Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5bN3f_d9EtFOKcPtc7-CdAyX5_I.roa
File: 5bN3f_d9EtFOKcPtc7-CdAyX5_I.roa (raw, json)
Hash identifier: cKYb1C4rXKf/FlvGOtbhrhZpwqaM5kOKvvirLL8gmeM=
Subject key identifier: E5:B3:77:7F:F7:7D:12:D1:4E:29:C3:ED:73:BF:82:74:0C:97:E7:F2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196B6D2CF54B02CD379CBD0665817D85F1D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5bN3f_d9EtFOKcPtc7-CdAyX5_I.roa
Signing time: Fri 09 May 2025 20:53:10 +0000
ROA not before: Fri 09 May 2025 20:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 213.130.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d2:cf:54:b0:2c:d3:79:cb:d0:66:58:17:d8:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 9 20:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5b3777ff77d12d14e29c3ed73bf82740c97e7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:63:2c:7c:d3:69:f2:44:84:dd:11:84:6e:
02:83:79:a5:6e:de:48:60:61:d6:e5:a0:c1:3f:65:
c0:97:fd:87:da:38:9a:ad:f9:ed:3b:20:30:c4:33:
e0:d9:a6:80:65:4f:b1:c6:d0:1a:ed:cd:0d:44:68:
7c:66:71:1e:44:62:cc:aa:84:e1:a7:c2:11:cd:05:
87:af:cb:a2:af:ee:52:6b:ef:6b:84:26:5b:e8:35:
74:aa:c3:94:8e:1b:58:ff:72:60:a2:83:31:c5:04:
f4:10:c4:bd:c4:29:c1:2b:6d:9e:fc:d1:2d:0e:11:
41:3b:da:b3:35:56:7e:a3:e8:86:92:00:56:57:a0:
14:58:10:63:6d:a9:2f:8a:ab:f6:b5:06:24:2b:b7:
e7:4b:ed:67:c2:0f:74:68:2f:74:65:f3:b6:38:e0:
5b:9f:11:ca:b4:6d:fa:65:b3:5b:cf:9c:f7:43:d7:
af:9c:c0:30:da:b0:62:19:e2:39:82:98:91:d5:f4:
e3:fc:50:c5:fe:2d:46:c6:c1:4c:0a:b9:e4:bb:12:
22:91:63:5f:d3:f0:b4:71:0c:dc:3b:5c:e9:7b:88:
f2:33:23:94:58:3f:5e:8a:e6:ce:61:bf:fc:7f:b9:
d5:4a:55:07:ed:9c:be:4e:d7:27:e3:1a:75:ad:d3:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B3:77:7F:F7:7D:12:D1:4E:29:C3:ED:73:BF:82:74:0C:97:E7:F2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/5bN3f_d9EtFOKcPtc7-CdAyX5_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.134.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:11:c8:60:5a:8e:b6:bf:da:e8:2c:39:76:f5:ed:e9:52:85:
a0:52:e5:fe:ad:85:4a:eb:66:4a:58:5f:a1:4f:d8:14:d6:b5:
e8:3a:5a:9e:6b:0b:50:c0:70:e1:4f:3f:a3:c4:0b:15:af:ed:
99:aa:91:a7:5b:bc:66:38:10:b2:84:1e:d7:d3:a1:7d:e8:ae:
c6:c5:bb:c9:9e:40:b3:1b:15:a5:9e:b4:ac:f4:76:55:2d:e1:
11:c8:8e:11:31:ed:73:74:14:40:59:0f:a9:87:99:d2:7a:83:
49:ed:0f:e5:e4:2f:83:30:66:c2:40:a7:4c:43:d8:01:9d:84:
cd:c8:84:c1:6c:fd:9a:0e:73:99:1d:22:ce:8d:2e:44:95:4b:
a6:5f:86:ec:ab:a9:f2:8b:53:7e:e2:75:5e:83:e2:48:aa:48:
6a:49:65:92:98:b4:6a:2e:1e:77:af:e9:b6:6b:7f:aa:fe:49:
fb:81:38:14:eb:29:0b:92:84:db:5b:91:2c:02:9e:64:bd:dc:
47:fc:73:4f:fa:ab:09:bf:c6:c9:51:fe:82:9a:49:8e:08:07:
d1:1f:c1:e4:36:41:66:da:d8:41:9b:96:60:43:28:6c:49:16:
4b:98:00:a9:7a:72:4c:11:dc:58:c9:fa:93:e2:53:cd:06:91:
ca:9b:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:24:08 2025 by rpki-client