Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/j5cmBmG5lsfF0LGHkW9TmtHYYOQ.roa
File: j5cmBmG5lsfF0LGHkW9TmtHYYOQ.roa (raw, json)
Hash identifier: jW5rCdDcZY2hUOcLhvaUT3javVnFYgmeJbaMHfFxWo8=
Subject key identifier: 8F:97:26:06:61:B9:96:C7:C5:D0:B1:87:91:6F:53:9A:D1:D8:60:E4
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8A2F3479AEA112026A7A11CF1CA2
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/j5cmBmG5lsfF0LGHkW9TmtHYYOQ.roa
Signing time: Thu 02 Jan 2025 09:50:34 +0000
ROA not before: Thu 02 Jan 2025 09:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206338
IP address blocks: 176.211.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:8a:2f:34:79:ae:a1:12:02:6a:7a:11:cf:1c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f97260661b996c7c5d0b187916f539ad1d860e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:82:6c:16:93:a9:87:59:ae:9f:48:c0:e8:
f1:02:02:75:5c:7b:fe:34:42:ff:6f:88:59:65:54:
43:ff:eb:af:7a:e7:76:91:7a:a7:ef:9b:d9:19:cf:
6f:17:b5:55:2f:a9:23:98:38:97:23:01:28:eb:e5:
25:96:f4:a7:d3:a1:e9:fe:48:5d:2d:9e:77:2b:38:
0c:15:96:cd:fd:8c:da:cc:08:7b:f3:74:5c:e6:77:
e8:ed:fa:23:cc:43:e2:fd:32:52:e5:5e:c5:97:1b:
ed:6c:05:c9:5a:1f:4e:8c:27:2d:fd:5c:a0:ce:be:
ad:a3:19:bf:b5:6c:7b:d6:89:69:2a:53:8a:da:e0:
85:64:76:94:bf:99:aa:38:80:0e:93:80:b7:7e:47:
fc:8d:bd:3d:88:5b:f9:86:3f:2a:87:3b:26:66:8c:
f1:96:99:6f:cf:41:3a:43:75:7f:3e:c7:46:64:69:
a4:da:b1:40:87:c3:97:cd:63:12:2c:d2:b9:15:07:
e0:9a:da:bf:43:6b:11:df:35:35:f0:97:0b:1d:fd:
6e:d2:1d:2c:cb:cc:1f:2e:32:53:1b:ee:38:5f:66:
09:9d:c0:8a:94:55:1a:05:61:0d:cb:fc:6b:30:07:
59:b1:c1:d6:a2:7f:b0:ca:b9:c7:f7:6a:b7:b0:0a:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:26:06:61:B9:96:C7:C5:D0:B1:87:91:6F:53:9A:D1:D8:60:E4
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/j5cmBmG5lsfF0LGHkW9TmtHYYOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.211.74.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6b:97:7a:df:f0:3c:80:97:e5:e4:7d:d3:d2:40:85:63:38:
73:b3:c8:d3:04:63:47:54:c7:62:80:c4:f4:74:af:8b:2f:97:
6c:67:49:5a:45:e2:0b:0d:51:6e:79:e2:31:e5:71:38:6c:04:
94:4d:fd:51:4a:ba:b4:ee:05:78:4b:c5:b5:0a:bf:c6:39:e8:
ae:38:38:1d:07:87:f2:3a:d0:b4:c6:53:b6:61:c5:ea:d6:f7:
7f:86:91:bf:16:e1:7e:39:db:71:68:01:0e:78:e1:57:0e:ef:
2a:78:6e:bb:db:00:d2:8f:3c:d0:20:57:24:2b:2e:d4:44:ed:
ba:bf:fc:2f:89:31:60:2c:0d:cd:7a:85:4d:66:ee:15:1a:e1:
d1:da:94:97:77:10:2b:2e:14:4b:27:39:9d:3e:3a:e1:d1:8d:
58:73:45:d7:03:9f:6b:de:59:ff:19:fc:87:cd:eb:96:60:af:
37:46:d5:5d:27:6b:31:52:2a:cf:b4:12:77:22:a0:b2:56:3c:
7c:1e:d5:70:c8:a5:14:6d:06:20:3a:93:8b:a7:15:b0:d6:1a:
b0:88:23:30:d4:be:00:6e:de:d5:22:fe:6b:c4:c3:58:65:d4:
b8:e0:69:68:6b:68:aa:f2:59:8b:26:6c:98:03:fe:13:b5:55:
2d:3c:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:18:01 2025 by rpki-client