Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/5jA5Josk9BqU9IUqGDRntTJ49ME.roa
File: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (raw, json)
Hash identifier: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=
Subject key identifier: E6:30:39:26:8B:24:F4:1A:94:F4:85:2A:18:34:67:B5:32:78:F4:C1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019422FB22F215BA5FBC4F322ACB3C61EE89
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/5jA5Josk9BqU9IUqGDRntTJ49ME.roa
Signing time: Wed 01 Jan 2025 17:47:51 +0000
ROA not before: Wed 01 Jan 2025 17:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50304
IP address blocks: 185.247.12.0/22 maxlen: 22
185.247.12.0/23 maxlen: 24
2a0d:b680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:22:f2:15:ba:5f:bc:4f:32:2a:cb:3c:61:ee:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Jan 1 17:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e63039268b24f41a94f4852a183467b53278f4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:d0:4f:bd:ee:d5:db:8d:e7:da:fa:82:d9:
86:5f:24:2c:b8:8c:60:12:ec:e4:a6:8a:60:84:15:
bd:48:cd:c9:45:fa:94:fd:15:76:62:5b:ee:89:2c:
6c:e7:d4:16:32:ee:34:56:7e:27:af:2d:f5:66:14:
5a:de:e0:58:51:ed:4e:18:11:62:10:5a:b1:16:2e:
b6:f9:35:17:84:42:66:f3:da:e8:b2:f8:cd:55:8f:
65:bc:5e:4f:a7:3e:9e:b1:8d:86:04:08:f0:c8:4c:
1a:19:2c:0b:38:4d:47:20:c3:09:2f:8e:eb:77:0d:
0f:ab:54:a6:50:57:a8:6f:57:5d:1d:ba:3d:60:56:
7c:f0:93:8c:2a:46:8c:43:26:19:eb:6a:ae:b7:a6:
3e:c7:cf:15:4f:91:71:a8:42:a9:0a:f3:e7:ce:11:
41:4c:c6:e6:c1:51:ea:e9:b0:44:52:b0:ac:a0:90:
0d:cb:4c:85:a8:1e:ec:b0:52:06:93:f9:5c:e0:9c:
9d:c4:7b:de:82:d0:93:65:c4:72:9b:6c:cc:0c:40:
6d:7b:16:08:11:9f:b3:f7:a0:9f:13:33:97:94:da:
a5:62:61:6e:d3:a1:c1:78:f4:56:71:4d:c1:69:04:
9d:1f:a0:59:09:45:54:06:fc:7f:25:95:f6:89:af:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:39:26:8B:24:F4:1A:94:F4:85:2A:18:34:67:B5:32:78:F4:C1
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/5jA5Josk9BqU9IUqGDRntTJ49ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.12.0/22
IPv6:
2a0d:b680::/29
Signature Algorithm: sha256WithRSAEncryption
a9:fe:a9:ef:e7:51:c0:9f:dc:91:7d:e4:3e:36:39:db:a8:cb:
e3:e5:cb:aa:b6:8e:d2:0a:72:59:07:cc:f9:eb:e8:ad:e7:17:
72:04:64:6f:71:34:f0:6a:5e:0e:05:02:91:a8:51:dd:3b:7d:
ec:19:4e:4e:55:89:66:a8:2f:54:cb:ce:a4:8e:af:5e:a9:97:
12:92:e7:e8:6b:65:f3:0e:45:38:24:c9:86:60:63:01:2e:f0:
90:05:f9:37:91:a8:36:3c:85:a7:19:04:54:cf:73:29:b6:ac:
cf:79:b8:89:75:ad:fb:dd:d8:75:d7:c5:b4:52:dd:39:bc:7d:
97:84:f0:95:82:d5:b3:2c:5e:7d:e1:67:72:76:82:65:3e:12:
ce:eb:c6:ba:fb:c7:6b:13:9f:9e:e2:07:06:7c:34:b8:07:8d:
95:de:f5:62:b6:b4:17:bb:c9:a5:65:c5:88:5c:4b:a0:8f:48:
1d:3e:26:14:64:da:f1:21:97:e5:bf:54:4f:7b:bb:53:3e:da:
16:ba:8b:ba:b5:24:4a:e4:14:0d:8b:1d:94:55:ca:ab:90:35:
82:1d:29:6d:cb:e8:11:9a:2c:b1:f8:29:98:a9:cd:10:7c:22:
37:02:d5:30:8c:e6:79:0e:2b:5c:e3:a9:58:10:6a:71:d1:9d:
fc:38:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:19 2025 by rpki-client