Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa
File: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (raw, json)
Hash identifier: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=
Subject key identifier: 5D:5C:6B:31:7A:E3:2C:34:15:BF:D6:DA:73:6D:AA:43:44:0C:36:F4
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019424B3947406A8BAB5A3414A658054D3E3
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 91.222.64.0/24 maxlen: 24
91.222.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:94:74:06:a8:ba:b5:a3:41:4a:65:80:54:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d5c6b317ae32c3415bfd6da736daa43440c36f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:e8:d9:e2:e8:67:bb:44:c0:e4:c9:ed:5b:
13:4c:82:6b:f4:60:d1:e0:c8:9a:d7:16:7d:ba:9e:
25:5e:3f:e4:dc:79:8c:47:25:ec:a6:a7:15:b7:5a:
6e:6f:db:a3:5c:47:95:f7:ff:1a:28:e0:f6:38:8d:
be:fe:58:03:e0:56:6f:40:76:03:bd:fb:e2:3c:b5:
99:89:1f:50:48:67:0f:83:0a:2a:98:50:11:5c:b5:
82:3d:f4:10:35:ae:0d:02:1e:aa:95:24:57:27:42:
35:37:4b:e6:8a:bb:77:b3:6e:50:ea:c9:7e:2f:95:
62:d2:e5:1e:e1:bc:96:55:23:4d:c7:e7:f1:30:10:
0c:80:45:54:e6:c6:92:1f:55:da:30:ea:f7:0b:e0:
d2:7b:8d:c0:5c:fe:b1:80:c6:10:14:13:1b:da:b0:
88:e0:4a:06:f7:1f:1f:05:78:c4:ad:cf:23:3c:06:
96:73:01:64:9b:e1:3f:36:3a:28:9a:e2:65:9e:5e:
f0:ae:62:01:d7:10:f9:6c:f8:5f:53:fb:48:82:53:
7d:ae:97:39:e6:9d:99:4d:ae:f2:2e:3e:54:bc:d1:
48:fe:e9:fe:46:41:0b:0c:e4:fa:32:42:8e:24:4c:
14:79:9b:2d:d8:51:f1:73:67:c0:c6:fd:c7:33:1f:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5C:6B:31:7A:E3:2C:34:15:BF:D6:DA:73:6D:AA:43:44:0C:36:F4
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.64.0/23
Signature Algorithm: sha256WithRSAEncryption
31:ec:be:c2:90:91:38:d6:57:b3:e8:94:7d:4a:a4:4f:00:eb:
42:10:73:19:06:21:54:36:f2:0e:28:b4:96:24:67:47:8f:08:
f7:f8:91:81:73:4f:94:7c:ee:d6:21:c4:38:07:10:f3:ac:47:
25:66:14:55:62:aa:aa:16:59:53:25:7f:be:1d:d8:08:eb:4d:
3b:73:9e:99:11:26:82:47:27:6e:c6:c7:29:21:30:20:8b:48:
2d:9e:12:41:40:e7:15:8e:76:4b:22:18:fd:dd:b5:5d:dd:3a:
95:2a:53:5e:e7:9d:55:b4:fb:a9:a1:ba:26:a3:eb:18:a6:e8:
12:f7:02:a8:a3:9e:be:0f:7a:f8:bc:55:ac:04:de:fd:ef:f2:
7b:93:e2:77:52:e6:bb:df:10:33:66:4f:46:18:cf:fd:11:8f:
09:72:96:6a:e4:2a:67:b4:dc:f5:ae:09:d8:36:3d:9e:5e:7c:
ec:e4:28:eb:cf:52:b4:af:dd:75:07:9f:be:40:34:ef:3e:f9:
78:f8:40:57:78:b8:66:7e:54:20:9f:b7:0c:03:c0:df:21:55:
e5:8a:ef:74:5d:ef:99:4b:a5:8f:17:a7:b6:89:39:b5:c2:16:
4f:e4:19:2b:2c:b2:c2:d8:cb:23:e0:11:8f:f7:07:6b:6a:98:
10:11:a5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:29:55 2025 by rpki-client