Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/X62IC3DFH05KyHmdzIC5ZeS7uVY.roa
File: X62IC3DFH05KyHmdzIC5ZeS7uVY.roa (raw, json)
Hash identifier: oEKXfbiimVzIZVWp+Y85Pe11G1e46yPqO2i9gP4jxro=
Subject key identifier: 5F:AD:88:0B:70:C5:1F:4E:4A:C8:79:9D:CC:80:B9:65:E4:BB:B9:56
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B237CFA7FDF4EC1FA59F5D6E8B81F1
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/X62IC3DFH05KyHmdzIC5ZeS7uVY.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57270
IP address blocks: 185.242.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:37:cf:a7:fd:f4:ec:1f:a5:9f:5d:6e:8b:81:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fad880b70c51f4e4ac8799dcc80b965e4bbb956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9c:ce:dd:51:64:78:94:44:69:97:9e:e4:40:
a9:c2:71:e6:95:26:8f:3e:47:48:fc:ef:5d:71:e9:
01:cb:ff:d6:b2:78:03:fb:6b:79:7b:04:9c:7d:ae:
f4:1a:61:09:2f:b6:8a:23:98:36:6d:6b:82:6f:35:
8a:ce:25:d5:3e:28:a3:76:4d:49:af:1e:31:b4:da:
43:4a:89:6d:f9:68:3f:cf:5b:b8:3e:fd:78:3e:d4:
be:25:0e:9a:68:9b:e4:18:35:4c:04:10:dd:64:95:
ce:86:73:48:9a:4e:a8:cc:1d:90:c8:bd:00:33:c0:
04:6b:59:5b:0f:ab:b0:49:74:4f:f4:2e:06:e2:74:
da:31:2c:2c:f0:44:ac:22:4e:e6:04:77:ab:01:9e:
18:b7:c0:32:41:18:fc:b5:bc:ad:94:d5:6b:70:0b:
f4:b2:27:5a:1b:d4:38:c4:77:97:69:df:83:82:dc:
57:25:2a:d8:7a:0b:57:9a:7e:0b:39:ee:8a:5c:cf:
4b:d1:d4:3b:55:5f:bc:e3:24:9f:1d:2c:aa:f8:55:
3f:4f:67:e3:af:40:67:bb:66:b2:24:4c:62:df:8a:
aa:ef:a1:5e:fd:e2:1d:1a:4a:cb:32:99:af:49:5b:
1d:17:52:99:0f:51:3f:64:10:e3:2b:bb:f1:d6:8c:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AD:88:0B:70:C5:1F:4E:4A:C8:79:9D:CC:80:B9:65:E4:BB:B9:56
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/X62IC3DFH05KyHmdzIC5ZeS7uVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.21.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a5:3b:89:46:ca:98:7f:02:fa:1e:ed:07:03:e1:a9:80:af:
dd:1c:6a:ab:12:c4:f2:ae:ad:75:84:6e:b4:5d:ae:38:7c:ed:
f5:8d:9d:5d:b9:71:86:88:3e:7d:ef:74:b9:36:d8:98:7c:e2:
07:56:10:3a:57:c1:97:0e:5d:cf:3e:69:2f:cc:b1:d9:45:e0:
69:7a:2a:6a:18:54:46:75:be:0e:27:c1:0a:5b:d8:e5:26:06:
82:4c:0f:f7:26:41:13:09:78:e8:4b:18:30:02:54:b1:ac:4f:
a0:66:4d:28:55:7a:8e:fa:12:22:9f:74:e3:c3:c0:c0:e5:12:
d2:c4:33:36:56:c3:a2:a2:3e:c8:f6:ab:38:fd:24:6e:dd:e5:
90:eb:ae:2a:dc:2d:0d:12:39:84:41:bd:62:3f:bb:a3:cf:6c:
35:d9:bc:87:4b:08:23:f0:ad:32:c7:9c:a4:1b:5b:b9:21:9d:
d1:da:b7:0a:a6:82:59:4c:9b:86:d1:13:9f:d8:10:24:66:4a:
f7:3b:ab:5a:90:ae:e1:e0:03:21:f9:d0:00:00:71:07:bd:2d:
a4:dc:14:f4:48:63:3b:d5:ea:5b:a3:46:2c:02:be:e7:53:88:
c3:b6:a4:ef:53:63:c2:29:89:8c:d6:12:02:6d:d4:50:83:f4:
e9:74:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:16:15 2025 by rpki-client