Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/xbOTFEcYpBS54HTwxLkkwCMgw2w.roa
File: xbOTFEcYpBS54HTwxLkkwCMgw2w.roa (raw, json)
Hash identifier: deqlV11P7iIGL6/OPj5/QL/dXfo5BX5+SsvEYgpxEj0=
Subject key identifier: C5:B3:93:14:47:18:A4:14:B9:E0:74:F0:C4:B9:24:C0:23:20:C3:6C
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B24138770989F65AA15B2F944DE912
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/xbOTFEcYpBS54HTwxLkkwCMgw2w.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210811
IP address blocks: 92.119.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:41:38:77:09:89:f6:5a:a1:5b:2f:94:4d:e9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5b393144718a414b9e074f0c4b924c02320c36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:9a:6d:d2:86:57:25:13:a9:de:32:a6:de:
cd:d8:7c:11:b4:90:c6:d2:c3:4f:04:ce:7e:ae:30:
79:35:c5:62:eb:14:33:a6:3b:c2:76:38:58:f5:91:
3c:06:93:9d:f5:25:08:aa:41:98:9d:dc:fc:97:9b:
9c:e4:07:a5:d0:11:1c:59:04:a6:90:cd:0f:80:13:
70:d1:0e:5c:9f:7d:26:6d:dc:82:81:4e:f5:3b:85:
80:3f:1b:4a:86:89:d4:8e:57:43:a9:fe:5e:c0:f4:
ea:a5:1b:64:78:3b:d2:b8:67:53:a6:01:12:28:84:
b5:cd:b8:8a:15:f7:60:0c:52:a4:c1:e1:72:a1:c5:
2f:67:44:c2:4b:76:5b:e7:5b:3a:20:88:fa:3d:c4:
9a:75:8a:e6:c2:84:c0:50:c3:cb:ff:56:6b:2c:2e:
eb:29:8a:07:ee:9a:07:d9:b6:84:a7:ae:fe:31:ed:
de:47:d3:d8:0c:05:a2:7e:a6:b4:52:ed:06:05:cf:
78:72:03:98:d8:b0:c8:af:df:3c:ce:34:77:d6:90:
fe:3b:9d:6c:02:9f:1a:83:11:3e:47:00:0f:76:f5:
7b:e5:77:a5:9e:b3:47:b9:55:cc:39:bf:cf:66:aa:
1a:6f:cb:db:18:19:23:87:3e:d3:7f:a7:fc:6f:4d:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:93:14:47:18:A4:14:B9:E0:74:F0:C4:B9:24:C0:23:20:C3:6C
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/xbOTFEcYpBS54HTwxLkkwCMgw2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.184.0/24
Signature Algorithm: sha256WithRSAEncryption
22:32:13:f7:c1:62:27:a4:4b:85:70:b4:6d:6e:3b:c1:e8:b0:
f7:68:a0:a1:73:83:4f:b9:ab:b1:37:d8:82:8e:03:ab:26:d3:
9b:41:be:6a:6e:e7:62:20:a8:cb:5b:dd:0d:0a:8f:bf:7a:91:
3e:18:fa:73:75:2c:b3:8a:36:97:16:5a:ab:0d:c2:c7:d0:b2:
be:29:f3:67:04:22:0e:08:e4:e9:32:e4:4c:82:64:e3:9f:94:
a2:7c:8d:10:e6:46:e1:11:8c:a4:5d:c2:d0:b9:82:f3:e1:dc:
66:23:04:39:b9:75:90:96:30:9c:55:a6:f3:37:0f:06:ca:79:
b2:98:ac:3b:39:00:3a:53:61:26:22:9b:67:76:a9:73:8c:da:
ff:73:fb:28:7b:77:2e:e6:1a:ce:c7:04:95:75:0a:ca:d8:41:
63:77:ea:26:3a:71:46:d1:86:40:da:e5:19:c9:a5:66:0e:83:
20:d7:80:9e:22:e5:ed:f1:d8:53:24:38:f7:ba:b8:8a:d3:ab:
d5:2e:a9:48:f3:3d:b4:a9:83:b7:d6:77:d5:8f:5b:1a:da:16:
b6:ce:5d:f2:d6:00:a0:a1:d2:7c:bd:82:39:08:45:6c:1e:07:
9c:8b:49:ea:4f:03:c0:c7:45:07:13:fe:80:3d:7d:96:b4:40:
00:cc:5e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:30:05 2025 by rpki-client