Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/5ehB_xO0eaE5SlSwW2V8tb-9juo.roa
File: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (raw, json)
Hash identifier: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=
Subject key identifier: E5:E8:41:FF:13:B4:79:A1:39:4A:54:B0:5B:65:7C:B5:BF:BD:8E:EA
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 01965F939856EB2B30AACC2103502EF3F6D0
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/5ehB_xO0eaE5SlSwW2V8tb-9juo.roa
Signing time: Tue 22 Apr 2025 22:17:10 +0000
ROA not before: Tue 22 Apr 2025 22:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 195.130.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:93:98:56:eb:2b:30:aa:cc:21:03:50:2e:f3:f6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Apr 22 22:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5e841ff13b479a1394a54b05b657cb5bfbd8eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:5b:48:9a:66:6c:12:12:58:bc:66:63:5a:
1a:8f:b8:11:77:45:35:9b:8c:8b:e6:8b:0e:04:ab:
aa:bc:a9:fe:45:44:56:5b:22:7b:8e:35:50:dc:1a:
19:3b:af:a3:58:6a:32:4a:9f:ab:0d:a6:9c:02:5e:
a8:f5:9e:d2:1b:cf:a9:61:1b:a3:3b:2c:ae:22:5a:
56:8e:e1:17:3c:a4:ff:76:43:fb:3b:a8:43:da:8d:
20:84:2c:ba:39:cb:18:c9:c5:9d:d4:36:40:00:df:
c6:6f:fd:0b:ad:a7:3a:87:f5:c2:39:77:8a:f3:31:
aa:94:f5:01:37:10:33:24:cb:b1:0e:75:62:16:5e:
d0:58:b5:f8:de:78:8e:0a:80:74:a5:6e:53:c4:3c:
35:52:78:c4:54:a0:3d:96:5a:c5:1c:7f:94:7a:f7:
cc:27:1f:30:ca:7b:68:25:4c:1a:10:fc:cf:6e:8a:
1d:3f:fe:1c:8e:15:c9:9e:9c:6c:9e:36:94:fe:3b:
ef:b9:15:d5:94:c9:72:73:dc:a3:5d:5c:36:83:db:
f0:fd:23:2a:44:84:2b:cb:d3:97:45:da:b8:99:87:
74:88:73:76:d0:7e:61:c5:80:de:4d:bf:3b:f4:a0:
83:aa:df:6b:ac:1c:b5:3a:1f:e8:c2:da:d7:6a:c9:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:41:FF:13:B4:79:A1:39:4A:54:B0:5B:65:7C:B5:BF:BD:8E:EA
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/5ehB_xO0eaE5SlSwW2V8tb-9juo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.199.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a0:5e:47:61:dd:8c:b6:ce:db:46:68:69:5b:30:99:59:d5:
82:51:4c:39:c5:7d:82:1d:ba:23:86:bb:7f:37:dd:6d:f6:5d:
c0:79:4d:e4:7e:86:79:4a:72:91:cf:ef:5d:09:81:2a:32:73:
e3:11:59:04:32:35:e5:04:1c:2b:48:f8:8a:76:f7:7e:75:62:
c6:44:a8:55:e0:ae:26:cb:65:44:a8:7f:85:db:f0:9e:d8:6c:
12:0d:d9:00:96:e8:59:93:87:26:74:b0:00:d3:ad:36:e3:55:
5c:b7:dc:d4:7e:3d:34:b9:01:d9:c9:99:76:e2:c2:2a:2d:e0:
25:14:0d:cb:e5:10:6c:c1:a9:c8:20:dd:e8:e0:2f:f9:aa:51:
54:33:a7:ad:01:95:4c:b6:08:06:74:5b:43:2a:66:1b:85:63:
72:df:31:d9:23:58:b0:ed:bd:05:ef:9a:ee:59:f6:b5:f7:13:
a9:50:c2:c2:8d:88:0e:af:e9:44:68:ee:e9:dd:65:c6:bf:7c:
b0:56:d3:69:fa:38:16:9a:f7:da:c7:3a:f4:51:53:27:08:51:
b1:ee:7c:9a:9f:44:99:8e:f1:99:8f:9c:b2:76:5e:9c:3f:b3:
70:e9:a7:be:a0:a9:4e:06:f2:dd:9a:06:01:ee:a5:11:dd:87:
a5:31:0a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:07:43 2025 by rpki-client