Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/xbAnBjLqGjs9MoebU27xTpAXF-E.roa
File: xbAnBjLqGjs9MoebU27xTpAXF-E.roa (raw, json)
Hash identifier: Q80N11JbIqnaJwMmz573rLhvL647301AWxsGwoimeQk=
Subject key identifier: C5:B0:27:06:32:EA:1A:3B:3D:32:87:9B:53:6E:F1:4E:90:17:17:E1
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 01946F473A23763ECEACBE233458A65F5EED
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/xbAnBjLqGjs9MoebU27xTpAXF-E.roa
Signing time: Thu 16 Jan 2025 13:22:06 +0000
ROA not before: Thu 16 Jan 2025 13:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15982
IP address blocks: 194.106.166.0/24 maxlen: 24
213.244.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:47:3a:23:76:3e:ce:ac:be:23:34:58:a6:5f:5e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 16 13:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5b0270632ea1a3b3d32879b536ef14e901717e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:cf:2a:6a:6c:c0:3f:f1:f7:af:4c:8b:4b:
13:7e:a2:07:77:2c:04:10:74:57:b4:24:c9:0d:fb:
f5:75:7d:e0:9c:a7:2e:3a:e3:29:46:70:f6:46:40:
09:b9:f5:fe:84:12:8e:19:58:be:ef:5c:f9:cc:26:
20:36:5b:89:fc:3a:6b:3b:80:fa:3f:93:8e:75:2a:
a9:f0:22:39:b7:84:f9:c5:9e:a9:57:b7:c6:e1:59:
9d:5e:7d:a9:fb:f9:ad:13:8c:ed:f4:33:0d:04:ec:
55:cb:16:88:67:80:0b:15:77:a3:d7:48:6c:72:7b:
62:b5:01:cc:10:e6:da:90:5d:0a:89:bc:f6:d6:99:
f8:e1:1b:91:98:20:e8:b9:ab:0d:fa:db:27:78:63:
b9:97:0c:28:18:08:84:8d:56:87:11:68:4f:ab:5f:
fb:d5:e4:f8:a8:dd:5d:2e:fa:97:cf:8b:fa:a1:5f:
75:7a:50:0b:0a:66:18:7f:76:f2:51:b2:c1:6a:77:
6c:ff:08:5c:3c:0b:10:3f:e5:8a:95:e9:ab:c8:97:
01:06:ce:ce:f1:89:09:5f:19:97:fb:c2:ac:b3:02:
d4:2e:5d:2d:58:80:95:14:1d:61:7f:13:13:71:e8:
26:0d:4d:4f:57:81:5c:7f:aa:d9:90:43:36:a6:68:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B0:27:06:32:EA:1A:3B:3D:32:87:9B:53:6E:F1:4E:90:17:17:E1
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/xbAnBjLqGjs9MoebU27xTpAXF-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.166.0/24
213.244.230.0/23
Signature Algorithm: sha256WithRSAEncryption
09:8f:dd:3b:78:03:e2:15:69:97:0e:e0:ec:3a:ef:48:4b:dc:
f7:50:2b:7c:25:a5:87:a5:03:be:17:f5:91:24:60:4c:7d:b5:
b4:3d:85:d9:ab:76:0f:b2:8f:03:c0:28:dd:95:f7:11:da:ea:
8a:46:1b:e6:50:9c:f4:dd:41:30:c1:d7:77:63:67:85:be:bf:
6b:fb:16:f6:b2:f0:1e:a7:6e:12:15:ea:87:fa:7e:58:18:79:
00:60:e5:94:8a:80:e5:8e:a9:c0:4f:6d:d0:55:0a:19:3d:2c:
6f:08:61:51:fe:96:b7:0d:9f:d1:99:09:d2:65:dd:e2:93:dc:
22:4b:9f:75:32:e5:23:68:35:a0:0d:8c:31:44:78:7b:77:31:
91:d4:2d:76:7f:53:fb:14:aa:d3:f1:fd:4f:b2:61:c7:c0:0d:
b7:47:00:b3:73:ef:a1:b2:a2:48:39:70:c6:a6:fa:f3:88:16:
bc:e9:74:4c:c9:e7:ff:bb:fc:54:ee:21:7d:ee:67:2c:64:08:
98:2d:d7:cf:df:25:6c:cc:9e:36:26:ed:c4:8b:a5:07:b8:49:
bb:48:ef:39:70:16:a9:41:ef:80:37:5f:59:f3:64:17:4b:15:
2c:50:77:27:d7:e5:24:47:2f:dd:b1:66:9d:96:01:e8:ea:57:
13:c3:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:49 2025 by rpki-client