Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/XlhxtDrnef0LIn9STUD5IsH1ycc.roa
File: XlhxtDrnef0LIn9STUD5IsH1ycc.roa (raw, json)
Hash identifier: 8c7ddXQfFoWwM7tA+K1eFR8xfvHddWeWNMUF9Typ4Ww=
Subject key identifier: 5E:58:71:B4:3A:E7:79:FD:0B:22:7F:52:4D:40:F9:22:C1:F5:C9:C7
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0194A83EA9F8FB002BF4D7C5266EF9BC3374
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/XlhxtDrnef0LIn9STUD5IsH1ycc.roa
Signing time: Mon 27 Jan 2025 14:51:06 +0000
ROA not before: Mon 27 Jan 2025 14:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58010
IP address blocks: 91.211.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:3e:a9:f8:fb:00:2b:f4:d7:c5:26:6e:f9:bc:33:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 27 14:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e5871b43ae779fd0b227f524d40f922c1f5c9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:d8:79:30:37:52:1d:38:8d:8b:b5:91:14:
fd:70:8e:4b:d7:f3:c3:f4:97:40:ae:41:44:3f:95:
f1:59:1c:7c:26:84:22:87:da:eb:49:87:43:e8:76:
8b:38:09:b6:83:79:ab:c2:9e:1f:75:7d:68:85:16:
65:66:07:d1:bf:27:21:be:ce:29:24:83:0b:0f:34:
ca:24:23:7d:9b:5c:39:2c:6f:12:ec:20:91:c0:9c:
47:cb:5c:b9:a3:fc:4f:dc:d5:fb:13:ed:c0:b6:b0:
0a:4c:35:7f:39:7a:f7:b0:e4:96:03:95:73:55:09:
9e:5a:56:e0:72:44:6c:e7:20:c5:69:b6:13:84:da:
77:30:e4:81:fb:22:e5:26:37:4b:22:f6:0e:68:8d:
82:70:d3:5a:8b:95:30:4d:35:c7:72:d1:c9:a7:15:
9e:6c:f5:79:31:2b:b8:12:e5:e1:5d:ae:dc:5e:1c:
7d:0f:69:e6:71:d9:24:7b:32:06:0f:8f:66:f0:0b:
68:23:07:37:68:b5:ed:6c:f8:7b:a9:55:b9:df:52:
79:36:95:7d:46:a3:f6:86:43:7f:99:58:98:53:db:
62:a6:d1:36:24:3a:33:db:d5:13:45:77:e8:c7:3f:
32:6e:e8:fc:8d:40:a4:dd:fc:38:64:07:97:4f:73:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:58:71:B4:3A:E7:79:FD:0B:22:7F:52:4D:40:F9:22:C1:F5:C9:C7
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/XlhxtDrnef0LIn9STUD5IsH1ycc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.114.0/24
Signature Algorithm: sha256WithRSAEncryption
33:45:b2:9a:e7:0d:f4:82:af:2e:b0:c4:25:3a:67:59:f2:97:
35:e4:76:5a:ee:1c:ce:0b:67:27:5f:d9:d3:cb:82:b9:e6:70:
ec:8b:81:7c:64:16:42:33:12:df:a9:ec:96:5b:99:bd:9c:20:
5b:95:1d:f7:ad:c0:70:24:1c:e9:fa:fc:21:b8:fa:3c:52:69:
a1:b2:b5:e4:66:34:c2:06:47:a9:9c:0c:38:2f:8a:ed:cb:e1:
32:5b:e6:88:b0:6a:3c:5f:12:8d:00:b0:ee:a8:35:3e:34:14:
93:70:cb:53:77:5f:5a:0e:d5:ae:28:46:11:96:39:36:00:8a:
38:8c:c5:ec:71:95:37:74:f7:e8:a5:78:39:ce:4d:40:ac:3b:
05:82:fc:5a:e8:98:d4:95:76:74:3a:d0:79:2a:d6:b4:74:c2:
e9:77:a9:35:fa:fe:bc:42:cb:ed:3c:9c:ca:1a:2f:fb:77:fa:
8c:25:a5:66:c9:be:dd:be:8a:13:63:7f:ae:2a:66:a5:cf:10:
fb:77:3c:9f:72:14:3e:98:b9:fb:e1:58:12:1b:59:09:bf:7b:
cb:21:61:35:1e:69:49:17:e6:11:3c:d1:a1:78:e6:cb:3e:f6:
ea:9f:7e:3b:c0:16:3c:57:4b:ee:f5:fd:d4:e0:ee:d0:9f:1c:
4b:ec:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:42:02 2025 by rpki-client