Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/Xl3YP80xX-lEr2eQm3awPuPHr44.roa
File: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (raw, json)
Hash identifier: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=
Subject key identifier: 5E:5D:D8:3F:CD:31:5F:E9:44:AF:67:90:9B:76:B0:3E:E3:C7:AF:8E
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01961AD822CF6FB3FDE80DE07BAD2557CD7E
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/Xl3YP80xX-lEr2eQm3awPuPHr44.roa
Signing time: Wed 09 Apr 2025 13:58:14 +0000
ROA not before: Wed 09 Apr 2025 13:58:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 5.23.0.0/19 maxlen: 19
80.231.0.0/16 maxlen: 16
80.231.8.0/21 maxlen: 21
80.231.11.0/24 maxlen: 24
80.231.22.0/24 maxlen: 24
80.231.56.0/24 maxlen: 24
80.231.71.0/24 maxlen: 24
80.231.93.0/24 maxlen: 24
80.231.94.0/24 maxlen: 24
80.231.96.0/21 maxlen: 21
80.231.112.0/21 maxlen: 21
80.231.176.0/21 maxlen: 21
80.231.187.0/24 maxlen: 24
80.231.202.0/24 maxlen: 24
80.231.216.0/24 maxlen: 24
80.231.235.0/24 maxlen: 24
195.219.0.0/16 maxlen: 16
195.219.22.0/24 maxlen: 24
195.219.40.0/24 maxlen: 24
195.219.41.0/24 maxlen: 24
195.219.43.0/24 maxlen: 24
195.219.44.0/24 maxlen: 24
195.219.45.0/24 maxlen: 24
195.219.168.0/23 maxlen: 23
195.219.204.0/24 maxlen: 24
195.219.232.0/24 maxlen: 24
195.219.235.0/24 maxlen: 24
195.219.238.0/24 maxlen: 24
195.219.240.0/24 maxlen: 24
195.219.246.0/24 maxlen: 24
195.219.248.0/21 maxlen: 21
195.219.253.0/24 maxlen: 24
2a01:3e0::/29 maxlen: 29
2a01:3e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:d8:22:cf:6f:b3:fd:e8:0d:e0:7b:ad:25:57:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Apr 9 13:58:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e5dd83fcd315fe944af67909b76b03ee3c7af8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:94:42:63:32:f5:7a:88:8a:c1:93:0b:30:
1f:38:11:8f:97:2b:87:84:29:4b:e5:fa:25:c8:2d:
0d:48:fa:f5:c6:01:e3:41:24:f5:e8:54:73:ef:d9:
48:84:09:af:ca:de:af:2e:9b:82:79:33:f8:f4:c0:
84:23:aa:d8:52:1f:39:b2:f2:a4:6e:09:f4:0b:b0:
a9:fe:bf:d5:26:14:cd:fb:a9:da:67:bb:b8:db:ff:
ed:17:0a:99:87:a8:a1:4c:86:a4:f0:9b:ce:da:b7:
4c:53:00:e0:97:65:1f:06:a7:89:ea:aa:f2:81:9c:
3e:21:0e:6c:88:74:c9:0e:31:05:9d:5d:4e:94:2a:
e4:33:2e:b1:f6:21:60:b4:44:37:7c:a7:98:64:4a:
ce:91:b5:f3:73:e4:2f:46:c1:6e:ae:cd:ec:07:2a:
25:68:2b:d9:a8:ba:85:b9:4d:88:08:6e:ea:91:af:
a0:ec:79:71:34:ed:44:e7:6e:1d:13:24:5a:93:e2:
ae:ea:17:02:90:11:e6:e9:e8:14:92:bb:3a:8c:c2:
bf:ba:e8:97:05:a1:22:47:f5:df:e5:41:d7:98:84:
2d:1b:31:36:99:a9:f9:88:03:bf:c0:cf:a0:ec:42:
0b:f9:87:eb:16:ff:b2:d9:92:74:cf:71:1d:20:fa:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:D8:3F:CD:31:5F:E9:44:AF:67:90:9B:76:B0:3E:E3:C7:AF:8E
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/Xl3YP80xX-lEr2eQm3awPuPHr44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.0.0/19
80.231.0.0/16
195.219.0.0/16
IPv6:
2a01:3e0::/29
Signature Algorithm: sha256WithRSAEncryption
dc:b4:22:7f:83:0f:f0:26:ec:10:a4:83:14:b6:21:61:ad:1d:
c3:fe:66:c7:07:e6:78:df:73:b4:c2:8b:0c:6f:9d:71:0c:21:
72:00:02:1e:e7:13:fc:9f:9c:cd:1b:46:21:93:d0:d4:50:1a:
dd:eb:e3:d9:c4:5b:7c:9e:90:ca:12:cb:12:f9:a5:69:81:f2:
ed:e3:52:da:d8:cb:79:73:c4:51:07:ec:1f:5f:77:59:1f:e7:
35:9c:b9:1d:26:2c:33:bd:f3:b0:0e:8f:b2:da:7b:cc:18:cf:
16:05:3c:2c:2f:80:ec:e3:28:66:30:c5:c2:b7:80:19:6b:3a:
90:46:28:2d:65:6d:fb:ea:e8:d6:09:a9:2f:c3:70:c1:1a:e4:
b3:bd:05:72:49:e7:5b:07:12:6c:a8:c2:7f:e2:a2:50:68:bb:
4f:04:3b:00:d5:55:06:c9:0f:ea:a1:82:c1:6f:12:f2:75:fe:
28:54:73:81:4c:80:de:65:52:e7:2e:e1:2b:38:a5:a6:af:f5:
ae:fc:2b:b2:44:f1:d4:36:96:b8:f1:b5:60:e4:ce:a4:45:91:
68:5d:65:5e:28:f9:9e:02:fb:17:79:d4:c5:80:d0:24:b9:05:
6f:2a:c9:d6:41:cd:29:8c:bd:5c:88:d6:c8:3a:e2:ef:29:f9:
65:5e:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:30 2025 by rpki-client