Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa
File: XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa (raw, json)
Hash identifier: H5rv5m3vIYcLSxBobS/ikS6XumhtJHd2OiEi1Eup9mg=
Subject key identifier: 5C:07:12:05:E7:10:21:CF:14:22:00:D3:A4:18:4B:F1:0E:AD:38:FF
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 019425219BFD950B8B09B57AB812CE3D1092
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50559
IP address blocks: 194.5.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9b:fd:95:0b:8b:09:b5:7a:b8:12:ce:3d:10:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c071205e71021cf142200d3a4184bf10ead38ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:1b:28:16:e9:1b:86:04:16:27:c4:87:e8:
88:67:e9:6a:b1:4c:71:15:fd:f9:21:06:38:5d:0c:
63:69:3b:92:4e:7d:49:19:18:ef:36:dc:e8:a9:56:
e3:eb:02:58:15:05:95:b7:8d:44:03:66:f2:5d:b3:
36:80:2a:ee:1c:d7:fe:1a:25:40:95:37:88:02:33:
dd:a2:2e:a0:5b:60:68:a8:34:b2:ca:29:c1:4a:b0:
c8:74:f9:ac:8d:6f:68:70:cd:11:3f:12:0d:ee:aa:
ec:3c:cd:82:d1:3f:69:86:b3:7c:9d:3d:d6:92:df:
c6:62:f0:b5:dd:6d:66:dc:a8:29:a6:1c:7e:c5:86:
4e:4d:80:af:ba:9a:4b:f1:97:f9:5d:10:5e:bb:82:
d0:61:ff:ba:b7:cc:4d:58:bc:e0:f0:41:6d:ad:f2:
9b:6b:3d:91:4d:8c:85:91:0c:2b:69:fa:fd:1d:72:
53:5a:96:a5:1a:60:57:a0:1e:87:14:00:b0:5c:6e:
ae:2b:e8:9f:8b:4c:12:66:d8:5e:bd:44:c8:7b:b3:
11:4a:75:10:bf:02:ec:a2:5b:50:be:39:93:ae:cc:
26:63:91:03:d0:bd:c5:50:77:89:45:0c:22:ea:0d:
0f:dd:23:c6:73:40:d8:3e:96:eb:4e:07:ae:d2:ae:
80:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:12:05:E7:10:21:CF:14:22:00:D3:A4:18:4B:F1:0E:AD:38:FF
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/XAcSBecQIc8UIgDTpBhL8Q6tOP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:92:45:81:b4:d7:76:0f:41:a3:1d:6f:03:a5:e3:6e:9a:02:
3f:e6:ac:73:42:ec:22:8d:11:5f:76:62:3f:67:e0:c3:5f:78:
b8:30:2d:4a:34:fd:8d:d7:22:68:25:7c:77:12:ff:ed:09:7a:
12:f3:8c:cb:5a:fb:53:f0:43:25:42:49:c7:0c:52:67:86:d1:
b3:a0:85:2c:72:7f:aa:9c:7c:cb:6b:60:30:96:6e:07:5a:bb:
5d:ad:95:db:2e:23:fc:b7:74:e0:b4:b5:ee:5a:5a:ef:16:c2:
8d:0a:4e:da:6a:2b:5e:78:56:37:9d:eb:ce:3d:cb:c8:a9:e4:
09:1b:bc:8a:d6:b8:4c:8f:ad:f5:d1:c1:4d:32:f2:56:94:c5:
b9:dd:89:ea:22:e4:1d:8a:36:08:ed:19:67:bb:c5:28:32:d5:
93:82:00:b6:3f:4e:8a:af:00:fc:c6:6c:f9:a2:0d:c5:6d:d1:
99:1f:ef:f3:2a:57:1e:9c:d1:0a:a4:98:e2:c4:7c:bb:31:18:
77:74:ab:1c:59:d4:2e:32:f6:1c:bf:56:b7:98:9d:bc:1a:35:
3a:32:71:ac:32:48:23:ad:34:0b:e4:88:8d:62:68:50:39:5f:
d8:c0:19:9b:90:a3:cd:66:53:7f:f1:7d:5e:3e:f0:a2:06:35:
79:52:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:30:03 2025 by rpki-client