Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/XqKPzfmuCzaXuReNqmun-bylVl0.roa
File: XqKPzfmuCzaXuReNqmun-bylVl0.roa (raw, json)
Hash identifier: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=
Subject key identifier: 5E:A2:8F:CD:F9:AE:0B:36:97:B9:17:8D:AA:6B:A7:F9:BC:A5:56:5D
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 019427483401B1BBB3DC995148AF02ECE48C
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/XqKPzfmuCzaXuReNqmun-bylVl0.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39402
IP address blocks: 185.127.124.0/24 maxlen: 24
185.127.125.0/24 maxlen: 24
185.127.126.0/24 maxlen: 24
185.127.127.0/24 maxlen: 24
193.27.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:34:01:b1:bb:b3:dc:99:51:48:af:02:ec:e4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ea28fcdf9ae0b3697b9178daa6ba7f9bca5565d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:fa:53:13:ec:8a:c3:81:a0:69:ce:58:e6:
a5:02:1c:b3:69:ef:e0:f7:bf:8a:55:43:9f:a3:ba:
cb:ad:ab:50:20:75:23:d0:52:17:13:1b:d2:8e:85:
87:f7:dc:8e:5e:ae:53:9d:86:a6:4e:5e:fb:9a:ad:
93:c5:64:c7:53:04:80:2b:65:1e:e0:12:6e:23:8d:
00:25:87:87:47:c1:bf:25:53:a6:7b:8e:35:9f:dc:
78:12:e8:35:b6:b3:68:1e:43:29:8c:4a:af:0a:2b:
e1:ee:76:68:3b:46:2c:4e:db:1a:b4:25:da:2a:35:
33:39:8a:bb:c5:40:31:33:9e:9f:09:78:f9:de:33:
ab:ed:23:6d:f0:6b:21:13:69:bf:59:79:61:40:4d:
a2:55:22:75:df:78:e3:b7:e8:43:4e:32:96:c9:43:
51:e3:49:02:60:4f:59:cd:a1:db:ea:c6:29:92:9a:
32:98:0f:5d:47:65:7e:5e:cf:bf:6b:1e:a3:d5:b1:
3f:01:25:8e:e1:48:c0:be:55:37:53:c8:35:8f:96:
9f:44:38:03:5c:9d:57:41:7a:e9:40:8c:fb:0f:2b:
4f:b1:6e:2e:56:3a:3b:75:c1:2a:87:79:b1:0c:84:
97:21:0b:8e:b9:13:b6:4c:b0:c9:40:62:e3:61:c4:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A2:8F:CD:F9:AE:0B:36:97:B9:17:8D:AA:6B:A7:F9:BC:A5:56:5D
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/XqKPzfmuCzaXuReNqmun-bylVl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.124.0/22
193.27.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fc:3d:01:a2:d5:b7:20:69:96:b9:4d:ae:fd:8d:2a:71:f1:
61:53:7b:f2:23:83:47:19:c0:e9:66:2c:5b:2e:6a:e3:98:64:
47:69:3c:9a:22:17:82:c2:28:6a:00:ed:4a:86:a7:16:b4:33:
c9:56:ea:b2:27:8e:75:0a:f2:90:57:21:7c:b2:60:5c:d6:6d:
3d:b1:6a:b5:00:8c:88:43:aa:0c:f0:23:97:2f:fc:f7:33:4d:
7f:2d:cd:69:f5:0e:6b:72:31:da:67:a1:35:28:0e:30:99:cf:
18:91:56:98:23:ec:fd:a7:85:8d:b5:18:a2:c8:af:57:03:11:
4b:5e:37:2e:bc:71:6d:79:99:cb:41:13:1e:f1:06:d0:86:28:
be:3c:e9:a2:d8:d8:59:f0:a2:45:c4:59:f6:4e:ee:d9:f2:2a:
9c:7f:b2:9a:73:0a:98:a2:00:42:99:09:bc:42:04:ed:7b:79:
f6:71:b2:e0:82:98:82:76:8f:cd:b3:86:12:f4:76:ce:da:b2:
ef:d2:33:88:79:52:35:a4:11:d5:03:34:40:07:f3:a5:f3:1c:
26:65:7b:91:f5:64:36:57:31:1c:c4:54:c3:3b:1e:a6:0a:e4:
f8:ce:de:6f:0d:54:17:4e:9b:11:c1:f2:d3:de:18:36:36:59:
c6:1c:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:02 2025 by rpki-client