Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/xbzoE1xi_XLBrDBqc5C9cd74KWg.roa
File: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (raw, json)
Hash identifier: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=
Subject key identifier: C5:BC:E8:13:5C:62:FD:72:C1:AC:30:6A:73:90:BD:71:DE:F8:29:68
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 019422FAFF6D73F03BEAD036B20E056BA811
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/xbzoE1xi_XLBrDBqc5C9cd74KWg.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197573
IP address blocks: 176.52.184.0/24 maxlen: 24
2a02:f181::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ff:6d:73:f0:3b:ea:d0:36:b2:0e:05:6b:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5bce8135c62fd72c1ac306a7390bd71def82968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:63:f2:63:1c:2c:49:6b:08:a4:69:f4:49:
39:06:88:09:c6:94:0d:fe:ed:ba:70:d9:19:47:aa:
15:19:8b:03:d0:96:94:e8:be:91:de:6c:03:7e:c1:
51:ea:0a:6e:d1:88:12:31:d4:4a:4c:00:ce:bc:ba:
43:b1:87:cf:04:69:62:b6:e7:09:d1:66:a3:1d:01:
c5:3c:c2:9f:96:42:3c:ad:f8:38:a7:6a:43:dc:6f:
7b:2a:6d:40:98:78:3c:43:70:44:e7:f4:8b:9f:15:
32:76:3f:68:7c:54:19:e6:89:e8:df:62:27:34:35:
51:ad:ad:ef:2b:e6:61:e5:00:7b:f7:01:82:06:41:
c5:97:28:14:ba:3b:e9:2d:f2:9c:7a:4e:7b:61:7e:
19:b0:90:67:8c:0b:74:b3:d0:2f:52:94:5b:31:d2:
76:8b:ab:f5:5f:f5:f9:49:3c:d4:66:91:93:5e:e1:
07:fc:12:14:65:9c:73:54:2c:3b:2a:c5:47:8f:a9:
2f:4e:f5:25:61:d3:0a:43:ac:31:c9:d7:cc:86:8a:
c6:83:7b:c1:f3:44:5a:74:16:31:7d:0f:81:32:aa:
76:df:30:be:d5:b6:c6:12:03:be:f3:a0:13:4c:30:
37:2b:1a:5c:47:ef:18:59:ea:5e:23:fd:b0:09:d5:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:E8:13:5C:62:FD:72:C1:AC:30:6A:73:90:BD:71:DE:F8:29:68
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/xbzoE1xi_XLBrDBqc5C9cd74KWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.52.184.0/24
IPv6:
2a02:f181::/48
Signature Algorithm: sha256WithRSAEncryption
2c:20:af:33:40:47:d1:d2:cf:4b:80:11:b8:4b:5a:d7:8b:f1:
65:9d:33:a4:3a:48:57:17:04:74:2a:3b:69:13:a6:7b:bf:41:
4f:f9:7b:1d:be:ee:d1:43:34:4e:d5:34:a5:96:1c:c0:44:f6:
ae:7c:6d:46:5e:ad:bd:9b:60:e7:9d:32:b9:80:8f:76:bb:9b:
cb:fb:ee:00:79:99:fa:e8:c5:43:8e:cc:27:e0:45:de:19:1b:
0b:cd:e9:f1:46:84:40:e0:27:d3:e8:cc:b2:ff:f8:eb:5d:68:
49:f6:05:f4:9f:77:39:7b:65:72:c6:9b:94:2d:4a:f7:b1:b7:
32:9c:0a:51:eb:18:49:b0:ff:33:51:7d:65:fc:01:9b:f1:c6:
aa:1d:d7:1a:85:59:a5:14:95:64:a0:2f:1c:82:e1:77:d9:0e:
48:d3:c0:a0:98:87:6b:e6:57:9e:3f:45:fc:68:10:71:0b:85:
6d:94:6f:b9:95:d9:10:66:bb:77:93:40:2d:55:38:02:b4:d7:
c9:58:f9:96:2b:61:2d:01:c1:03:75:05:5e:18:e0:79:50:0a:
4a:9b:8a:fe:b0:63:79:d0:09:7c:cc:f2:8a:67:35:bd:98:97:
cc:10:70:07:a1:2b:ed:64:5e:51:1a:c8:08:96:22:c3:d1:64:
85:9e:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:31 2025 by rpki-client