Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/xZ_023oKHQSUR6TwKwMkGIsy224.roa
File: xZ_023oKHQSUR6TwKwMkGIsy224.roa (raw, json)
Hash identifier: ifrv9R6haJqU4fA+SuKlYO2IqiC8qB9Zjz5Ablqp45M=
Subject key identifier: C5:9F:F4:DB:7A:0A:1D:04:94:47:A4:F0:2B:03:24:18:8B:32:DB:6E
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0195DEFCF668F7A85AF6203A630D2AACA6D4
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/xZ_023oKHQSUR6TwKwMkGIsy224.roa
Signing time: Fri 28 Mar 2025 23:01:14 +0000
ROA not before: Fri 28 Mar 2025 23:01:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214505
IP address blocks: 31.186.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:de:fc:f6:68:f7:a8:5a:f6:20:3a:63:0d:2a:ac:a6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Mar 28 23:01:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c59ff4db7a0a1d049447a4f02b0324188b32db6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:27:3f:ef:72:81:33:d7:d0:b2:a5:38:d5:
6b:2a:a9:44:4b:5f:62:47:0e:af:f5:20:04:b6:4a:
d1:cb:4c:fb:b5:87:2f:cd:5a:88:c2:c0:3b:93:11:
65:61:8b:ca:4e:8f:87:45:cb:e1:f1:b7:da:fb:80:
90:0a:09:bb:1d:c9:d2:21:52:fd:cb:a7:67:ed:62:
88:73:0a:3f:2a:0c:58:36:9f:0d:5d:59:f8:c1:25:
2d:ff:62:66:1c:19:b2:5e:11:74:b7:cc:88:2f:ee:
9f:72:fe:a5:60:2c:a6:97:81:33:0d:ea:db:2a:62:
95:66:f2:dc:d7:69:3e:26:15:47:3c:53:93:bf:f5:
f5:e1:39:0a:3c:8a:57:3c:ba:ce:46:3e:5c:d6:4c:
23:2b:99:e2:cd:a2:28:6a:38:d4:d8:a4:6c:78:8b:
c9:51:4c:39:e0:37:dc:9a:ac:6b:52:01:74:83:d4:
19:22:96:86:39:bc:cc:bb:ea:96:05:4d:93:91:a6:
7e:97:5d:61:68:b7:a2:ff:fc:ee:f4:d5:be:1f:d8:
3d:a8:b9:15:86:34:ab:c0:16:2f:93:68:a4:63:9f:
4a:04:ab:a1:86:6a:cd:7f:f6:11:75:0f:b5:f4:47:
1c:cd:2c:3d:c9:3d:74:16:f4:7d:f0:0f:64:b1:28:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9F:F4:DB:7A:0A:1D:04:94:47:A4:F0:2B:03:24:18:8B:32:DB:6E
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/xZ_023oKHQSUR6TwKwMkGIsy224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.250.0/23
Signature Algorithm: sha256WithRSAEncryption
02:47:da:93:ad:49:ff:d9:f5:e0:93:22:00:37:9b:49:28:60:
f2:e6:89:93:ac:33:1c:7b:75:be:84:21:fa:3c:fe:3f:75:fe:
6e:33:7c:6d:51:56:61:53:c1:c7:03:32:ab:5e:7c:36:fe:09:
60:71:aa:5b:b9:39:ac:23:66:49:1f:bb:a6:24:e1:ca:30:7d:
9c:ff:01:93:22:75:a3:34:ee:8e:f1:a7:7f:fc:5c:95:cc:1c:
8b:28:c8:c2:1a:31:d8:f2:78:7f:62:bd:b8:4d:d1:2d:5c:f5:
b9:92:22:92:fc:ec:73:b5:06:61:f8:bf:bc:81:3f:39:69:fd:
3b:68:83:33:0e:44:44:93:cc:5b:04:b7:69:89:fe:99:02:a9:
03:86:21:9b:62:5d:6e:40:6d:fd:20:88:e1:b7:5b:78:90:1b:
da:11:0a:68:38:61:20:98:89:20:64:7d:27:65:96:ae:97:06:
5b:f0:11:60:cf:2d:62:3c:ae:58:9e:4e:e9:82:a2:11:b1:f5:
4f:ac:5e:c7:7c:8e:7a:11:63:2a:9e:07:ca:09:c6:1c:c0:09:
78:0d:0e:d8:8d:3d:3a:e5:29:c8:1b:be:98:84:18:02:d6:46:
50:ab:42:07:38:f3:0f:02:2d:8b:11:cf:63:a0:53:f1:f8:ad:
4c:2f:96:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:50:53 2025 by rpki-client