Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa
File: K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa (raw, json)
Hash identifier: 2dlcOZzL+Eim7W+NTEiKqnv/Tt9OOEdX1RMt+wWQD9U=
Subject key identifier: 2B:93:A8:7F:D0:98:41:6E:56:73:D8:21:2B:53:D4:74:DF:9A:15:36
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 0194266BD18427283E34FAB07018A64FE39E
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39683
IP address blocks: 5.61.96.0/21 maxlen: 24
5.61.111.0/24 maxlen: 24
185.252.22.0/23 maxlen: 23
195.189.224.0/23 maxlen: 23
195.189.224.0/24 maxlen: 24
195.189.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d1:84:27:28:3e:34:fa:b0:70:18:a6:4f:e3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b93a87fd098416e5673d8212b53d474df9a1536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:09:0f:ad:1e:8f:93:cb:c7:05:7d:59:ea:
0c:c0:a0:ad:e1:0b:8b:5f:77:df:dd:56:87:0b:ee:
1c:05:90:82:b8:ae:03:63:c3:25:48:f2:15:46:aa:
fe:e1:1c:b0:74:0f:86:ed:63:52:75:39:d9:ce:c9:
30:e8:df:0f:1e:5c:b7:4c:ec:f2:83:88:85:57:69:
b6:60:3e:0f:5b:93:55:1d:d3:15:6c:e5:ee:30:f0:
20:4e:1c:2f:4a:77:b7:34:1a:d5:06:fa:f5:fd:f7:
a1:ee:56:4b:27:2a:83:bb:14:72:ba:50:ac:7c:cb:
9f:44:44:6f:f4:34:23:95:0a:20:ae:93:62:c6:9b:
8c:2c:01:92:0c:66:40:db:d5:26:68:24:a7:30:6b:
92:03:89:ba:ff:56:93:bd:d7:19:88:45:16:7a:cc:
17:f7:c6:4b:03:eb:92:cd:b2:13:5a:de:a9:22:41:
29:43:65:53:cf:a4:48:db:3f:88:33:e6:98:17:6a:
2d:ff:09:12:cd:88:2c:a1:ae:fb:49:bd:84:80:b8:
0e:1e:db:9e:ec:67:6f:5f:9f:f4:65:f0:c2:d0:ad:
09:3e:bf:36:b9:43:bf:87:6f:b2:82:3f:86:1d:47:
91:26:14:3f:e8:ff:56:6a:14:3a:90:0e:4c:93:fa:
85:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:93:A8:7F:D0:98:41:6E:56:73:D8:21:2B:53:D4:74:DF:9A:15:36
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.96.0/21
5.61.111.0/24
185.252.22.0/23
195.189.224.0/23
Signature Algorithm: sha256WithRSAEncryption
13:0a:b4:d8:34:26:55:e9:66:8b:d6:e5:e3:d8:e4:a0:7e:a1:
f3:67:f9:07:78:4d:c2:1b:ba:78:7d:55:ad:f8:c5:c0:b5:6e:
2c:9a:82:2f:48:5d:88:2c:17:4f:fc:5f:55:41:4b:8b:36:a5:
53:e9:95:0e:54:fa:f7:8d:ef:e1:c3:34:ea:ce:af:45:19:17:
fc:fb:dd:12:81:cc:bb:cb:16:b1:39:f6:82:77:35:d8:a2:76:
53:8d:51:57:91:e0:45:57:dc:a6:04:cb:87:77:d3:7a:8e:86:
e8:1d:c6:e9:fd:3c:ff:e8:1b:61:32:66:e6:fa:77:98:48:52:
74:06:57:fa:9d:72:dd:e5:f2:d2:5a:9a:28:28:72:32:da:81:
b5:3a:7e:24:34:a3:58:33:f7:74:64:20:7e:76:28:57:cd:81:
9d:90:ee:8b:c8:c2:49:ed:c2:99:a8:32:50:13:d4:2d:9a:7b:
87:ed:4d:46:01:0f:83:71:e8:ca:ee:3c:80:fa:4c:fe:ba:af:
a6:5f:71:7f:d3:e6:5b:f7:82:c8:bc:92:7e:a9:b0:67:e5:a4:
17:a2:d5:07:b2:c0:32:0c:26:db:51:58:e0:31:c2:d3:f7:f1:
1a:3b:b7:1e:91:1f:cb:fb:2c:94:96:cc:9b:d3:12:76:87:32:
21:9d:34:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:44:47 2025 by rpki-client