Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa
File: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (raw, json)
Hash identifier: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=
Subject key identifier: 5D:17:71:E3:E7:08:AE:F9:3E:24:E1:76:BA:F6:3E:28:A9:6A:28:18
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C5FD9743A5962885C812DBA24AD1
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199568
IP address blocks: 82.163.38.0/24 maxlen: 24
82.196.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c5:fd:97:43:a5:96:28:85:c8:12:db:a2:4a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d1771e3e708aef93e24e176baf63e28a96a2818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:b7:3b:70:ba:d0:6c:a7:f1:4a:c6:a2:cc:
d7:a9:24:64:99:34:77:e0:eb:88:b6:91:76:49:96:
51:9f:1e:59:2f:dc:d5:ce:53:a0:01:b4:5f:04:89:
ed:30:e9:8c:0c:d4:59:0b:74:90:8a:88:ee:9d:4f:
f8:82:45:73:28:d1:81:73:69:6b:6a:47:bd:d9:2e:
93:8e:4a:8a:45:d3:90:13:92:b5:20:0b:fc:e7:7c:
df:07:0f:19:ca:a7:43:e9:89:37:7d:9c:c6:fb:43:
3e:3d:b5:b3:c1:7e:03:d9:39:64:c0:cd:d3:53:d2:
ed:a5:95:47:74:fd:5a:5a:7e:c9:d8:57:c2:3c:2b:
85:eb:29:12:cc:2b:70:40:bd:67:36:56:31:10:cf:
2c:1b:03:24:fa:33:56:6e:e7:f0:24:c8:66:e8:b0:
8f:36:cb:f1:8d:77:05:ee:e0:02:93:24:47:78:d7:
d3:89:01:8f:68:bb:41:4e:a1:7b:79:63:08:0d:07:
a3:d1:ce:62:59:8e:ea:e7:34:d3:15:40:37:96:97:
51:77:dd:7b:5b:2e:9a:51:e0:55:c2:9d:0b:7b:27:
17:bd:d9:cc:0c:3a:2a:50:db:36:1e:3b:bc:1c:be:
f1:2d:b2:63:19:93:c2:41:07:e9:d8:0b:74:35:b0:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:71:E3:E7:08:AE:F9:3E:24:E1:76:BA:F6:3E:28:A9:6A:28:18
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.38.0/24
82.196.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ac:a9:c8:6e:21:6f:fd:02:93:09:9b:56:75:2b:a3:0e:da:
da:dc:d3:b4:92:43:bf:61:b6:1d:ae:a4:97:03:46:66:45:65:
b2:c1:7c:bf:e5:e4:ae:c3:c2:cf:64:1e:94:bf:03:8e:bc:fe:
dc:c0:7e:2b:ec:03:51:68:95:95:2d:2a:46:ab:6f:e8:4f:0b:
01:19:69:8c:4c:60:8d:07:90:65:b2:f4:24:b9:1e:ed:e0:15:
24:91:85:4a:b6:f6:7a:06:7d:fa:b7:07:fb:d9:12:53:09:95:
47:4e:a9:e8:2b:39:bf:f2:35:09:11:9b:8e:00:4e:bf:cf:33:
47:f3:aa:ea:85:4e:20:15:70:d7:c0:87:40:e3:c8:35:5d:98:
8f:20:be:e6:55:59:72:12:00:ee:2f:53:26:0b:4a:93:ba:3c:
b1:0d:6e:7e:80:7c:6d:87:c7:0c:50:e3:ce:fd:75:8d:a2:f3:
a6:ee:db:0d:06:70:3a:ef:d7:37:b1:c7:40:eb:7a:ae:14:2c:
89:79:7c:73:d8:91:53:f1:fe:6a:76:e3:75:59:99:1f:c4:a0:
db:62:76:9e:7c:34:63:42:0e:9a:5c:91:d2:19:0a:00:e8:6a:
a0:12:e0:c2:24:eb:4f:c1:db:0c:b4:fc:cf:32:52:71:3d:41:
d5:fb:90:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:53:44 2025 by rpki-client