Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/xS11sqn1yyKhK8owzSnnVrJ38_4.roa
File: xS11sqn1yyKhK8owzSnnVrJ38_4.roa (raw, json)
Hash identifier: Q8QkF/vYZYfACSyCcmshuktJoPK49D0JpDA/QO1e388=
Subject key identifier: C5:2D:75:B2:A9:F5:CB:22:A1:2B:CA:30:CD:29:E7:56:B2:77:F3:FE
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 019420D641570E635AB5366A2439C3C32BC7
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/xS11sqn1yyKhK8owzSnnVrJ38_4.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199373
IP address blocks: 5.61.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:41:57:0e:63:5a:b5:36:6a:24:39:c3:c3:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c52d75b2a9f5cb22a12bca30cd29e756b277f3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ab:15:20:18:66:34:19:91:dc:29:3a:0f:47:
9a:38:ca:1c:3f:e6:bf:6f:f3:b0:37:42:cb:52:7e:
a0:83:7f:e7:8d:bc:44:a3:67:78:06:f8:e9:ad:6b:
04:00:6b:f9:3f:a8:9a:90:b5:62:08:b3:f7:e9:90:
0e:19:db:5e:b3:43:70:3d:7b:b4:02:3d:1f:30:89:
9c:83:8b:d2:1b:9d:7e:f9:72:85:8d:bf:eb:86:cf:
25:59:de:93:a7:16:54:a1:fb:79:5e:76:2b:86:77:
88:cc:88:16:df:fd:33:b9:8c:cb:94:f2:d5:a3:c1:
e0:d1:9c:32:cb:e0:36:4c:85:14:b1:f2:5b:ae:44:
2e:78:08:61:91:9b:cf:10:b4:ae:c2:09:5f:b3:39:
e0:de:5c:19:6b:88:30:86:e6:06:0b:90:e8:26:ce:
60:6c:20:20:44:6a:06:60:1b:9d:82:b7:32:b5:89:
3d:7b:40:37:c0:ed:7b:d2:e8:13:f3:62:38:90:4f:
cc:8d:8d:37:1c:8d:06:6d:6c:62:fb:a8:1e:fb:26:
0e:52:55:3b:dc:4c:a4:22:4e:cc:b8:5e:b3:e3:df:
a1:61:36:bf:ac:01:2c:5e:49:95:27:3f:89:24:79:
54:d8:d4:b3:bd:92:68:de:e8:7f:b2:c7:71:fd:51:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2D:75:B2:A9:F5:CB:22:A1:2B:CA:30:CD:29:E7:56:B2:77:F3:FE
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/xS11sqn1yyKhK8owzSnnVrJ38_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:85:b4:62:25:ae:0b:f5:7d:65:6e:c5:38:5d:79:72:a9:b1:
b1:37:0c:c1:32:f6:ad:68:8c:40:39:db:ef:e7:ac:46:e6:b5:
bc:1c:32:0a:b1:f8:42:78:a7:37:f6:db:dd:6e:66:ac:b1:63:
3e:cd:31:fe:55:31:bc:57:77:85:bd:e1:68:a0:7d:b2:c3:66:
99:92:25:52:51:3e:c4:90:d8:43:f1:8f:52:f5:cd:d7:84:c7:
40:d2:60:4b:33:cb:57:0b:7a:c2:0e:54:36:8c:a9:5e:cf:11:
fd:5c:9f:ee:55:a9:99:35:45:f0:55:69:5a:8d:d5:a5:69:b4:
76:22:e9:0e:e3:4a:a2:7c:73:5e:a3:b1:f1:d3:97:1f:5c:8f:
2a:a3:82:d0:47:ac:dd:d4:36:83:3a:fe:44:30:43:86:38:dd:
fd:fe:01:e6:74:1f:46:14:23:3b:bc:e1:e6:ee:8c:db:72:d5:
f6:34:97:54:b7:87:21:b4:40:c6:a1:f0:d2:d2:4d:96:ae:e3:
da:19:ad:16:d6:e1:a1:ba:d8:9d:e9:3e:04:ce:ff:aa:15:cd:
47:ef:9e:58:e6:ca:ce:76:1f:fb:11:c5:a7:8b:0d:55:5f:ea:
b6:ad:74:08:86:bc:d8:e9:c3:65:2d:38:13:46:f8:e6:2a:04:
d0:58:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:06 2025 by rpki-client