Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/br5LvPAh3qC25uv5le-_vMirU9E.roa
File: br5LvPAh3qC25uv5le-_vMirU9E.roa (raw, json)
Hash identifier: d5eKzHAQ2jh203ot8SX9ieqegHwAZyoAukOsm+PkxYo=
Subject key identifier: 6E:BE:4B:BC:F0:21:DE:A0:B6:E6:EB:F9:95:EF:BF:BC:C8:AB:53:D1
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 0194266BC5BBF64BCBD4414BC79536881D47
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/br5LvPAh3qC25uv5le-_vMirU9E.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.30.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c5:bb:f6:4b:cb:d4:41:4b:c7:95:36:88:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ebe4bbcf021dea0b6e6ebf995efbfbcc8ab53d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:9e:ac:10:0a:4b:4a:3d:14:68:f8:e8:d0:
75:73:ca:de:92:3b:fb:be:6a:eb:cd:06:af:35:9c:
97:86:ba:9e:9d:14:8f:a8:5c:a0:09:0e:af:98:0f:
f7:1e:9e:f2:8c:45:97:cb:cd:c2:5f:c2:e1:72:70:
f3:0b:48:7f:04:6d:15:be:66:58:69:94:3d:88:06:
d6:97:a4:1e:cd:5c:40:7f:62:39:22:4c:98:28:cc:
d9:95:76:f7:92:ea:c6:bc:66:30:05:bc:07:7b:fd:
5c:17:bc:c4:e7:fb:ad:a5:ea:13:84:ae:03:c0:8f:
b9:21:55:14:6a:95:3f:d9:44:7e:30:89:bd:be:eb:
a5:df:7b:c5:a3:6d:61:4b:0b:2b:96:f2:39:7f:97:
b3:38:65:5f:a8:f7:1c:c3:f0:50:d2:c7:36:d0:b4:
9b:7f:62:2c:ad:cb:e9:90:af:5f:41:c9:30:87:77:
82:1b:c3:e5:ef:5e:91:23:50:27:a0:7c:e4:62:19:
04:f0:97:7a:ff:3b:34:e7:6f:e5:58:b6:9f:b7:51:
4b:8d:55:fb:49:e4:d7:85:a2:59:22:ca:5d:13:af:
7c:65:03:a7:3c:3b:b5:e2:a0:a6:e9:bf:c8:b0:9a:
72:66:d5:58:98:94:2e:89:81:c5:45:18:9c:3f:1a:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:4B:BC:F0:21:DE:A0:B6:E6:EB:F9:95:EF:BF:BC:C8:AB:53:D1
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/br5LvPAh3qC25uv5le-_vMirU9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e4:5b:14:ed:da:90:fc:ff:53:3b:cc:29:1f:94:76:52:4e:
1d:ba:03:41:32:4b:7a:ed:3a:db:4b:a8:d7:52:1c:20:53:e9:
ef:28:38:98:89:66:59:02:86:9a:e1:77:0f:92:36:9a:a5:74:
f6:a5:1d:eb:7d:e2:60:36:b0:0f:cf:38:b7:ea:01:af:19:d0:
01:3d:50:f1:6d:17:96:48:ea:56:b3:91:3d:5f:e5:24:f0:47:
e4:09:88:0b:2d:07:df:b7:fa:aa:e6:57:76:0b:9f:5e:b4:6b:
a2:78:bc:88:06:5a:0a:45:2a:21:97:c9:cf:af:32:56:ce:49:
1a:57:38:b9:68:de:3d:fa:d0:6d:6e:b1:bd:cb:53:41:1d:71:
a2:c6:2e:d2:54:fd:54:dd:e1:87:5b:10:32:ff:2a:c0:ec:fa:
22:85:b5:9a:31:d2:5f:82:46:63:e1:00:2e:c9:ee:bb:9f:2b:
79:79:4f:8d:9e:d9:8e:4a:87:21:28:fd:b5:61:11:42:8c:ee:
4a:71:f2:b7:db:11:af:bb:e2:72:ff:a4:97:06:99:aa:7d:6c:
1a:22:a9:be:2b:54:21:20:82:41:20:32:d4:2f:0f:a1:b3:93:
11:15:bb:42:80:82:38:17:ff:95:43:0b:50:fc:64:6d:8b:5b:
02:9b:eb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:12 2025 by rpki-client