Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XIfLwSWNJXnpSCy84CBjb5lNz7g.roa
File: XIfLwSWNJXnpSCy84CBjb5lNz7g.roa (raw, json)
Hash identifier: PQ5ndyfAtBGT/JyABgnYJSop4rq8sDHY06eUqjhQUl8=
Subject key identifier: 5C:87:CB:C1:25:8D:25:79:E9:48:2C:BC:E0:20:63:6F:99:4D:CF:B8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019438344D72764093A853AD4E3F4CB3999F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XIfLwSWNJXnpSCy84CBjb5lNz7g.roa
Signing time: Sun 05 Jan 2025 20:42:19 +0000
ROA not before: Sun 05 Jan 2025 20:42:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213641
IP address blocks: 5.231.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:34:4d:72:76:40:93:a8:53:ad:4e:3f:4c:b3:99:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 5 20:42:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c87cbc1258d2579e9482cbce020636f994dcfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:61:48:29:42:ac:7c:df:72:ad:5b:43:8a:
42:e3:0d:ff:5c:2c:30:2a:4d:87:48:e4:82:3e:1b:
32:d3:e0:33:bb:4f:7f:c6:86:a0:6b:02:67:a1:ea:
3e:be:45:5a:d8:b8:85:bc:cc:69:d2:49:db:b1:f6:
e4:29:28:ba:95:93:39:5e:8a:50:cd:5b:a1:01:f0:
85:43:6d:52:6d:8f:2d:2e:83:ce:dc:e8:33:62:15:
b9:cd:80:52:6e:f8:71:f4:96:a6:ba:d4:99:82:47:
ad:a3:c1:a7:dc:c3:c2:6e:a7:2e:c6:11:1d:78:fa:
3f:8b:9e:01:22:94:17:96:d8:b9:3c:9b:48:e9:fe:
2e:34:c4:82:dd:a6:b7:9d:12:1c:59:25:58:d7:ed:
0b:ca:ce:6e:ec:0b:88:50:aa:e8:17:c9:da:db:4c:
ca:da:1e:2f:93:63:1f:d3:6a:b2:99:f0:3c:2b:a4:
1d:a7:a9:13:e4:f2:9c:9d:a3:a3:2c:45:94:53:c4:
56:74:48:79:a8:8b:ec:5c:f8:df:75:57:19:23:11:
c2:40:ff:0b:c4:91:36:4c:1e:4e:74:8f:22:90:9c:
76:f1:c7:b1:3d:13:7d:a4:f1:60:40:9e:51:af:4b:
86:3e:00:b3:da:bd:cc:cb:35:80:48:d1:8a:62:fd:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:87:CB:C1:25:8D:25:79:E9:48:2C:BC:E0:20:63:6F:99:4D:CF:B8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XIfLwSWNJXnpSCy84CBjb5lNz7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.252.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:7e:8f:58:37:03:60:46:2e:eb:ab:a8:c6:8f:9e:7c:31:be:
4d:b0:01:12:62:4a:50:dd:eb:a2:54:f8:13:c5:5b:ed:a7:14:
e2:52:3e:07:2e:f4:f2:df:4a:03:49:80:63:94:b6:85:17:e7:
e0:fb:fa:f4:aa:9f:a1:27:9b:30:96:8b:71:77:01:47:c1:a8:
0b:c7:a1:be:24:f7:5d:28:08:47:49:19:6c:c7:45:88:c2:1b:
2a:3d:05:a5:3e:dc:b9:b4:6a:bb:35:d5:42:4d:06:a3:00:3c:
10:67:0d:21:04:c0:bc:fb:fc:f0:dd:57:01:d1:19:29:af:7f:
01:e1:68:47:cb:36:3c:75:b0:bf:55:55:3e:ce:36:24:d6:3a:
cc:d9:6b:30:55:28:5a:c7:d0:62:91:39:a1:26:15:d1:2f:92:
f5:c4:2c:82:a0:aa:f5:5b:9d:3c:8c:05:d1:aa:f8:d6:16:5d:
39:23:42:2b:c1:0f:d1:3d:55:3a:d1:5e:6e:90:08:09:31:6f:
ce:92:f5:af:dd:94:8c:c0:cc:11:9a:16:7d:6a:e8:c5:fd:2d:
84:4f:12:ca:21:a3:e2:32:fd:70:63:3d:b5:13:01:19:77:85:
bf:30:bf:ce:7f:1a:fa:42:cd:91:4d:42:f5:f8:8c:68:75:3f:
d2:27:7d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:52:16 2025 by rpki-client