Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/5nVywX0q3zm6oXWCVu8WRul5gBI.roa
File: 5nVywX0q3zm6oXWCVu8WRul5gBI.roa (raw, json)
Hash identifier: j6Bgci3OWlWF+CsJxNlRE8c4KeKRm3u2085jmzGreuI=
Subject key identifier: E6:75:72:C1:7D:2A:DF:39:BA:A1:75:82:56:EF:16:46:E9:79:80:12
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 01953C243C511A2AFE69107F3DFB194F8B47
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/5nVywX0q3zm6oXWCVu8WRul5gBI.roa
Signing time: Tue 25 Feb 2025 08:06:02 +0000
ROA not before: Tue 25 Feb 2025 08:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214099
IP address blocks: 89.18.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:24:3c:51:1a:2a:fe:69:10:7f:3d:fb:19:4f:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Feb 25 08:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e67572c17d2adf39baa1758256ef1646e9798012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:e7:bd:c2:af:cb:da:ee:06:09:5c:f4:f0:
1b:98:d6:18:4b:7f:ba:6d:9a:5d:74:a7:fb:23:64:
43:f0:fb:64:48:e0:9b:00:bd:c4:e5:fa:cd:4c:82:
19:80:2d:8d:22:dd:0f:43:d5:6a:ef:12:d2:35:85:
66:8e:d7:39:48:03:c6:9c:d0:d2:5f:57:f1:4e:56:
e8:19:84:aa:ce:13:04:d9:46:ef:47:70:7d:ff:10:
bc:f9:6a:49:02:87:24:31:bc:db:09:1e:b0:27:60:
cc:63:66:f2:e8:f5:e0:75:03:fa:12:8b:5a:5d:37:
6e:56:b9:8e:f8:fc:d6:a7:34:5c:ce:f2:44:bb:93:
21:17:e7:73:41:fe:fa:76:ef:34:eb:a8:fe:02:93:
55:cb:ff:93:68:09:c3:ba:b7:04:36:a7:f2:c9:cf:
02:43:84:f8:d2:61:9d:75:95:44:5d:62:15:4a:29:
0d:8d:88:05:37:c3:73:1e:fd:3e:f5:75:4c:18:d6:
97:76:f1:8a:d0:9c:fd:c6:63:38:2e:a7:7d:8a:5a:
e9:64:ce:dc:05:37:1a:c4:99:89:44:f8:f2:5b:93:
29:db:e1:e7:24:07:45:e4:ed:0a:24:fa:a5:a3:7e:
8b:ba:fd:b6:59:32:83:2e:ff:b1:05:31:da:ac:c5:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:75:72:C1:7D:2A:DF:39:BA:A1:75:82:56:EF:16:46:E9:79:80:12
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/5nVywX0q3zm6oXWCVu8WRul5gBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.52.0/22
Signature Algorithm: sha256WithRSAEncryption
09:37:40:d2:e7:b7:39:62:01:80:f9:d2:b8:86:2a:e7:a9:c1:
7b:e2:86:91:7c:a0:42:b2:d3:17:94:5a:94:53:d5:2f:c7:98:
10:ac:2b:09:5c:2b:ec:c1:92:85:6d:e7:8a:81:c2:4f:81:59:
7f:52:1f:99:89:00:ea:f4:24:9e:ec:61:99:82:70:6a:ce:f5:
55:82:ee:9e:f6:24:f5:14:92:98:eb:14:9e:51:c7:6e:8e:fe:
8f:10:aa:96:4f:ce:ea:13:bd:4d:d4:d9:eb:dd:8d:b8:24:76:
7e:48:c6:54:4a:24:2a:8a:b8:f3:2b:99:13:d6:9a:53:5c:4d:
e2:36:dc:7c:55:c0:fd:f4:38:4d:05:0c:f2:ad:06:e8:e9:e2:
1a:7b:d3:45:1f:22:4a:7c:56:e7:9e:db:d5:a6:b9:70:9d:58:
12:b7:02:19:c2:ac:91:d2:63:14:8a:69:35:ab:0d:b2:34:0d:
1b:17:9d:33:42:e3:ec:fc:39:cf:71:d4:fd:e8:10:a3:20:9b:
76:97:e0:83:5f:57:a0:df:7b:a1:f2:44:eb:5b:6f:76:70:48:
23:0f:c9:d9:79:2f:1e:f5:f9:f2:48:22:6e:52:99:4c:18:43:
24:49:85:08:8e:eb:61:ef:4c:09:64:64:63:15:c7:4d:08:f3:
07:47:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:18:44 2025 by rpki-client