Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/xxgWwfSK_RDzO5iVk9xc0YDHLVA.roa
File: xxgWwfSK_RDzO5iVk9xc0YDHLVA.roa (raw, json)
Hash identifier: I7jeLHTlE9EyGti+P0IqUCEHDyvswcmpnn0wxi4XSnA=
Subject key identifier: C7:18:16:C1:F4:8A:FD:10:F3:3B:98:95:93:DC:5C:D1:80:C7:2D:50
Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial: 019420686B1FAFA00747254439301A31C872
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/xxgWwfSK_RDzO5iVk9xc0YDHLVA.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47372
IP address blocks: 93.191.160.0/21 maxlen: 32
185.192.168.0/22 maxlen: 32
2a06:5d00::/29 maxlen: 48
2a06:5d00::/30 maxlen: 48
2a06:5d04::/31 maxlen: 48
2a06:5d06::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6b:1f:af:a0:07:47:25:44:39:30:1a:31:c8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c71816c1f48afd10f33b989593dc5cd180c72d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:9d:0d:2f:7d:e0:c4:85:11:aa:57:e4:78:
a6:26:65:24:26:0e:f0:2b:54:1f:25:5b:f5:1b:5a:
96:e1:3a:43:57:08:e2:a5:eb:96:53:f4:11:4f:99:
42:2a:34:2c:33:6b:dc:19:70:3d:c4:ab:d8:68:7c:
5c:c2:ca:1f:c3:03:41:bb:2e:a7:8b:dc:81:9d:7b:
45:ff:6d:70:6f:75:fd:70:60:f4:0b:63:ae:92:2d:
dd:72:6a:a8:98:47:3b:96:63:33:31:db:98:97:c3:
5e:b5:66:d4:c7:60:86:1a:ef:93:31:8e:a4:28:98:
bc:ab:36:c1:c6:b5:61:a3:5c:e9:98:57:5d:18:32:
01:93:7a:b7:d9:b6:9a:a5:b7:f2:a0:92:d8:24:45:
2a:e3:0a:c8:f6:19:9b:e1:62:02:2f:af:15:da:23:
07:9f:50:fd:cd:a8:18:a2:e1:9a:6f:1f:a9:8c:6f:
9d:b5:05:78:cb:f2:bf:d3:21:ea:cf:8b:62:b9:01:
df:f1:61:a2:30:4b:19:70:50:17:66:90:0b:58:83:
6b:3f:44:7a:5c:15:de:48:83:6d:10:79:60:21:6f:
69:b8:be:77:5e:14:9d:bf:56:14:da:fe:32:b9:74:
60:4b:bf:0d:45:08:f8:34:d0:58:53:e9:9a:ca:d4:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:18:16:C1:F4:8A:FD:10:F3:3B:98:95:93:DC:5C:D1:80:C7:2D:50
X509v3 Authority Key Identifier:
keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/xxgWwfSK_RDzO5iVk9xc0YDHLVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.160.0/21
185.192.168.0/22
IPv6:
2a06:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
23:c1:a8:1e:83:10:8c:a3:6a:61:56:c8:b5:60:fd:30:42:8e:
41:34:4b:5f:e4:e3:b5:7a:c3:df:16:a6:10:b5:fa:7e:b3:ed:
69:4a:f9:6b:72:c4:d9:3a:70:8c:79:8d:15:75:2e:a8:db:59:
67:8d:2a:c0:d0:b2:7a:cf:29:1b:32:b5:54:40:22:f0:42:b0:
d7:a3:1a:e9:29:b1:be:f1:c2:c0:2d:ae:55:a1:3a:f8:e4:f9:
b1:b6:01:b7:37:c3:52:b0:7c:42:6d:de:c1:e0:5c:e3:ac:74:
27:ee:4a:0e:e1:3d:cc:99:de:e8:e4:24:ec:74:dc:99:3d:3b:
7d:81:e9:29:b6:71:98:dd:e1:b2:48:6e:d4:10:5a:4e:dc:92:
0e:31:0f:e5:6c:97:9e:5c:78:14:b5:5d:4b:c3:9c:c0:43:5e:
1b:90:e9:b3:d0:f6:05:74:4b:88:a5:09:34:67:04:97:19:82:
c5:16:46:f8:1d:8e:5b:32:98:14:f4:a3:22:0b:48:9f:fa:54:
bd:aa:93:ac:4a:9e:ef:03:49:b1:e3:80:bf:c6:5b:aa:d0:44:
e1:5d:c8:25:df:15:90:59:a0:6b:89:56:a3:f3:d9:ea:90:06:
10:74:a4:96:37:76:b3:9e:38:05:d7:72:b1:10:01:87:d4:5f:
52:39:71:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:44:57 2025 by rpki-client