Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/XUhmF7NC59VfS-_RgMhnFzCm21k.roa
File: XUhmF7NC59VfS-_RgMhnFzCm21k.roa (raw, json)
Hash identifier: 5XacoIFqiK03Bo2lBnJs8PXslWsRrAkg6i5gyULqj1M=
Subject key identifier: 5D:48:66:17:B3:42:E7:D5:5F:4B:EF:D1:80:C8:67:17:30:A6:DB:59
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC750A8CF8FB9980F8CEEF628BBFF0
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/XUhmF7NC59VfS-_RgMhnFzCm21k.roa
Signing time: Thu 02 Jan 2025 07:48:09 +0000
ROA not before: Thu 02 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51089
IP address blocks: 31.25.88.0/24 maxlen: 24
185.218.4.0/22 maxlen: 24
185.218.6.0/23 maxlen: 23
185.218.6.0/24 maxlen: 24
185.218.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:75:0a:8c:f8:fb:99:80:f8:ce:ef:62:8b:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d486617b342e7d55f4befd180c8671730a6db59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:45:64:26:e4:d9:eb:4e:24:9b:ee:00:04:
ea:50:25:b9:90:b7:59:2b:59:c6:75:25:cb:fb:00:
75:6b:7d:e3:4a:04:e8:8a:e2:f0:97:bc:15:fa:09:
1c:f2:1c:fa:df:e7:93:f2:be:74:04:bc:1f:3e:c6:
7f:09:6a:d6:6f:18:8e:89:95:25:36:c5:cb:a6:17:
ec:1b:39:a7:eb:e5:b9:84:fd:2e:33:79:b7:37:d4:
86:68:87:28:cf:9b:0b:2c:70:48:13:7b:94:46:de:
7f:55:86:3f:5b:09:6c:6f:fa:58:ef:42:0e:6f:47:
c2:d8:80:15:0e:c5:b5:bd:8c:27:9d:27:7d:5d:32:
bf:a1:51:36:e6:93:3f:0e:19:ed:e1:1b:fb:7e:bd:
2a:f9:8f:60:9f:65:b2:f6:37:e6:13:77:45:97:9a:
a4:38:73:99:0a:69:1d:d7:89:b4:ba:bb:87:ae:2a:
3e:c9:c7:b1:a1:4a:33:e2:b9:ff:d5:f4:5d:53:c3:
da:2d:ca:04:e9:2d:11:81:42:cc:d9:45:61:64:97:
92:10:9b:53:e9:1d:47:0f:d3:79:73:7e:6b:39:77:
e5:77:53:8c:a8:22:ee:b7:3b:be:69:07:74:e0:6e:
3d:fa:48:e4:f8:3a:c2:5e:1b:e2:0b:2c:8b:23:00:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:48:66:17:B3:42:E7:D5:5F:4B:EF:D1:80:C8:67:17:30:A6:DB:59
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/XUhmF7NC59VfS-_RgMhnFzCm21k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.88.0/24
185.218.4.0/22
Signature Algorithm: sha256WithRSAEncryption
45:ba:7c:27:51:fa:11:79:f8:d5:16:8b:66:88:1f:7d:63:36:
2c:95:75:4f:cd:7f:a2:68:4a:b0:10:38:91:11:03:4d:53:ab:
fc:4e:3f:78:d3:d6:56:27:82:f2:45:3c:df:7d:3f:ce:e5:d1:
95:89:5b:23:f0:ff:34:be:e7:19:cc:4c:36:38:15:72:56:b9:
69:cd:c8:db:9f:8f:91:2e:46:d3:5e:3e:b2:b3:76:36:6f:b3:
9d:32:48:f1:9d:a1:db:4d:a1:3a:75:3b:58:be:d7:5a:81:bc:
a6:49:d8:9d:39:a9:44:ac:2b:b4:7e:d5:82:67:38:0c:b6:11:
03:2d:39:8c:9a:75:82:4d:4a:e3:e6:55:b6:77:df:83:3e:9c:
6e:5b:8e:65:56:c4:27:8b:d7:9f:58:59:d2:32:8f:50:27:ac:
09:b8:03:93:d5:4d:c5:f1:d7:76:67:5c:90:af:cd:ba:da:6f:
4a:53:5e:79:07:66:e5:ea:a0:48:b8:8c:8f:a0:b4:73:d8:54:
ca:e5:26:b5:45:9f:b7:c9:9a:25:20:05:ce:6d:41:c2:bd:ff:
4b:81:56:f7:3d:24:14:27:a4:d4:51:12:90:9c:05:03:a3:9c:
24:88:58:27:1a:bf:b4:31:32:62:84:b1:51:bb:3e:97:72:4d:
f5:82:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:35:57 2025 by rpki-client