Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa
File: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (raw, json)
Hash identifier: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=
Subject key identifier: F8:CB:02:E4:92:31:74:B9:CB:64:5C:87:B9:FE:91:80:BE:56:1A:17
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019623F0979E89E72A0901C586E145E56846
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa
Signing time: Fri 11 Apr 2025 08:21:32 +0000
ROA not before: Fri 11 Apr 2025 08:21:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 46.20.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:f0:97:9e:89:e7:2a:09:01:c5:86:e1:45:e5:68:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Apr 11 08:21:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8cb02e4923174b9cb645c87b9fe9180be561a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:a3:74:f4:ae:9b:e4:fb:3c:3e:09:8d:01:
9a:07:40:5f:0f:02:ef:6b:a1:6d:ae:76:79:09:15:
77:02:44:29:45:05:83:fe:aa:a7:43:90:bd:7d:77:
53:08:ca:c4:47:35:b0:af:88:0d:0b:95:5e:14:a2:
da:b5:bb:05:59:3a:13:94:47:f2:08:e7:25:5d:fc:
1e:f4:e5:8c:2c:17:c2:a3:8b:a2:c5:a3:90:5c:5a:
3d:09:6b:dd:da:b3:6a:6d:3b:82:b1:16:65:a5:85:
6d:62:14:ea:e4:53:c8:42:5a:eb:1c:5a:43:db:3d:
6f:10:30:cd:f3:0f:54:ef:a6:59:4a:ab:c9:35:e8:
4d:5d:57:5f:d2:1c:44:c1:8d:9e:ca:fb:fa:2e:7b:
11:80:6f:1d:3a:17:e4:82:4a:08:a4:f8:21:10:17:
19:37:e6:a8:94:a0:7a:ed:c6:78:9c:b4:67:55:e7:
93:13:2b:35:24:f2:62:58:00:bd:78:e3:42:78:2a:
24:ba:0a:89:4a:ff:00:06:a6:49:65:39:ed:39:13:
24:0c:63:46:2c:73:70:1e:03:01:f8:6c:a1:b3:2e:
84:00:59:9b:67:44:53:21:10:d2:23:11:20:82:23:
25:64:b3:25:df:f7:68:42:09:d3:c7:d0:a5:2d:e7:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:02:E4:92:31:74:B9:CB:64:5C:87:B9:FE:91:80:BE:56:1A:17
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.98.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b0:6d:95:69:a1:90:bb:bc:55:f9:87:23:46:8a:57:10:df:
0a:69:07:8c:d4:96:10:00:e0:17:8a:7f:9d:68:d6:09:46:b3:
61:da:2d:de:84:de:04:16:06:f9:fc:c5:37:39:79:8a:90:81:
2c:ee:30:50:cd:1d:b6:fa:4b:02:86:c6:74:a5:60:f1:6d:a5:
c9:94:75:c3:fc:d2:5c:7e:6c:ad:b0:13:41:48:4f:c1:a0:82:
c6:cb:e3:df:db:be:73:f7:f8:64:dc:15:85:9d:d1:82:13:20:
d3:22:6b:e5:81:42:70:ff:62:07:42:89:b4:87:f1:17:68:c1:
d7:c5:55:cb:c0:9b:48:45:3c:3b:ac:77:3a:62:12:95:5c:1b:
75:80:5e:23:c3:cc:9f:b1:25:f0:94:f0:70:65:d7:63:6a:ec:
e3:04:d1:d6:17:2e:1b:0d:61:4f:05:a8:f9:cf:ca:6d:48:83:
c2:b2:35:85:19:78:82:aa:11:f7:9f:b9:65:33:07:09:31:bd:
b0:67:3b:a8:9b:21:90:28:8a:cd:81:21:e6:33:01:3f:6e:a1:
17:12:20:b8:2f:e0:87:e0:be:1a:65:9b:65:a7:b6:05:72:1b:
7c:27:5e:46:77:f7:13:35:47:91:be:1a:f6:16:27:98:70:0d:
48:7a:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:10:58 2025 by rpki-client