Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/dHl1LQzEJUpKi2KNatIsOTvown8.roa
File: dHl1LQzEJUpKi2KNatIsOTvown8.roa (raw, json)
Hash identifier: iN9UZITbk8Ct82GnunVun5xdzK17nQf8SgPjAvRak5s=
Subject key identifier: 74:79:75:2D:0C:C4:25:4A:4A:8B:62:8D:6A:D2:2C:39:3B:E8:C2:7F
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0196954BBB971183512348D3F108C572C7B3
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/dHl1LQzEJUpKi2KNatIsOTvown8.roa
Signing time: Sat 03 May 2025 08:38:10 +0000
ROA not before: Sat 03 May 2025 08:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200315
IP address blocks: 37.32.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:4b:bb:97:11:83:51:23:48:d3:f1:08:c5:72:c7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: May 3 08:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7479752d0cc4254a4a8b628d6ad22c393be8c27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:ad:18:58:5e:b4:71:3f:2b:d0:07:b2:cb:
3e:32:aa:e5:ee:23:4e:86:a8:a1:a4:81:fa:98:30:
87:2b:6a:93:21:43:c9:00:f3:86:2d:91:6f:c4:14:
94:6a:23:c0:9d:01:b5:54:ee:02:aa:ff:89:15:26:
bf:83:0b:93:bb:eb:12:39:59:0e:85:fe:7d:07:ca:
b4:1d:a0:56:95:7f:1d:ec:53:b9:84:72:e6:2a:8e:
bf:0e:a9:36:9f:d8:73:33:c2:4c:ed:0c:bb:5a:4d:
4c:b7:d1:f3:c6:72:ae:79:1a:c5:4c:23:f8:29:08:
df:be:ce:31:5c:ec:e3:0c:13:05:9b:d0:66:e2:a5:
30:6a:a4:27:af:0d:74:ff:ef:d4:99:98:9b:a8:7a:
0b:68:e4:1b:f9:8e:bc:b5:10:7e:aa:f9:9e:fd:3f:
29:54:13:ca:fc:7e:87:35:08:49:1c:fb:6b:a9:68:
e8:06:11:97:c7:b7:e9:76:3d:b2:af:59:1f:a9:24:
cd:70:8e:2c:eb:36:47:5d:0d:79:5b:87:d5:d9:33:
54:73:55:2d:eb:56:9e:47:58:a4:02:75:e3:24:4f:
1e:fa:22:3d:11:62:74:a1:cc:05:fe:0b:20:6f:11:
19:61:40:db:3d:28:56:f8:39:cd:a6:72:d8:a5:e1:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:75:2D:0C:C4:25:4A:4A:8B:62:8D:6A:D2:2C:39:3B:E8:C2:7F
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/dHl1LQzEJUpKi2KNatIsOTvown8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.3.0/24
Signature Algorithm: sha256WithRSAEncryption
81:21:c3:27:0e:a5:7e:a2:5a:26:d7:31:9a:25:c3:c0:1a:7d:
2d:dd:35:05:bb:75:28:9f:87:0d:7b:50:76:ee:56:ed:cd:05:
d6:26:c2:a3:25:49:3a:43:93:87:93:b9:cc:12:d8:39:2d:18:
97:79:b9:fb:72:92:4b:1c:87:a3:f0:49:20:1b:99:f0:d3:6c:
69:a0:d4:f9:e9:34:2a:f3:9d:56:6b:b8:a9:b6:aa:2e:01:62:
7d:30:32:fd:d7:9b:20:f8:3b:73:53:fa:64:a8:37:46:da:35:
99:ba:e5:07:b8:8b:2c:b4:54:c0:77:cb:ed:28:f0:df:f5:62:
ce:48:e7:c7:83:08:8e:ac:ef:88:4d:79:5e:8c:57:8e:8b:1b:
dc:bc:58:29:9e:aa:5a:07:89:05:f4:3e:8c:2a:60:8a:82:1e:
e0:79:02:67:5a:e0:6c:34:68:ad:54:85:31:83:b2:f5:01:5f:
99:24:61:85:1e:cb:15:6d:ae:69:08:ee:66:cd:82:5f:20:4e:
e1:a2:ed:02:67:81:38:97:f1:11:dc:bc:e9:e5:b6:5e:85:d2:
0d:c6:25:3d:e3:09:06:1a:41:ef:57:35:87:df:d1:88:5c:3d:
4f:27:3a:1e:0e:94:4b:2d:af:4b:51:86:34:99:1b:c3:3d:aa:
20:d7:c4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:12:42 2025 by rpki-client