Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/5cpMF4gywWh4TSF3WyLtzpEIguk.roa
File: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (raw, json)
Hash identifier: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=
Subject key identifier: E5:CA:4C:17:88:32:C1:68:78:4D:21:77:5B:22:ED:CE:91:08:82:E9
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5CD1EEF8DBE58E0B1F6436334986
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/5cpMF4gywWh4TSF3WyLtzpEIguk.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47453
IP address blocks: 87.246.46.0/24 maxlen: 24
87.246.47.0/24 maxlen: 24
87.246.48.0/24 maxlen: 24
87.246.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5c:d1:ee:f8:db:e5:8e:0b:1f:64:36:33:49:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5ca4c178832c168784d21775b22edce910882e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:cb:10:b9:aa:0b:06:de:85:a1:89:7f:0d:
9f:76:08:0f:14:2c:73:de:82:d1:1b:73:37:9f:3b:
51:cb:5f:35:c6:1e:d0:59:ad:e7:ed:08:4f:a8:e7:
fb:13:19:eb:08:69:a7:b8:44:d3:b4:57:9a:a9:b0:
c4:58:cb:1e:5c:e9:b0:a2:08:e9:42:5a:99:09:d0:
89:40:6f:6a:69:58:cf:fe:d9:5a:48:17:00:79:f2:
f9:0a:0c:dc:a2:a6:f1:bf:14:2f:5c:94:e1:64:6b:
86:89:32:d2:5c:75:47:6d:06:7f:e5:60:84:a8:f5:
0b:07:ab:59:ac:11:81:61:98:fa:2c:d6:ae:cc:50:
ef:de:6f:50:ee:96:44:35:bf:06:ae:6c:69:a8:f7:
18:b3:ed:bd:67:0c:35:2c:f0:09:e0:1e:5e:b2:f6:
46:77:06:05:11:2a:13:b0:56:f6:56:b2:ff:16:9f:
73:f6:68:bc:1e:88:6f:dc:26:9b:6a:3e:28:f3:ca:
01:97:97:96:1f:32:8c:e1:0d:63:2f:06:f6:e7:c7:
a9:33:fd:01:3f:9d:47:ee:44:0e:2a:14:5e:16:d4:
ca:3d:e9:b5:ed:82:1e:15:f3:33:bd:f4:fd:9b:8e:
92:c1:3e:93:3f:a8:1f:d9:7e:46:91:c6:6e:44:88:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CA:4C:17:88:32:C1:68:78:4D:21:77:5B:22:ED:CE:91:08:82:E9
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/5cpMF4gywWh4TSF3WyLtzpEIguk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.46.0-87.246.49.255
Signature Algorithm: sha256WithRSAEncryption
89:b4:c7:ef:54:65:59:c7:79:cc:8a:13:ac:bc:fa:a2:d5:4b:
36:26:c6:98:45:eb:1f:05:71:2c:40:81:bc:70:66:e8:4d:ac:
c1:11:9b:4b:70:aa:c2:4f:e5:cd:3a:ae:c5:2c:61:91:ae:9a:
4e:f5:95:6a:96:3e:e3:4a:42:dd:dc:75:fc:c1:16:ca:e5:1d:
34:63:5f:49:da:69:65:ed:40:8a:56:3b:47:67:a0:7d:ba:50:
74:6d:00:80:1d:cf:19:21:36:30:ff:b0:90:40:f4:fb:1b:cb:
af:b6:20:0d:52:e3:7a:25:df:4d:51:54:c7:b8:98:e2:5e:b9:
3b:1c:66:7f:33:e6:c6:46:48:ca:dc:3d:5e:b4:1f:9c:78:42:
9f:93:bb:bd:86:66:cb:f4:e1:5f:4d:9f:9a:a3:8f:db:a3:28:
e2:20:40:27:4c:26:4e:b0:79:17:de:8f:e8:31:4c:60:24:8c:
87:d8:9c:a3:8b:c2:94:69:01:25:86:ec:b7:5d:09:b9:fe:01:
eb:ef:ac:ea:a7:c8:b6:94:2a:12:9e:f5:0a:32:62:d0:86:bf:
bf:eb:b2:fb:ce:30:b3:2b:d2:78:e2:27:aa:07:51:95:43:11:
2c:fc:17:d0:69:16:f0:97:62:0c:a8:22:d6:81:4e:3d:66:58:
12:f3:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:59 2025 by rpki-client