Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa
File: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (raw, json)
Hash identifier: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=
Subject key identifier: E6:FD:F9:A9:62:83:F0:D8:D1:E4:26:09:C2:C6:B7:64:22:66:71:A1
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019425FC30FE4DE6A43634169BC9046036B9
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa
Signing time: Thu 02 Jan 2025 07:47:52 +0000
ROA not before: Thu 02 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 192.104.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:30:fe:4d:e6:a4:36:34:16:9b:c9:04:60:36:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Jan 2 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6fdf9a96283f0d8d1e42609c2c6b764226671a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:25:18:68:46:24:ff:63:04:ef:82:02:b3:
c4:b4:76:ea:3c:73:73:9d:95:8a:35:31:9f:3b:cc:
a3:5d:d1:c6:68:96:11:5a:4f:8d:0e:b8:41:8d:6f:
07:c9:e2:f9:b3:a1:d0:48:e7:7d:30:39:f1:ca:a0:
ea:22:d7:c5:2c:c2:90:4c:26:97:64:82:8c:a7:ab:
84:f1:fd:ef:15:b7:96:68:57:86:e8:fb:94:a9:15:
7d:52:ff:cb:8f:c3:ee:91:c2:73:72:ec:2e:7f:26:
7d:f8:3e:f9:d2:4d:78:14:27:8c:cd:76:62:85:d7:
68:04:1a:0b:19:9d:7b:ba:f3:89:80:ce:ae:39:e1:
b6:d6:d8:a5:f2:40:e7:89:dc:b7:c7:87:34:18:c8:
0b:03:35:0e:03:7c:11:ef:6c:13:1b:ff:f8:f9:95:
7f:4e:d2:04:7b:3b:24:9f:0c:52:81:6e:f8:ee:a4:
96:fe:72:1d:37:8a:ed:bb:8b:21:1a:be:8d:d7:a7:
bd:e0:44:ec:42:e5:65:d7:66:aa:3c:f6:ac:80:7d:
78:40:67:eb:a1:f8:28:c5:0d:71:cc:38:b2:73:8a:
6b:fd:53:0f:81:39:5d:07:24:79:3e:86:22:1b:3d:
46:13:76:52:a7:d5:92:48:f3:64:f4:2d:d1:43:d4:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FD:F9:A9:62:83:F0:D8:D1:E4:26:09:C2:C6:B7:64:22:66:71:A1
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.104.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:02:6b:b2:79:0e:53:68:52:01:07:47:25:65:56:4a:4a:91:
72:00:5e:f4:95:61:66:10:15:d3:36:09:f0:7f:39:70:6f:f0:
8a:c1:29:ec:4e:c4:77:97:66:ba:cc:21:6c:67:ab:3b:d9:a3:
b7:8c:36:dc:b9:b2:ce:19:42:2a:18:6b:06:34:ea:b5:9a:88:
9e:e1:a4:fb:6d:25:19:bf:d3:e1:d2:28:da:95:81:82:b0:1b:
21:24:8a:4f:e8:87:3d:74:c8:7f:77:93:2f:cf:48:10:44:af:
12:2b:ee:7f:55:5c:70:2f:bb:39:68:24:8a:1c:2d:5e:87:b0:
67:27:00:64:78:18:5a:b9:a4:c2:68:8f:91:ab:4d:ab:8a:e6:
0a:96:0e:47:76:5b:82:c9:bc:33:19:f9:f5:f6:da:b9:82:67:
ca:46:72:8a:ba:15:49:43:e2:04:67:4e:e0:2a:9e:61:41:3c:
3d:a4:e8:1d:5b:11:c6:7a:d4:de:39:8a:8d:a8:99:ab:da:1b:
e2:34:32:1c:dc:a2:4b:43:3b:71:7e:dc:66:a5:ed:c4:91:55:
44:92:2a:f1:f0:73:fc:a7:da:4a:63:64:39:1d:dc:43:7b:29:
ad:ba:0e:1b:b9:4c:af:a5:b6:4c:84:d5:6c:13:b6:ff:80:4c:
a7:99:59:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:55:08 2025 by rpki-client