Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/xgKcu0KPsxc8M315Trs0GW1UUwk.roa
File: xgKcu0KPsxc8M315Trs0GW1UUwk.roa (raw, json)
Hash identifier: ICZ6+2Jz2veLFc1cLdSpid822PA3P/5mVBK8JthGSW0=
Subject key identifier: C6:02:9C:BB:42:8F:B3:17:3C:33:7D:79:4E:BB:34:19:6D:54:53:09
Certificate issuer: /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial: 0194258F619BF1052D0161D9785892A25037
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/xgKcu0KPsxc8M315Trs0GW1UUwk.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 131.234.0.0/16 maxlen: 16
192.26.174.0/23 maxlen: 23
192.26.176.0/20 maxlen: 20
192.26.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:61:9b:f1:05:2d:01:61:d9:78:58:92:a2:50:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6029cbb428fb3173c337d794ebb34196d545309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:57:6f:68:33:97:73:13:49:dd:78:f5:69:
d0:76:d7:33:30:bd:82:f0:d3:3e:80:3e:7f:1d:6c:
7a:e5:a1:9c:db:91:13:e0:16:38:ac:c2:b3:25:50:
64:41:95:c5:a8:1b:ab:34:b3:40:05:9b:16:81:c7:
bd:d2:33:0d:d0:90:85:71:bc:6c:4b:b0:44:76:47:
c0:b5:c7:60:4f:9d:f1:f6:67:a9:6e:9b:5d:75:00:
9e:16:7f:a5:81:d4:9a:a2:d0:8d:5a:0a:28:f2:67:
2f:cb:60:aa:70:df:cc:b6:2c:c7:2a:73:43:7d:bd:
dd:e3:af:a0:d6:52:d2:cd:93:dd:40:8b:b0:a9:32:
e7:5c:0f:ad:d3:2b:34:04:ba:4c:c8:f4:82:1b:af:
c0:0c:38:ca:72:6a:27:da:19:be:1e:a8:61:6e:f0:
00:df:38:f6:ff:b0:b5:61:ee:76:74:23:a4:b6:cb:
fc:18:0f:d0:17:e7:9f:db:b6:8e:1a:ed:53:db:2e:
a3:25:7a:e7:84:36:98:7f:57:e7:02:3e:96:54:d8:
ba:7e:85:f5:7e:a4:f2:16:30:90:1f:5e:0d:9b:44:
17:bc:cc:ec:2d:b5:a2:5f:53:06:0d:2a:89:ac:49:
d2:7d:54:e2:86:60:fc:44:77:b1:8d:0d:75:d4:ff:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:02:9C:BB:42:8F:B3:17:3C:33:7D:79:4E:BB:34:19:6D:54:53:09
X509v3 Authority Key Identifier:
keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/xgKcu0KPsxc8M315Trs0GW1UUwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.234.0.0/16
192.26.174.0-192.26.193.255
Signature Algorithm: sha256WithRSAEncryption
45:58:61:a7:9c:b4:82:b4:ad:b8:68:cb:86:22:49:0b:37:73:
78:51:73:f2:9a:03:96:05:c8:24:27:11:ca:4b:6c:7e:c0:ab:
52:b2:a4:e6:1d:de:bc:cb:55:c4:84:9d:ab:fb:ce:db:78:03:
81:7a:c8:47:c5:70:30:65:09:12:6c:69:d3:3e:aa:8c:74:af:
57:69:e3:3f:c4:e5:0a:16:92:09:e9:ce:22:7b:d4:ad:17:8b:
e1:13:d6:7a:12:b8:4d:29:01:8c:3a:3d:25:31:b7:70:3c:66:
0c:01:e5:ef:99:15:a3:4f:94:3d:98:e8:6b:68:cb:9e:76:73:
88:12:73:13:50:d1:e7:4b:34:5e:ac:71:7b:47:43:de:3e:ac:
cc:7b:04:73:99:a0:24:c7:af:c9:4a:2b:4e:20:b6:69:76:77:
b4:12:6e:6a:b6:78:a4:02:f5:00:ec:82:09:a9:83:c2:a9:25:
56:d8:ad:ef:65:f5:59:18:32:26:6c:bb:5d:76:04:96:ed:50:
76:4e:6d:4c:0c:52:fb:a9:b3:ea:4e:8c:07:72:54:c7:8e:fb:
ec:72:59:51:43:ea:0d:fc:e7:a5:82:47:d9:49:33:b3:2c:a6:
71:0e:24:db:00:1f:c5:57:aa:0d:63:14:21:d9:39:db:7a:8e:
be:a4:80:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:20:02 2025 by rpki-client