Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/x5nA4FFtmqyefgurujJ-euL_uO4.roa
File: x5nA4FFtmqyefgurujJ-euL_uO4.roa (raw, json)
Hash identifier: QBtOmQmbhzNQeksxcCf3OvLmzbF9y/zaj3dyE9lU3aI=
Subject key identifier: C7:99:C0:E0:51:6D:9A:AC:9E:7E:0B:AB:BA:32:7E:7A:E2:FF:B8:EE
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019643E828DF7B197B9D9CA1EB9D531B2D28
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/x5nA4FFtmqyefgurujJ-euL_uO4.roa
Signing time: Thu 17 Apr 2025 13:20:10 +0000
ROA not before: Thu 17 Apr 2025 13:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 89.251.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:e8:28:df:7b:19:7b:9d:9c:a1:eb:9d:53:1b:2d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 17 13:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c799c0e0516d9aac9e7e0babba327e7ae2ffb8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:07:19:25:36:36:c2:78:f0:e6:a8:3c:b5:
44:68:10:a2:d4:34:2c:58:ee:f3:de:43:83:d4:92:
e2:f4:37:85:1b:cd:ce:aa:f0:cc:ce:04:ab:e2:8a:
5e:dc:04:e0:c6:78:68:91:99:a6:e6:44:bd:eb:44:
a1:3c:a0:f9:e4:48:8b:b1:93:96:7e:c7:97:b5:97:
60:11:ec:b9:50:1f:82:d8:a7:de:04:c2:9a:e0:ef:
b1:b8:ff:f1:99:21:db:8a:e7:d0:a8:ff:3d:90:7b:
4e:24:6a:60:00:c6:f4:a7:dc:4a:e6:57:9a:43:62:
59:0c:37:7b:1f:b6:6e:d9:bc:b8:be:da:7a:3b:4a:
62:ea:27:3c:20:63:09:82:4b:d9:8b:c1:bf:92:f7:
4f:78:6c:5a:aa:98:69:b5:a0:0e:5d:c3:e2:14:ab:
e3:08:58:87:8b:ed:72:f0:40:1d:3a:3b:2f:f2:c4:
ea:81:4e:1d:72:14:3b:75:a8:d2:f8:50:d7:f6:28:
68:f6:e0:c8:18:92:e4:e0:aa:aa:25:4c:82:4d:31:
93:ba:d3:a4:01:6c:ff:0f:d4:ae:0a:d2:0c:d5:78:
15:87:8a:ea:9a:90:b7:5d:98:cd:6a:bb:9d:e2:6b:
94:fd:65:6d:08:d1:aa:bf:c8:90:32:e4:20:ca:19:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:C0:E0:51:6D:9A:AC:9E:7E:0B:AB:BA:32:7E:7A:E2:FF:B8:EE
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/x5nA4FFtmqyefgurujJ-euL_uO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2f:56:62:46:1e:00:f6:c0:c5:19:97:5d:8c:3e:e2:a8:ef:
ba:ea:b0:1e:1e:c1:f8:0a:b9:b3:da:09:77:fc:bf:bf:fa:97:
97:c3:f7:76:66:68:00:b9:36:ab:59:58:c0:f9:df:1b:45:dc:
0e:27:f6:6f:87:d3:e4:61:04:fe:90:ef:7f:5f:ba:39:c8:61:
d9:93:d0:d0:91:e4:a5:7d:77:87:a4:10:ae:a3:86:a4:7f:39:
54:ae:5f:4b:74:15:8d:94:28:cd:3b:52:81:f2:2e:13:f5:0c:
ee:af:88:c1:40:de:49:71:df:87:a3:10:12:36:89:d5:7f:c0:
23:a9:29:e3:22:3c:cc:07:ae:72:0f:5e:72:83:4d:88:27:e5:
0b:02:c9:6a:4c:19:0d:30:24:9b:2d:4a:f9:72:f4:75:a3:ab:
50:7c:8d:96:4e:1b:7c:fc:44:91:29:eb:03:4b:88:74:f2:c2:
49:d6:5e:56:65:a2:cf:93:5f:03:23:43:8d:84:34:d0:2a:ef:
b2:bc:c7:d1:48:cf:b7:24:30:79:e2:d5:95:e6:d7:37:d9:60:
9b:fa:2f:f1:28:97:b0:ff:1b:ab:91:07:2e:66:eb:da:3c:56:
5d:6f:f8:68:37:ef:69:f3:67:a2:1c:ca:31:0f:89:49:da:d5:
8a:d2:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:06 2025 by rpki-client