Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa
File: 5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa (raw, json)
Hash identifier: 3KM64Cf6ndit+2Kg00oB3Tn7DU/3A/UJsq/nZfbmrTw=
Subject key identifier: E5:FE:23:1E:7D:69:2E:9F:7F:73:3C:B4:3F:AA:B8:99:64:0F:B9:A4
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019427477C31CC152F33105325D76E808283
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa
Signing time: Thu 02 Jan 2025 13:49:43 +0000
ROA not before: Thu 02 Jan 2025 13:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16278
IP address blocks: 89.30.224.0/22 maxlen: 24
2a02:20b2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7c:31:cc:15:2f:33:10:53:25:d7:6e:80:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 2 13:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5fe231e7d692e9f7f733cb43faab899640fb9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:6e:a5:e6:dc:59:57:82:b7:ea:69:e6:ac:
5e:27:0a:cc:05:d2:3e:e2:3e:39:f1:d8:53:f9:85:
ed:c0:18:f9:dc:cb:96:13:63:5f:8c:b9:f8:75:21:
ac:14:50:4e:be:48:f5:62:f9:0f:18:77:f2:6d:6b:
f1:e1:77:5b:3a:ff:f4:21:9a:d2:14:b3:0c:0e:3f:
e4:27:32:ce:d0:35:f7:b6:17:96:d2:80:f6:fd:3e:
3c:99:4a:0a:f4:9c:2a:e0:2c:32:f6:0a:a1:d3:af:
22:2a:18:fd:1d:35:ae:ac:9d:7e:86:a3:0c:f2:33:
2c:a0:2b:45:44:2a:15:d4:71:d3:0f:2e:d1:e1:d6:
dc:cb:5d:1e:d0:96:83:f7:74:b1:a2:5a:26:3f:53:
48:72:f8:d2:97:ff:77:17:89:f8:89:62:27:37:8b:
14:a9:be:b4:2a:40:a4:d6:dc:5b:15:6d:28:5d:a3:
aa:dc:94:00:5a:a5:f7:3e:78:34:ea:8e:5d:19:3e:
71:fe:67:cf:71:99:a1:52:9e:ca:ea:1c:79:16:7d:
7d:e4:71:5a:74:24:a8:e0:e5:38:ce:72:98:cb:8a:
31:11:1a:bd:9c:85:fa:83:4e:c7:7a:52:e2:a7:e7:
c5:16:b5:26:f9:5f:fa:35:6d:a7:35:1f:9f:c8:bf:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:23:1E:7D:69:2E:9F:7F:73:3C:B4:3F:AA:B8:99:64:0F:B9:A4
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.224.0/22
IPv6:
2a02:20b2::/32
Signature Algorithm: sha256WithRSAEncryption
33:0b:1f:2a:fc:8c:0d:50:aa:af:56:49:38:38:bc:a2:c9:91:
5b:b0:47:b5:75:8b:1e:76:e7:03:cd:eb:2e:00:02:cb:47:63:
64:68:bb:fa:10:2d:32:64:ec:31:1f:89:57:5d:b9:b8:64:f5:
7c:93:0a:de:57:d1:1f:54:8c:37:b9:cf:b2:84:76:3d:81:74:
69:e7:1e:86:ea:03:6a:c8:5c:41:10:66:54:ba:d4:ad:b2:2f:
a5:07:7d:89:e0:83:d1:1e:27:dd:40:17:b7:ae:85:c1:a2:b1:
dd:4b:09:01:81:3c:11:4a:88:3c:c2:2e:a4:f3:a5:33:41:f4:
6a:98:ac:99:65:bd:b1:a6:c4:f0:2a:26:74:e8:9e:46:ba:7b:
d6:3c:02:67:b2:9e:f1:5d:3c:e1:9e:f8:23:5e:1b:bc:19:ee:
7f:18:0a:af:f9:e8:00:9c:2c:6c:17:e5:e8:0c:a9:1a:1d:5a:
9e:2a:5b:1b:ad:64:a6:10:40:ad:7e:63:d4:45:1e:f5:d7:ea:
4e:3f:4f:c3:70:b8:8c:9d:4e:cc:b2:c4:58:88:99:8e:a8:de:
b0:72:c5:e7:85:6c:bd:7a:49:19:20:b2:4b:de:24:ab:a0:c4:
1e:21:be:9c:36:fb:f8:66:87:6e:84:05:10:74:d0:2f:e4:01:
56:1d:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:29 2025 by rpki-client