Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/5iyAYLxEjuNDAzPUPss-1f8MNx4.roa
File: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (raw, json)
Hash identifier: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=
Subject key identifier: E6:2C:80:60:BC:44:8E:E3:43:03:33:D4:3E:CB:3E:D5:FF:0C:37:1E
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 01942823EB2D8860FB1D5301AA8A833DC375
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/5iyAYLxEjuNDAzPUPss-1f8MNx4.roa
Signing time: Thu 02 Jan 2025 17:50:30 +0000
ROA not before: Thu 02 Jan 2025 17:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44716
IP address blocks: 185.219.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:eb:2d:88:60:fb:1d:53:01:aa:8a:83:3d:c3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Jan 2 17:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e62c8060bc448ee3430333d43ecb3ed5ff0c371e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:7c:23:96:c7:a7:60:bf:04:8c:e0:50:ef:
8e:85:78:91:b2:a8:d2:d6:f8:a1:0a:e2:f2:b0:9e:
f6:99:fd:7e:d8:b2:fd:93:de:f6:16:4e:d0:d2:99:
a3:3b:ae:ed:91:0b:21:51:48:a1:84:a2:bd:4d:fb:
29:7d:12:d6:01:f8:c8:b9:d0:cf:76:13:17:49:21:
20:55:2a:7f:7e:d4:a4:58:22:9e:be:4c:c3:e7:69:
1a:2e:0c:78:52:d8:8f:dd:c8:53:28:06:1b:37:9c:
3f:a7:44:15:49:0a:5d:53:bb:f2:ee:1b:8c:05:18:
2d:06:eb:c6:fa:d9:a8:4d:b1:25:d7:65:ec:92:b5:
9d:98:73:cc:6e:c7:22:98:28:fc:63:a9:99:b5:89:
a4:5a:a6:52:db:bd:54:11:3f:ee:02:dc:4b:60:22:
64:5c:8d:45:2f:48:7e:fa:af:04:17:4c:82:15:6a:
44:1f:86:0f:ef:d2:ad:91:f1:a9:82:d2:ac:c9:b4:
a6:b1:69:7f:27:fa:0c:c0:60:64:e5:ab:38:c4:7a:
f8:b4:fd:2c:da:8e:6e:ff:32:3a:84:49:c2:91:cc:
f8:10:64:28:56:89:a0:bc:6c:b7:bb:09:43:9d:a7:
b1:21:88:d8:f0:70:74:fe:bf:3f:e2:22:b8:cd:38:
81:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2C:80:60:BC:44:8E:E3:43:03:33:D4:3E:CB:3E:D5:FF:0C:37:1E
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/5iyAYLxEjuNDAzPUPss-1f8MNx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.152.0/22
Signature Algorithm: sha256WithRSAEncryption
94:fc:d8:9c:a0:2e:fa:b1:9a:73:aa:a4:fa:e9:3e:d1:60:1d:
7e:24:99:40:ea:47:85:c5:9e:59:34:84:a8:0f:e2:61:c4:6e:
5b:44:df:9c:bb:58:92:43:c6:6d:69:81:73:af:5c:e6:55:97:
dd:f4:77:af:38:49:12:d7:3f:1c:8d:dd:17:9f:41:31:79:32:
67:01:96:3a:99:8d:a0:f1:14:a7:3c:ed:e3:f6:35:c0:da:1b:
c5:17:3f:69:c8:dd:2a:76:ac:ca:74:5f:66:fb:0e:4d:43:e3:
98:08:b3:ab:b2:44:81:01:47:d2:8b:1c:ef:9d:b5:e1:34:ad:
6d:f6:b0:53:df:8d:da:9b:6a:bc:7f:bb:31:0e:e8:69:ec:e1:
d2:a5:5d:17:71:36:54:c4:b4:85:a3:ca:dc:c7:0a:28:b9:5e:
e5:51:fc:54:73:7d:e3:b8:72:90:f5:a5:2b:f1:f5:1b:bb:8a:
1b:fb:34:46:23:46:80:f1:5f:30:3a:2f:a8:e3:0d:28:e4:a9:
01:50:fd:5f:42:2c:8d:c1:de:c1:32:42:d1:06:6d:c8:69:b0:
53:7d:33:6a:b2:aa:b0:cd:7f:3f:10:09:aa:ac:1e:86:f0:d1:
23:7d:41:7d:12:a2:ee:26:ae:34:27:2f:51:31:d6:e9:61:a1:
02:19:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:40 2025 by rpki-client