Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/X4IP2kI-czd9MCpMhWTXvpvPDiU.roa
File: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (raw, json)
Hash identifier: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=
Subject key identifier: 5F:82:0F:DA:42:3E:73:37:7D:30:2A:4C:85:64:D7:BE:9B:CF:0E:25
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 0194236A05AB58A3E326BA271B6595FF5510
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/X4IP2kI-czd9MCpMhWTXvpvPDiU.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60136
IP address blocks: 84.20.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:05:ab:58:a3:e3:26:ba:27:1b:65:95:ff:55:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f820fda423e73377d302a4c8564d7be9bcf0e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:f2:a6:15:96:a0:2a:1e:d4:84:82:34:7c:
07:a7:b3:7d:d8:0b:6f:5f:51:4f:ff:0b:e8:75:c4:
62:f3:4a:1d:9e:d3:10:7c:ae:92:b4:95:d6:36:07:
a7:a5:a5:3f:fa:75:33:d1:49:71:9a:ca:e2:cf:01:
15:72:33:7e:0c:94:6f:b7:19:77:3e:e2:ee:cf:50:
a5:8f:ef:36:91:02:8b:48:05:b3:b7:7e:26:ac:ed:
6a:30:5b:3b:b1:8d:53:a7:92:2e:66:0e:7e:a0:0c:
be:36:70:df:c3:b8:06:cf:33:13:57:41:77:fb:a4:
90:9b:fe:93:c5:ac:b2:96:bb:41:41:97:b0:14:c4:
00:e1:8b:41:cd:ae:35:09:d5:6b:32:99:db:1b:3a:
d1:75:26:bc:84:b9:ed:8f:ba:ac:70:31:16:08:38:
94:22:c0:44:2b:01:7c:d4:1d:22:9f:f2:e6:7d:fa:
fc:fe:79:0d:37:0f:0d:15:78:cc:67:38:32:58:31:
30:60:9e:52:15:97:6c:c8:d5:f9:1c:dd:a8:b3:bd:
15:67:e4:59:3c:f7:e4:35:03:37:af:09:f8:55:a2:
56:d1:64:42:60:8a:4e:55:1d:9b:9b:13:54:03:17:
4e:b5:c5:5a:26:0c:f8:46:7c:d1:c0:34:70:2f:59:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:82:0F:DA:42:3E:73:37:7D:30:2A:4C:85:64:D7:BE:9B:CF:0E:25
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/X4IP2kI-czd9MCpMhWTXvpvPDiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.20.77.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b2:d4:23:d7:a5:51:b4:54:21:36:5f:45:7e:70:a5:0e:8f:
21:15:34:b4:5d:34:d5:ba:1c:31:b9:80:0e:7e:d0:f6:4d:b1:
b3:fd:03:57:1d:91:57:09:1e:34:d1:33:d4:47:07:78:80:69:
64:41:bc:82:34:e9:20:46:e5:4d:32:9e:7b:e8:81:9b:94:dd:
78:8d:d2:87:94:d7:cd:ba:b7:62:f3:92:80:1f:27:53:81:68:
b6:2c:82:87:c5:98:ba:94:4a:40:db:0c:0c:7e:54:44:3a:eb:
79:0a:be:a2:2b:72:7a:1a:99:d5:64:6c:6b:b3:14:c5:0b:08:
d5:f1:dc:7f:23:71:2c:51:a6:da:30:d1:9c:e7:25:24:02:e5:
dc:0c:b8:11:e4:59:42:c6:66:9e:aa:04:0f:f3:cd:3b:08:6e:
5c:b8:2b:7c:5a:0f:b7:f7:04:b8:bb:c2:22:59:0e:6c:a6:ab:
f0:ea:e4:3d:2b:a7:f0:0b:55:5d:56:6e:c1:a5:a8:09:27:79:
88:ab:bc:0c:fb:4a:b5:1b:87:36:31:63:44:ed:2a:a2:45:d5:
a5:ec:64:e6:84:97:02:ae:81:56:9b:84:f8:2e:1f:63:36:9f:
47:ee:6a:70:6f:81:ca:81:a8:ad:de:4a:07:8c:88:c4:61:95:
9e:03:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:04:56 2025 by rpki-client