Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/X18r0YcBXdlVt4dtzTGtFKTLVus.roa
File: X18r0YcBXdlVt4dtzTGtFKTLVus.roa (raw, json)
Hash identifier: fkhj9PhGn/lqfBa/A6zrPfKq6hlSrhRXutstC9gPX5Q=
Subject key identifier: 5F:5F:2B:D1:87:01:5D:D9:55:B7:87:6D:CD:31:AD:14:A4:CB:56:EB
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019428264406A3557728C67DBA4804830116
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/X18r0YcBXdlVt4dtzTGtFKTLVus.roa
Signing time: Thu 02 Jan 2025 17:53:03 +0000
ROA not before: Thu 02 Jan 2025 17:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134176
IP address blocks: 185.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:44:06:a3:55:77:28:c6:7d:ba:48:04:83:01:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 17:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f5f2bd187015dd955b7876dcd31ad14a4cb56eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:c4:8f:1a:ff:17:3f:4d:c3:03:42:ec:93:
55:c9:64:d7:9e:f5:f1:f1:7d:83:44:58:98:43:c5:
0a:74:4b:52:49:7f:ca:cf:3c:e1:d4:d6:a0:da:c4:
b8:71:70:73:4c:25:0a:e4:7c:50:4b:e8:a5:11:95:
6e:87:c7:89:13:ac:38:c6:1e:1b:06:90:bd:0e:36:
7f:e2:74:f9:e3:fe:89:a8:3d:0c:90:a3:a3:ec:31:
f7:cc:73:e4:24:37:f4:64:58:85:c1:e1:05:3c:cc:
64:a5:c2:81:52:ec:f1:5c:25:0b:6f:da:b9:ff:f2:
7d:c7:46:5d:37:c5:85:ea:e0:43:d7:6a:71:99:4e:
b5:fe:62:c7:d7:5a:8c:52:e3:c9:7b:12:b5:4c:b2:
96:29:87:aa:17:2d:fc:d6:b7:f1:00:3b:89:12:c5:
9d:7b:77:1a:8d:08:c5:73:16:79:3f:76:f9:0f:d4:
cc:22:7e:33:bf:e8:07:13:24:05:aa:d5:ba:86:d1:
a3:7a:d2:55:83:03:7e:aa:b3:62:27:e2:70:42:50:
7b:e8:d9:eb:e5:2d:39:06:53:15:2f:5f:29:4b:00:
0a:43:85:0a:ac:8a:00:66:4d:32:bb:26:f5:8e:79:
78:d9:94:d1:66:e2:49:6c:70:34:d2:88:0e:b8:43:
95:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5F:2B:D1:87:01:5D:D9:55:B7:87:6D:CD:31:AD:14:A4:CB:56:EB
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/X18r0YcBXdlVt4dtzTGtFKTLVus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e5:54:8b:3e:30:d7:75:98:90:c1:2c:f4:76:d9:b1:d6:cf:
60:7b:e1:1a:af:aa:a7:4f:ea:42:a9:b9:5f:c0:3a:8e:c1:a7:
4f:06:ee:a8:59:3e:f4:d6:45:a7:2e:e1:04:a5:e1:c0:16:c9:
c1:6b:3a:81:0e:82:7b:31:25:d0:7b:2a:53:36:6d:b7:5f:9e:
a6:18:15:8f:e7:1a:90:1d:59:81:30:c1:9a:35:b9:50:b9:62:
27:73:0d:a3:93:60:9d:98:74:1c:d3:74:cf:f9:9e:40:8b:07:
67:6e:05:75:07:cb:3b:fb:35:7c:2b:2f:a7:8a:7f:50:4d:e8:
ed:92:93:2f:fb:9d:36:2d:df:ed:bb:0a:6a:3c:c8:6f:29:7e:
47:65:49:65:e8:49:ac:85:11:3e:cb:d6:c2:37:c6:5d:4f:67:
7d:9b:66:2a:81:2f:bf:8f:41:4e:25:f1:83:b1:43:99:16:b6:
22:69:e5:11:06:0a:f4:2f:10:df:15:7a:a6:ac:9f:79:5f:67:
30:02:22:ef:bb:30:25:da:0c:6b:f2:5e:80:3c:0e:ae:e9:d2:
65:5a:05:74:93:62:41:5c:f5:67:aa:89:c5:9d:77:b2:98:2b:
51:25:c4:25:c1:9f:b3:22:33:88:8c:49:c8:6a:92:28:e1:d2:
f6:12:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:42:41 2025 by rpki-client