Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/rK5X9NIdICE6HWbuHlM4yM6Jalc.roa
File: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (raw, json)
Hash identifier: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=
Subject key identifier: AC:AE:57:F4:D2:1D:20:21:3A:1D:66:EE:1E:53:38:C8:CE:89:6A:57
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 019420D5A1C327CFDD5A7D09D354F663C1AB
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/rK5X9NIdICE6HWbuHlM4yM6Jalc.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 194.113.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a1:c3:27:cf:dd:5a:7d:09:d3:54:f6:63:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acae57f4d21d20213a1d66ee1e5338c8ce896a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:5c:9b:c6:62:32:a1:2f:46:02:eb:ac:f8:
bf:e3:27:c7:4f:96:f2:eb:0a:75:83:b2:78:cd:e7:
d8:bf:53:be:f9:cc:b7:9e:8d:db:b8:06:c9:af:20:
7a:30:7d:77:51:9c:c0:4d:54:c1:ca:3f:21:76:e6:
6a:95:d4:49:61:90:7b:12:cc:a9:5f:ca:ea:a6:3b:
4f:d9:ab:1b:38:b4:6b:7e:d2:c5:6e:04:d9:46:59:
91:84:c5:3e:85:6e:11:16:50:3a:7d:d9:d9:12:47:
0d:78:89:fc:3c:fe:fb:8e:82:62:d9:6a:01:15:4c:
1c:9a:64:dd:69:7e:2b:35:f1:60:44:13:81:da:d2:
82:78:9a:0c:19:90:e7:79:0d:13:60:1f:47:40:73:
b2:a8:78:ed:cd:f6:49:9c:ad:be:1f:18:fe:25:c1:
52:da:89:df:5d:36:38:e2:49:9b:91:40:75:84:19:
cf:89:c4:44:88:1f:b0:c6:e5:bc:43:18:21:e5:91:
82:ae:47:61:d3:74:e5:dc:1c:e9:70:ac:0f:0f:a4:
fb:d6:39:6a:b9:97:a3:a5:c8:a6:57:86:53:02:7f:
6e:53:60:56:80:bb:ae:f0:8f:74:fa:c6:20:e6:92:
2d:75:cd:a0:64:93:49:b7:00:36:ab:c6:15:a6:23:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AE:57:F4:D2:1D:20:21:3A:1D:66:EE:1E:53:38:C8:CE:89:6A:57
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/rK5X9NIdICE6HWbuHlM4yM6Jalc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.208.0/24
Signature Algorithm: sha256WithRSAEncryption
56:77:63:b9:ff:47:66:ec:0b:dd:d9:12:29:1c:40:4f:da:55:
16:25:27:dd:b5:86:1b:43:2b:ae:17:44:34:62:8c:a3:6e:b3:
b9:a2:6e:b2:de:e1:32:6a:7b:81:3c:5f:f9:fe:6c:7e:c5:ef:
70:38:ae:fd:f5:df:5e:59:18:27:1b:ac:7e:48:e0:da:26:f0:
b9:5e:16:21:29:63:b1:02:f0:e2:46:88:2d:8d:e8:80:37:c3:
52:7f:15:97:7a:3d:03:89:6b:9c:c5:ae:54:67:d3:34:1b:1c:
c8:f0:1a:e9:37:3a:bb:3b:b3:ee:36:ed:f3:dc:92:6c:18:49:
c4:47:82:49:34:25:79:d1:cb:b1:e8:47:e0:22:7b:19:16:45:
21:37:35:a8:24:e7:dc:43:10:51:fd:7f:78:5e:cf:bb:ee:9d:
86:72:12:0e:b1:fb:03:ec:ea:4a:0b:82:58:bc:4a:82:51:1a:
54:e6:b8:ea:5d:6c:89:4c:e9:49:ed:69:83:b2:74:79:e7:c7:
b6:d3:ea:d0:6c:70:be:3e:aa:05:b4:d9:08:82:88:1b:6f:ea:
41:f1:92:46:cc:a5:e4:05:08:39:d2:8c:7a:3c:fb:7b:76:2f:
4d:a5:49:20:5e:61:5c:91:96:fb:3b:41:19:f4:1d:22:17:5a:
4c:2b:fd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:17:27 2025 by rpki-client