Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa
File: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (raw, json)
Hash identifier: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=
Subject key identifier: 92:1E:98:EA:5E:69:33:FE:25:D5:ED:3A:AC:A1:26:D4:B6:D3:CE:3F
Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial: 019424B2A8FB424F8A3559DDD22081CE2232
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa
Signing time: Thu 02 Jan 2025 01:47:55 +0000
ROA not before: Thu 02 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21396
IP address blocks: 5.182.220.0/22 maxlen: 24
5.182.220.0/24 maxlen: 24
80.249.96.0/20 maxlen: 24
141.0.208.0/20 maxlen: 24
2a02:68::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a8:fb:42:4f:8a:35:59:dd:d2:20:81:ce:22:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Validity
Not Before: Jan 2 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=921e98ea5e6933fe25d5ed3aaca126d4b6d3ce3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:84:57:92:91:7f:eb:56:77:29:ae:08:73:
7f:8a:8a:69:c1:d4:07:fb:5c:fd:87:3a:02:34:c5:
dd:4e:37:e3:7e:c0:f7:62:06:70:5e:bf:63:c0:28:
d6:fa:7c:f2:6d:77:da:e0:76:af:13:d8:cb:09:83:
14:18:5a:7c:73:be:32:67:42:e0:50:34:6f:20:82:
d5:16:e3:41:b8:16:8a:78:09:c3:a0:03:82:b7:cd:
ad:9c:38:e1:58:2d:ec:9e:1e:b0:ee:45:0a:cd:7a:
49:3b:c4:7a:26:4f:46:b2:89:87:e6:1c:41:e3:9e:
d7:39:e7:e8:fb:62:46:4e:f0:23:34:3a:73:bb:87:
b7:53:ff:66:47:94:24:c0:71:94:58:59:62:0c:45:
62:f2:f4:fd:a8:3a:e1:45:09:e7:e8:d3:41:57:63:
69:8e:6d:9e:42:67:30:15:17:ab:d5:52:1f:21:a0:
54:3d:4b:17:c6:03:87:b9:32:00:da:4a:b7:96:55:
62:15:46:fc:60:5c:5c:d2:02:42:31:b8:20:e8:bd:
f0:6f:93:b4:a2:f8:0a:f5:a6:e5:d2:de:52:23:e9:
16:c8:46:d1:07:8b:cc:dc:d9:39:f8:bb:40:94:a5:
eb:d1:2d:f7:64:97:69:2f:30:8a:0b:80:d3:ca:4d:
85:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1E:98:EA:5E:69:33:FE:25:D5:ED:3A:AC:A1:26:D4:B6:D3:CE:3F
X509v3 Authority Key Identifier:
keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.220.0/22
80.249.96.0/20
141.0.208.0/20
IPv6:
2a02:68::/29
Signature Algorithm: sha256WithRSAEncryption
47:f4:b5:03:a7:0c:3d:b3:29:f5:f9:53:92:6b:3b:51:f4:c7:
92:1c:37:c7:ad:c7:45:66:1e:17:f6:7a:48:1a:c9:8b:c7:50:
d1:df:08:b0:3e:30:e5:cc:17:21:2f:ae:d7:37:14:80:d1:97:
ad:0e:af:71:8c:90:a7:d4:1a:58:ca:69:32:c7:93:92:67:9c:
18:aa:da:a1:f8:6b:15:a2:7a:5a:8a:e6:16:7d:b0:d9:60:27:
c7:c1:f2:6a:1e:b1:af:d4:e4:11:17:cd:49:42:59:e1:9d:c3:
9e:de:22:b1:33:79:c0:53:df:5a:a2:f9:75:b7:e6:46:d3:fa:
03:2f:36:4a:f2:d5:bf:68:b6:71:16:05:56:78:70:22:48:09:
ae:33:90:3e:03:40:b1:c9:68:03:3c:c3:07:5f:57:72:05:06:
22:e1:b3:0f:82:ee:20:8f:41:87:18:59:c7:77:af:68:23:16:
dd:88:f1:f9:37:44:28:d5:bc:cd:40:d8:b7:27:01:4d:90:bc:
23:6d:2e:80:d9:d0:e1:45:d2:02:0a:67:c5:14:6b:d4:48:63:
d6:0c:b2:2b:7f:94:7a:c6:63:04:5b:9f:2e:bb:0f:60:e7:b3:
b5:29:84:c7:f6:d9:b2:b7:63:4f:2d:56:e7:f4:89:27:97:59:
93:ed:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:22:50 2025 by rpki-client