Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/xejR1HTIfQTs9ku3Ssof6e6AvFo.roa
File: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (raw, json)
Hash identifier: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=
Subject key identifier: C5:E8:D1:D4:74:C8:7D:04:EC:F6:4B:B7:4A:CA:1F:E9:EE:80:BC:5A
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 019424459E38C0FC9B0AE34DB15193E6868D
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/xejR1HTIfQTs9ku3Ssof6e6AvFo.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201405
IP address blocks: 185.49.48.0/24 maxlen: 24
2a04:b700:185a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9e:38:c0:fc:9b:0a:e3:4d:b1:51:93:e6:86:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5e8d1d474c87d04ecf64bb74aca1fe9ee80bc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:c5:a9:8a:4d:e7:75:36:9d:42:53:f6:70:
ec:33:e4:f2:4f:3a:25:5d:73:6b:c0:02:b4:ed:4a:
3d:7e:e0:c4:8e:62:e8:09:7c:4a:01:2a:df:b3:fd:
bc:f4:36:d2:23:44:31:5d:ce:6a:99:78:09:83:34:
2d:9f:a6:41:d8:d4:ce:2f:ea:76:9f:56:a9:6e:6b:
9e:82:36:ac:c5:7c:62:ab:1f:1c:85:76:2c:c7:dc:
3c:a7:1a:d3:62:df:ff:a1:9c:5f:ff:ad:7f:18:7e:
02:b4:eb:03:7d:52:09:bf:df:04:6b:4a:38:64:3d:
73:25:4a:53:6c:be:54:3a:81:dd:cc:2d:13:57:73:
a8:34:fc:3e:82:7b:12:4c:89:ca:dc:6b:0d:d0:01:
24:f0:6d:ef:4a:d6:87:87:68:e6:93:9a:4f:b8:36:
e4:9b:6b:d0:55:b5:17:d7:9d:3e:e2:eb:7c:ac:49:
94:b9:cf:80:69:44:c9:cb:2d:ed:df:a4:1c:16:e6:
57:37:da:7a:9e:bc:86:9b:a5:24:a5:29:26:ae:22:
78:fa:96:16:a1:5a:53:e8:93:14:9d:c5:51:25:75:
0d:94:76:1f:7a:4f:e1:65:dc:77:69:c4:ec:2f:96:
f4:c0:69:30:9c:92:22:db:34:14:3a:b8:c9:32:d7:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E8:D1:D4:74:C8:7D:04:EC:F6:4B:B7:4A:CA:1F:E9:EE:80:BC:5A
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/xejR1HTIfQTs9ku3Ssof6e6AvFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.48.0/24
IPv6:
2a04:b700:185a::/48
Signature Algorithm: sha256WithRSAEncryption
14:02:7e:2c:92:57:7f:40:a6:61:00:46:60:72:49:4e:90:80:
24:d1:8a:46:22:3c:c1:a2:9c:d9:d9:54:6b:b0:d2:e3:7a:0a:
f1:00:e1:88:4a:bd:e4:0d:a8:99:9a:db:b9:1b:4a:9c:ae:88:
90:66:7a:ba:bb:fc:83:5b:ca:2e:d9:dc:5e:97:0c:bc:49:4f:
f7:d6:f6:cd:d5:fb:7e:45:7c:d9:61:7e:fb:d3:b3:ea:af:2d:
8e:7c:51:cb:f8:6c:0a:17:01:5e:a1:43:79:79:7a:ed:86:44:
4c:18:f1:10:65:d2:ef:ee:61:ac:e9:03:61:89:c7:3c:4b:23:
52:fe:cd:69:46:85:b3:12:f5:42:f0:9c:db:25:c6:47:51:1a:
97:13:6c:7e:2c:f5:f7:47:81:8b:93:40:87:0c:45:61:68:3b:
6e:04:4d:f0:ef:a4:d6:21:2d:77:fc:ba:8f:5f:0e:63:65:9d:
55:24:54:da:6f:71:50:6a:27:ad:70:df:67:3b:51:f9:93:cc:
2c:db:e6:fe:51:e7:dc:3c:5d:c7:39:cc:0f:ab:ed:e5:36:6f:
9d:6d:de:51:f2:46:18:9c:6b:7f:79:76:9b:67:08:fd:cd:d5:
10:28:7a:30:b8:1a:9e:fd:df:cb:08:fb:68:f5:b2:b0:34:d9:
21:2d:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:04:33 2025 by rpki-client