Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/FIuiasWdjO3SZ5YCZyp495O6-Mc.roa
File: FIuiasWdjO3SZ5YCZyp495O6-Mc.roa (raw, json)
Hash identifier: AdKefC+I7JKd6sZS8fd83sJqmU6HrKCEQYygObuAMT0=
Subject key identifier: 14:8B:A2:6A:C5:9D:8C:ED:D2:67:96:02:67:2A:78:F7:93:BA:F8:C7
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 019420D63FBDBFE5A96AB8F87D28B176CC7E
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/FIuiasWdjO3SZ5YCZyp495O6-Mc.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 5.61.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3f:bd:bf:e5:a9:6a:b8:f8:7d:28:b1:76:cc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=148ba26ac59d8cedd2679602672a78f793baf8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:e9:5a:aa:6b:10:ff:b0:83:69:fb:15:a1:
55:f2:c2:b8:62:13:57:b2:1c:0f:43:61:ea:09:8a:
00:53:f2:38:2c:4c:58:e7:c1:39:36:b9:46:5f:49:
95:24:4d:b1:90:42:15:8c:25:11:f4:a1:78:60:ff:
72:15:22:96:f5:ee:cd:75:6f:3b:12:fe:31:c5:96:
67:fc:28:c2:ce:42:07:42:87:b7:c2:40:0f:6a:5e:
04:b1:34:69:f6:63:10:6f:f3:67:e8:21:13:47:71:
df:9d:68:81:7f:67:66:9e:fc:03:0b:4d:fb:4d:7a:
ae:ff:0f:e9:32:94:3e:8f:9d:49:ca:ed:83:af:f6:
0e:8c:19:dd:98:0b:4f:8f:39:f1:37:72:bc:99:9a:
2c:6f:ed:3d:b6:71:54:21:2d:54:4c:1a:c9:38:10:
51:4d:b5:94:69:24:8b:21:8f:76:bd:e3:da:a3:8b:
cc:e3:da:b9:f0:32:c4:ab:a0:73:1c:a8:44:cf:e0:
8e:0e:c4:44:5a:b2:9b:c8:1e:bc:f8:a8:2c:3b:de:
5a:29:a4:50:14:35:cf:6b:1d:a9:62:0a:3a:0e:e6:
f8:8a:10:1b:b4:4a:e1:bd:a2:7d:38:e7:50:8f:9b:
4d:3b:1d:de:ee:67:1c:5e:12:1f:0c:03:e7:5d:94:
dc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8B:A2:6A:C5:9D:8C:ED:D2:67:96:02:67:2A:78:F7:93:BA:F8:C7
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/FIuiasWdjO3SZ5YCZyp495O6-Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.119.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2b:bc:96:58:de:36:ec:17:17:2a:60:dd:84:f5:97:8e:85:
9d:6e:b1:14:f9:4f:08:b6:56:d9:b0:90:89:b8:57:cb:29:fa:
ad:5e:fd:65:dd:d4:08:12:f5:4d:c9:ec:e2:e8:1b:cc:58:2d:
2a:9b:46:58:db:65:33:b0:bc:24:f1:b4:c0:f7:d1:c7:d8:5c:
17:0b:a6:5c:fe:7f:4e:64:82:5f:a6:10:bb:2b:fc:f8:16:64:
b7:8b:74:37:42:87:d1:bb:51:13:33:4c:38:6d:5f:04:96:82:
39:f8:59:6f:ea:10:67:71:1c:99:c6:ab:17:a4:09:72:cb:bc:
fc:96:c2:6a:69:71:32:f3:08:10:86:91:02:40:e9:8c:de:91:
ae:f5:71:6c:ad:2a:88:b3:fd:2b:0f:6d:54:7a:6b:cc:90:53:
62:5d:8a:5d:dc:de:a4:85:6a:9a:84:68:63:65:10:33:5f:d1:
85:76:44:d9:f8:72:60:b6:c0:2e:95:fb:78:e9:de:24:50:77:
a2:89:54:86:d8:af:87:5b:a6:bb:a1:5a:d3:a2:c4:1b:e6:1f:
d5:af:96:b1:d1:f5:94:5b:a9:36:b5:3f:6f:97:21:de:68:c7:
af:6a:2f:13:d3:48:ff:b8:d6:34:18:87:1b:88:a7:32:76:56:
2a:de:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:30:52 2025 by rpki-client