Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/n5Snke9qrVszV2r6iCOXAr8xpfU.roa
File: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (raw, json)
Hash identifier: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=
Subject key identifier: 9F:94:A7:91:EF:6A:AD:5B:33:57:6A:FA:88:23:97:02:BF:31:A5:F5
Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Certificate serial: 0194228E3D27484231F7F3B0F4C0BB5988BF
Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/n5Snke9qrVszV2r6iCOXAr8xpfU.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51561
IP address blocks: 185.152.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3d:27:48:42:31:f7:f3:b0:f4:c0:bb:59:88:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f94a791ef6aad5b33576afa88239702bf31a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:e7:4d:1d:73:7d:5c:e9:9c:64:9a:b3:d0:
50:7e:ce:26:45:67:9c:bc:fc:3b:f7:ca:5d:e1:13:
1b:ef:91:04:f2:ea:61:0d:34:fc:9e:bd:99:77:29:
79:28:c6:f8:74:0d:d3:95:65:5c:80:13:f6:14:4c:
7c:c1:5b:c3:07:d6:20:32:6d:4e:da:fd:a2:3a:38:
05:20:0b:9e:3e:85:64:d7:4c:a3:1a:ce:3b:2e:e1:
6f:81:71:96:75:da:6d:41:ba:45:9b:4a:f4:f6:de:
52:c6:21:13:6e:72:62:e7:56:a5:58:8f:1f:72:db:
4c:e2:e4:fd:31:6d:76:82:5b:69:f4:d7:28:29:80:
e2:cf:2c:95:b7:35:fc:d8:3d:de:88:a0:03:38:6e:
d0:be:ff:a1:06:7a:4e:e0:8b:66:3d:c4:e6:dd:28:
d0:ae:db:07:a8:a3:46:78:9d:ec:b0:fa:df:68:6f:
e4:c9:1f:69:55:c4:b7:a2:5e:10:e6:c5:00:a2:93:
cd:e4:41:a3:2b:a5:5e:36:6c:64:44:5b:cf:1a:25:
0c:36:c5:dd:07:81:83:fe:d9:ac:28:0f:1a:cb:4d:
5a:6d:6f:a2:e0:34:6f:57:bc:75:8f:eb:30:94:23:
d0:80:12:97:5d:f8:14:69:ec:41:a1:0d:31:04:fa:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:A7:91:EF:6A:AD:5B:33:57:6A:FA:88:23:97:02:BF:31:A5:F5
X509v3 Authority Key Identifier:
keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/n5Snke9qrVszV2r6iCOXAr8xpfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.2.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c8:e7:ed:6d:27:bc:f4:f9:2c:5b:47:b4:37:12:ea:e6:7d:
42:7e:6c:c8:b3:d2:c8:e4:aa:46:cc:cd:77:7a:e8:27:27:d3:
85:72:73:02:34:6b:24:37:55:d9:22:90:c0:0c:07:d6:d4:3e:
7d:6a:89:ad:c4:73:96:9b:59:f8:5f:d2:54:85:92:fd:ec:94:
83:55:8a:4a:42:ed:14:2a:e9:c2:ad:0e:c4:ac:76:ba:ee:db:
47:06:80:7f:ed:6a:93:99:68:e9:60:9f:9d:5f:48:bb:b3:4b:
c8:ba:85:7a:24:57:70:7c:d6:6f:bd:12:5b:29:57:bd:35:12:
ea:0d:ef:d7:fc:ab:9b:03:1e:32:be:61:68:fa:a9:2e:d1:2b:
65:42:1b:6a:0d:ff:09:61:5f:ea:d4:bd:de:b6:bc:bc:6c:91:
7e:1c:0c:45:62:e7:a0:33:fb:f4:90:29:17:44:73:43:78:95:
9d:4c:95:18:6c:77:11:98:3e:6e:32:0e:99:22:89:e8:89:af:
ab:73:2b:6c:e6:76:bf:a2:5f:2c:f9:65:0f:2e:8e:86:21:69:
f7:ec:13:e0:20:ac:71:d7:b8:7f:c9:53:1e:c0:57:de:1e:9a:
02:af:43:3f:68:ea:b2:2d:c0:db:7c:39:3a:da:8b:c7:20:26:
5e:b3:f6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:05:48 2025 by rpki-client