a9:dd:9a:95:
3d:a0:af:45:ae:ea:a7:68:fb:06:9b:52:0f:b1:09:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6F:9A:FB:43:81:DC:9B:28:A0:3C:83:1D:A5:10:A5:27:45:3B:DD
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/iG-a-0OB3JsooDyDHaUQpSdFO90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ed:13:69:a9:95:50:38:e6:1c:1e:c7:04:ac:f8:07:cc:23:
b0:20:e7:00:92:25:e2:de:cc:96:05:9e:90:84:ea:2b:74:c4:
29:6c:77:c6:c8:da:5f:5a:a0:03:c6:d9:aa:f6:be:26:2f:1e:
3c:d5:8f:2f:4d:d9:bf:1f:af:66:99:31:0b:e9:56:b6:d5:4f:
ba:6d:36:af:1d:3d:fa:0e:41:7c:fe:c9:12:c8:0d:d4:8a:72:
3f:50:61:72:9f:da:94:b2:10:06:e7:ae:75:69:d1:28:4a:00:
72:30:a5:99:87:54:53:fc:42:bb:cf:f8:a3:77:23:18:32:33:
ec:d2:49:a4:f9:06:4b:e1:22:33:4d:66:b9:87:bb:58:ce:76:
c4:d7:bb:47:f8:bf:bc:1d:6a:af:15:6b:ad:e9:b8:59:10:7e:
f2:7f:e5:49:f2:5c:6e:53:06:34:4c:a6:00:80:0e:63:0d:05:
ff:a6:3d:b1:44:60:da:bf:20:29:57:dc:e7:05:e2:f7:c6:83:
5c:e6:0b:27:34:28:a9:a6:86:4a:73:79:38:7c:e1:b2:85:62:
78:d7:2f:d8:17:6b:bc:0e:21:d9:8c:29:5f:65:d0:f3:f9:33:
29:68:b8:d0:0f:8f:ac:9c:69:91:45:ab:1a:aa:e8:c0:0e:ef:
e1:bb:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:42 2025 by rpki-client