Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa
File: xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa (raw, json)
Hash identifier: CfOyHBtQR8zjYYv9qA3Dd8n5he3YeIT+MsIzoT30dKc=
Subject key identifier: C6:07:65:00:BD:96:2A:BF:C9:B3:85:7F:64:B8:CF:6B:3E:9B:7A:FF
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 019424B35EE2E034EB047CBD668219D58A52
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa
Signing time: Thu 02 Jan 2025 01:48:42 +0000
ROA not before: Thu 02 Jan 2025 01:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 87.236.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:5e:e2:e0:34:eb:04:7c:bd:66:82:19:d5:8a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Jan 2 01:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6076500bd962abfc9b3857f64b8cf6b3e9b7aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:5e:65:ad:dc:7b:7e:fb:00:47:d0:07:21:
67:02:9e:2c:e0:82:63:52:4b:a3:f2:f2:62:ae:3c:
ff:4e:8b:de:fa:d6:10:2a:ec:77:8c:bc:ac:1a:7e:
0d:75:0e:36:c8:b0:20:2c:62:c8:f5:c3:fa:5c:77:
ee:19:f8:33:fd:7a:2c:32:52:65:d5:9d:cd:f7:f5:
7f:c6:ce:0a:1a:ee:d5:29:0a:6d:f6:5a:ee:e1:53:
47:76:94:d4:bc:a8:ac:37:fd:fd:71:18:ea:f6:df:
a8:78:d8:8c:09:29:de:46:27:4b:43:76:02:2b:8c:
4b:56:dd:05:0b:2e:de:fd:9e:d7:56:39:4a:9f:9b:
30:4a:24:b9:f7:ea:bd:91:d5:66:8a:09:85:45:1f:
05:88:cc:7c:65:f2:41:e5:98:50:84:40:1c:0c:26:
e2:45:86:e8:a9:fb:96:36:df:7d:98:18:95:15:a4:
c9:7f:3e:b2:39:33:c2:5e:e6:b5:7a:cd:b2:fb:4a:
a5:42:44:63:58:1d:0b:4c:2a:d8:a9:1b:03:30:b9:
91:ba:1a:35:3b:be:6e:eb:71:68:66:15:31:2d:7d:
83:a1:d3:92:ac:af:3c:cf:28:4e:ae:e0:82:72:e4:
fb:6a:b3:62:9d:da:1d:aa:50:a0:41:d1:f6:46:e3:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:07:65:00:BD:96:2A:BF:C9:B3:85:7F:64:B8:CF:6B:3E:9B:7A:FF
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c8:f9:df:36:3a:67:7c:1b:be:37:a0:ae:a9:a1:43:5a:4f:
92:e5:b2:1a:59:b0:2d:bd:e5:ac:9f:62:c6:03:b7:ac:35:a8:
62:a3:ce:78:1f:91:f1:e6:72:02:56:27:b3:e2:8e:24:b6:a2:
e4:7e:33:d0:59:81:11:d5:de:9d:f5:30:67:07:23:ed:14:a8:
1e:3e:0c:44:8d:7d:39:61:e0:b5:2b:db:d8:dd:e0:c7:25:75:
c1:5a:2f:36:96:d4:b7:cf:f7:68:10:86:d6:be:f2:ea:75:f4:
fa:2e:27:e2:c9:3f:2d:a2:e8:72:f0:9a:68:ca:cf:f1:91:67:
5c:7b:38:3d:70:7c:aa:9a:a1:d2:7f:1c:bc:d0:f8:f3:51:23:
ff:c0:09:e0:00:27:a8:6c:83:d2:50:a1:b2:80:a7:e0:d9:f2:
16:dc:df:20:03:dc:b0:1b:13:cc:bf:31:83:90:1b:7f:fc:5b:
20:16:25:cb:c2:02:48:22:9c:80:16:37:85:7e:6e:31:75:2c:
09:70:55:42:dd:cd:99:04:a0:7f:e0:a8:ba:45:2f:33:2d:ab:
26:28:b6:2b:08:51:d9:12:3d:85:85:4c:89:f1:19:2f:6c:2a:
e1:9a:6d:b5:cc:38:bf:65:d4:73:65:91:0e:73:9d:18:4f:66:
d8:b2:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:50:00 2025 by rpki-client