Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/XReUfUCxwWQCEZZLX8meeDSJnWA.roa
File: XReUfUCxwWQCEZZLX8meeDSJnWA.roa (raw, json)
Hash identifier: RZiWRDg+Pjcy7sZ6mPvtsgj18CRvgPEttJrCsz0Vu30=
Subject key identifier: 5D:17:94:7D:40:B1:C1:64:02:11:96:4B:5F:C9:9E:78:34:89:9D:60
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 019424B3ECEFD9C6A818A238B4C757052DAC
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/XReUfUCxwWQCEZZLX8meeDSJnWA.roa
Signing time: Thu 02 Jan 2025 01:49:18 +0000
ROA not before: Thu 02 Jan 2025 01:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200919
IP address blocks: 185.91.112.0/24 maxlen: 24
185.91.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ec:ef:d9:c6:a8:18:a2:38:b4:c7:57:05:2d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Jan 2 01:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d17947d40b1c1640211964b5fc99e7834899d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:2b:4f:1b:ca:64:15:b8:71:b4:b7:cf:a0:
64:79:36:8e:dd:d4:83:de:3b:a7:14:27:8a:57:d1:
d4:10:44:03:a6:29:50:5a:f8:d3:a7:64:e5:47:1b:
1e:f7:8d:8a:a1:f9:a0:8e:dc:d6:24:f8:3e:dd:ac:
92:d8:8f:4b:8b:df:0f:71:5f:37:fe:8e:77:74:f0:
7e:99:b5:82:a9:c7:b5:b6:0e:6c:e1:9b:42:c9:8f:
72:6e:f9:4d:ef:4a:56:70:9a:f5:67:41:9c:ae:6d:
0a:11:da:b0:a0:91:8f:0f:72:e4:d8:aa:c4:09:08:
c3:c1:a4:cb:5f:82:ce:75:30:87:92:7f:1f:8a:25:
f0:ed:44:99:5c:dc:70:ab:df:a3:19:ad:cf:6e:9e:
a5:0c:77:15:e4:43:32:8b:49:45:c8:e4:ea:8b:3f:
6f:22:7d:24:56:72:bd:47:7d:cf:ae:2d:df:9e:ee:
1b:4a:9d:8d:ca:cf:af:0a:e6:11:19:33:82:cc:7f:
a6:a3:b5:b4:0d:b5:34:1e:bd:06:35:f6:a5:a7:e0:
76:4e:74:bf:aa:74:3f:19:98:f4:bc:47:72:2f:e9:
3e:1b:47:93:a1:7f:fd:d6:a2:8d:68:d8:5a:ec:b5:
e7:cb:a5:c7:07:5b:a4:4e:66:5c:c6:ec:91:6f:13:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:94:7D:40:B1:C1:64:02:11:96:4B:5F:C9:9E:78:34:89:9D:60
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/XReUfUCxwWQCEZZLX8meeDSJnWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/23
Signature Algorithm: sha256WithRSAEncryption
57:30:99:42:d5:f3:b2:d1:49:04:28:f8:7c:74:9d:40:88:07:
44:5a:f8:fe:f8:f7:9a:be:6c:1a:01:23:1b:bd:4e:2e:4a:6b:
e3:8c:de:e9:1d:5f:3f:8b:7a:f7:89:51:09:84:fc:50:7e:24:
88:0a:c8:79:61:32:e2:ef:89:8c:5e:43:50:e6:96:dc:ad:d1:
2b:2c:1f:ab:00:7b:66:3f:af:95:42:13:13:ed:72:9e:92:f2:
43:ff:b2:c9:75:bc:ae:0e:72:6a:aa:92:ea:8d:9c:23:1c:f0:
ec:4d:7b:9d:6c:79:35:29:50:9a:e7:ca:db:ea:24:2d:0c:2e:
97:f5:ed:26:63:f0:31:83:8d:eb:65:61:d5:7a:1f:41:9c:d2:
28:ab:92:2c:e8:cf:f7:a3:b2:ce:2f:23:33:03:4b:f1:52:86:
f1:36:ab:66:78:8b:08:5d:89:6b:d1:cb:29:3d:ab:6a:e1:eb:
eb:c4:d4:fd:23:c4:17:32:a9:89:6c:2c:81:43:f2:bc:1c:4c:
ea:c1:6c:60:bf:b5:b4:8e:80:2d:3c:f7:48:d7:3a:84:d6:89:
42:23:a4:35:81:f9:18:bd:d6:58:79:f7:ae:54:2b:59:60:c2:
c3:3a:95:54:6d:cc:1b:98:8a:30:cd:53:fa:56:21:1f:ae:c5:
79:fa:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:00 2025 by rpki-client