Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XgX0wpP1Wq5Bj_PdTfl0BeyGSXQ.roa
File: XgX0wpP1Wq5Bj_PdTfl0BeyGSXQ.roa (raw, json)
Hash identifier: ZiLDXXlFWRvu51zQjA4IP1EzxsAdaLKvcAynJvNBOdM=
Subject key identifier: 5E:05:F4:C2:93:F5:5A:AE:41:8F:F3:DD:4D:F9:74:05:EC:86:49:74
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0196C8A9433727DA4BFE07D767EF9977E21B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XgX0wpP1Wq5Bj_PdTfl0BeyGSXQ.roa
Signing time: Tue 13 May 2025 08:00:58 +0000
ROA not before: Tue 13 May 2025 08:00:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62610
IP address blocks: 91.210.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a9:43:37:27:da:4b:fe:07:d7:67:ef:99:77:e2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: May 13 08:00:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e05f4c293f55aae418ff3dd4df97405ec864974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:c3:af:80:3b:e5:4d:b1:00:08:fe:30:7b:
ec:a5:b0:43:78:e8:99:26:fc:79:fa:01:01:9f:82:
82:78:50:cf:f4:b5:f5:ec:e7:8e:b5:14:2e:71:79:
34:c2:f2:e3:b4:0b:e8:21:9b:3d:22:07:2a:c1:e4:
67:00:96:bf:38:3e:e2:81:ba:11:d3:7f:4f:6e:ec:
f8:2b:a2:b2:ba:51:67:a4:fc:1c:ee:78:71:0c:a8:
76:e4:29:d3:d1:b5:f5:8c:0c:81:19:37:3a:06:0e:
d7:3c:aa:b4:72:90:29:21:16:0f:40:b8:4b:10:70:
d5:a1:c1:84:b6:60:3f:2a:49:a7:05:c9:56:d1:ef:
be:5c:7f:cd:78:b1:f1:0d:0b:eb:5c:34:ed:0f:cc:
9a:dc:e8:80:58:2f:5a:6c:1c:41:cb:a5:49:16:a7:
79:ed:21:5e:fe:d5:ad:7a:79:24:6c:a4:bf:66:ea:
48:68:11:36:ad:ac:0c:50:11:75:73:7e:da:61:46:
d4:54:bf:0b:cc:96:c3:7a:70:a5:89:f0:46:32:23:
95:2f:3a:03:65:48:4c:10:03:0c:0a:64:fc:69:04:
63:52:66:c2:90:6f:a2:de:49:c8:86:d1:e6:ef:f0:
62:77:b1:b6:63:35:86:15:3f:06:6e:08:a4:e2:b4:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:05:F4:C2:93:F5:5A:AE:41:8F:F3:DD:4D:F9:74:05:EC:86:49:74
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/XgX0wpP1Wq5Bj_PdTfl0BeyGSXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.145.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6e:11:b1:6c:8f:64:3b:41:9e:ee:c0:1d:6e:bb:8a:90:a8:
f9:f4:48:40:49:58:da:c1:20:13:76:97:0d:0a:dc:66:a8:ec:
a1:dd:47:f6:bf:a9:bf:a8:8e:ce:0c:33:2a:b7:b3:70:5b:01:
a6:b6:4d:98:b9:19:2a:a5:f3:e9:76:1d:d2:9b:f3:d4:46:1c:
57:70:98:56:a0:4c:a0:93:ee:d2:3d:da:ab:4f:01:23:a8:5e:
e1:9b:71:76:f5:b4:38:f0:ea:c0:1b:25:10:21:1f:42:e0:eb:
5f:b8:2e:03:a1:a3:68:12:9c:cf:d9:4d:bf:f6:04:a6:fd:6d:
29:bd:5f:15:9d:03:52:04:42:65:11:41:e2:0d:6f:21:07:fa:
56:69:a1:65:1d:fb:a3:df:42:85:17:3e:ad:a7:19:f3:bf:45:
47:bd:4c:db:f8:43:cb:3e:74:a3:6f:b0:33:f9:8c:b6:f6:6a:
be:8d:43:8e:01:55:7f:b9:78:2a:99:2d:4b:ef:c0:b0:d2:95:
25:88:2b:71:c2:10:19:0d:2a:f2:a7:17:7f:7c:42:82:2a:34:
52:4a:f7:bb:2a:f0:06:38:b2:7c:5c:14:30:4d:f3:3e:6d:b4:
cc:6e:78:1d:ab:35:4d:a7:ea:f0:36:dc:e8:fb:a3:a8:50:e2:
34:98:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:02:50 2025 by rpki-client