Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa
File: Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa (raw, json)
Hash identifier: EiQGdbjr/bLCsj+VsiQM91wVnJzTPBjoFf00fG7D2D0=
Subject key identifier: 5E:B8:DD:DB:A2:92:0F:54:F3:40:B7:5B:67:48:81:9E:E3:12:81:EA
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 0194266B51DA1815A3C9364A69AA61694DC2
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa
Signing time: Thu 02 Jan 2025 09:49:14 +0000
ROA not before: Thu 02 Jan 2025 09:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16327
IP address blocks: 91.209.193.0/24 maxlen: 24
194.146.180.0/22 maxlen: 22
194.146.180.0/23 maxlen: 23
194.146.180.0/24 maxlen: 24
194.146.181.0/24 maxlen: 24
194.146.182.0/23 maxlen: 23
194.146.182.0/24 maxlen: 24
194.146.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:51:da:18:15:a3:c9:36:4a:69:aa:61:69:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Jan 2 09:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5eb8dddba2920f54f340b75b6748819ee31281ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:62:a5:5f:39:43:50:17:b0:52:f4:e2:18:9a:
b3:26:8e:8a:16:49:b9:5b:46:65:bf:19:06:17:11:
38:2e:85:9c:9d:b5:3c:44:e5:19:c2:ce:1b:e2:c0:
20:5a:02:61:14:a1:51:e8:e5:f7:8c:2b:f2:b0:8c:
a6:ba:3e:e4:44:45:c3:41:ca:d6:df:0f:d8:75:94:
a5:60:23:22:be:dd:1a:39:9b:61:db:ab:33:87:5b:
68:4d:02:1e:6f:4c:d6:19:f7:e7:70:8a:df:28:6a:
1e:6a:ef:2e:28:1a:b0:7d:7f:f8:15:8b:a5:7d:c3:
03:b6:95:fc:ba:3c:6c:fc:d3:a6:5f:19:32:6d:08:
76:bc:ec:c0:88:30:66:0a:9a:ad:53:2c:37:9d:c9:
32:b3:a6:bf:54:61:06:cf:8c:9e:2b:65:c9:15:d5:
20:6e:ad:3f:76:97:bd:37:0e:b4:44:86:b6:d1:e9:
07:29:3a:a9:41:f1:e3:59:97:61:cd:5e:d3:fc:4f:
9b:bc:eb:9d:31:70:e6:d8:29:b5:1a:e7:8a:26:75:
49:a4:7f:1d:e8:f2:52:9c:cf:a0:6b:7e:5c:5f:f5:
0f:da:34:a0:3e:8d:80:c7:68:d3:a7:15:16:7c:be:
fe:6a:c7:e2:c1:96:f0:31:93:59:81:bc:fd:d3:f7:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:DD:DB:A2:92:0F:54:F3:40:B7:5B:67:48:81:9E:E3:12:81:EA
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.193.0/24
194.146.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:07:5d:dc:71:ad:d7:34:7c:0c:61:a0:c4:df:58:67:a8:66:
7d:c1:88:79:09:e0:5a:99:1a:af:25:6c:39:1d:a0:d9:a9:e1:
c7:68:a4:4b:dd:dc:85:ff:7d:a6:11:39:7e:2b:5c:4c:87:19:
8f:7b:88:f2:e2:92:0d:47:07:f1:ba:a8:9d:3d:8b:f9:16:5c:
2e:92:9c:8a:4a:9d:68:2d:a0:63:85:01:cd:9f:a6:a4:1d:8e:
a7:47:47:89:95:54:07:3f:18:7e:d2:e1:55:85:f5:cc:66:58:
66:95:52:3f:f8:74:82:f0:0e:88:4e:9d:cd:54:6f:aa:7b:ce:
47:28:a2:6d:e0:53:bb:70:e6:26:3a:fc:f5:df:fe:b1:6d:8e:
4c:ee:7e:23:7d:ba:d8:fc:9f:e0:5b:33:6c:3f:3b:29:1d:c2:
e3:96:23:2e:d1:18:72:eb:3b:1e:b1:b8:4e:06:6f:7b:bb:b2:
73:cb:8b:45:1f:e3:37:62:c8:23:f6:4b:59:eb:f9:70:2c:17:
1c:5b:1a:f7:95:c2:c8:1b:5a:ce:88:dd:71:b5:ff:82:2b:4a:
c1:48:28:7b:ab:77:9b:e5:3e:d8:be:a6:d9:03:ba:43:22:48:
77:6a:16:57:a0:65:c1:8b:07:db:33:ca:23:4e:57:02:93:4c:
94:20:8d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:17:14 2025 by rpki-client