Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/XnDCkzumX5tfH409FJwkMnlFSQc.roa
File: XnDCkzumX5tfH409FJwkMnlFSQc.roa (raw, json)
Hash identifier: Mo++Aril7q2MXoVl4vdU3sk6OZqpVu6d9MmiNPndFaQ=
Subject key identifier: 5E:70:C2:93:3B:A6:5F:9B:5F:1F:8D:3D:14:9C:24:32:79:45:49:07
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01942220294523D994BE854CE0E81D458158
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/XnDCkzumX5tfH409FJwkMnlFSQc.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199310
IP address blocks: 2a0e:8f02:f058::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:45:23:d9:94:be:85:4c:e0:e8:1d:45:81:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e70c2933ba65f9b5f1f8d3d149c243279454907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:9a:2e:9b:7c:31:26:c7:68:3b:c2:fb:a0:
65:36:2b:82:2a:9d:0e:0c:83:09:39:26:6b:e8:46:
d0:83:eb:19:d7:f9:8a:b5:21:4b:d4:c0:96:1b:be:
88:aa:e5:75:f4:de:33:e6:5d:ad:db:63:3d:ed:6c:
bb:7c:a3:54:1e:07:d5:3c:4a:38:a6:36:f3:3f:72:
60:ba:d9:85:f8:e3:4d:81:f5:71:0d:43:68:72:82:
c9:c8:89:e6:bf:f2:6e:63:1e:6c:5c:cd:fb:dc:a0:
ba:09:db:74:1c:71:db:75:df:7c:02:79:4e:42:69:
5f:0a:2f:f0:06:1e:e3:ab:66:2d:9c:b7:2a:f3:2d:
b5:1a:9c:a1:93:f6:f4:fd:90:ce:18:c7:70:93:e4:
44:b1:ee:88:e6:6c:80:28:2c:cb:1c:1a:d1:66:aa:
a8:aa:47:29:64:1a:80:00:02:d6:57:83:78:05:65:
e8:88:b0:fe:63:f1:7f:53:07:78:fd:9a:0c:10:57:
ba:f4:ee:b2:41:f6:d3:2c:a2:3b:4e:fe:ac:8a:94:
74:f0:f9:75:3b:74:53:fe:db:43:0e:16:7a:29:f3:
eb:be:11:aa:eb:34:34:cf:66:3b:0a:b3:a3:97:bd:
3f:b0:c3:df:75:66:c7:c0:1a:d6:94:25:33:5b:66:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:C2:93:3B:A6:5F:9B:5F:1F:8D:3D:14:9C:24:32:79:45:49:07
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/XnDCkzumX5tfH409FJwkMnlFSQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f058::/48
Signature Algorithm: sha256WithRSAEncryption
43:f8:af:93:db:a0:a1:68:6e:b6:22:ed:f0:29:cd:c0:65:24:
ea:df:65:52:02:23:b4:86:f0:5c:cc:0b:42:14:50:3f:f6:18:
ca:94:cd:99:65:39:62:10:bd:f4:fc:7e:c6:78:0b:07:51:97:
c2:ec:d6:95:4a:7a:d7:d9:69:14:db:79:6b:9a:e2:fe:61:23:
50:1d:7f:ac:d7:45:e9:38:30:10:c5:58:d7:d0:1d:79:76:80:
39:de:c1:41:27:5d:1f:63:b5:d8:75:d9:50:54:c5:8e:af:9d:
a9:76:a3:56:f6:82:48:de:b6:bc:82:bc:b8:86:48:7f:94:7b:
9b:75:10:ff:8c:48:96:21:f2:e8:a5:98:64:5e:d3:03:47:21:
f3:55:fd:ba:c6:e8:60:8e:76:55:7c:cc:ea:f6:24:3b:55:bf:
ab:16:c1:82:db:48:ec:7f:5b:9a:2a:21:5c:2a:7e:f2:05:a3:
90:43:ce:33:8b:52:9b:67:a3:1f:38:ba:77:44:d7:da:4a:c8:
69:df:f7:ec:14:f9:e8:b3:f6:ff:03:47:68:f4:7b:7a:c6:4e:
bd:3a:e1:46:7f:99:ed:92:a6:92:e6:93:7a:92:3b:1c:ba:f9:
42:d2:49:0d:23:5b:d4:24:31:d4:24:e6:46:95:a9:d5:68:ed:
03:e3:f6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:58:38 2025 by rpki-client