Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/XfKLRFVMoC15KLcrzjJhZWM3w8Q.roa
File: XfKLRFVMoC15KLcrzjJhZWM3w8Q.roa (raw, json)
Hash identifier: 25hZw2F6xwasOHU65AIF0S+NpXK61ycgU51PVxUloRM=
Subject key identifier: 5D:F2:8B:44:55:4C:A0:2D:79:28:B7:2B:CE:32:61:65:63:37:C3:C4
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 019427B54206DE22CCD814E54304531EF540
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/XfKLRFVMoC15KLcrzjJhZWM3w8Q.roa
Signing time: Thu 02 Jan 2025 15:49:37 +0000
ROA not before: Thu 02 Jan 2025 15:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134981
IP address blocks: 2a0c:4a01:c10::/44 maxlen: 44
2a0c:4a01:c20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:42:06:de:22:cc:d8:14:e5:43:04:53:1e:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Jan 2 15:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5df28b44554ca02d7928b72bce3261656337c3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:af:37:c5:29:92:db:9a:c4:a8:4c:d2:70:
55:bb:3f:d2:28:98:15:bf:93:c5:5c:c5:ea:01:e5:
c2:a5:c5:79:c6:5c:c0:22:5d:fe:b4:34:2e:e7:b0:
9d:38:4a:b5:db:c3:cd:c1:09:f0:b6:ec:1d:2e:01:
3a:5c:ec:8b:68:5b:94:38:02:09:9d:23:2d:42:79:
f9:a1:38:85:ee:9d:4d:0c:c2:a8:71:95:69:fe:6f:
b2:f7:42:07:06:64:c3:b6:39:83:f8:73:bb:ff:0a:
ee:a7:0a:96:e2:8d:92:d5:4e:f8:74:50:68:b6:02:
d7:39:f0:ed:72:49:cf:f1:89:d3:fb:9e:c5:d1:08:
a8:15:ec:33:43:5e:aa:f2:b5:44:c3:fe:0d:49:f7:
b2:41:ef:15:5f:5d:60:b1:4d:82:2f:99:a9:0a:79:
21:f0:5e:1e:b0:67:3a:76:6e:7c:d4:e7:4b:a9:a7:
af:f5:8a:19:41:46:33:d5:00:df:97:a6:ee:10:00:
b0:fd:c1:31:93:56:60:36:37:26:7c:4e:41:56:80:
4d:3b:bd:bc:86:3e:63:2a:83:e3:a9:a2:97:c3:fb:
d8:e0:93:cc:4e:5b:6c:35:14:4c:61:44:4f:42:90:
1d:57:95:4e:19:e0:28:79:15:19:bd:a3:6d:6c:a3:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:8B:44:55:4C:A0:2D:79:28:B7:2B:CE:32:61:65:63:37:C3:C4
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/XfKLRFVMoC15KLcrzjJhZWM3w8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4a01:c10::-2a0c:4a01:c2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
71:31:94:c5:71:d2:3a:fd:42:c6:c4:2f:35:28:81:39:d3:32:
7b:7d:d7:d8:ff:5b:1b:9c:5e:a8:3d:d5:2d:ca:fb:c4:70:b8:
51:5a:8d:f7:db:66:03:56:f1:e8:25:e6:3a:8a:54:33:9a:08:
6d:a6:f6:fd:59:41:dc:f2:2e:1a:0a:a4:cf:89:32:2a:b9:37:
93:52:62:19:f2:50:d4:a6:11:06:d5:f6:05:2a:84:da:eb:93:
95:64:33:6b:e2:56:72:c5:c1:c5:82:45:5a:35:5d:c5:3f:5b:
41:34:a3:39:f8:e5:9a:33:76:c1:51:73:96:a5:b4:02:68:a8:
f2:c9:f7:a4:95:5e:04:14:27:1b:db:70:89:dd:18:e1:7d:01:
e1:4a:ec:c2:5d:fe:49:ff:05:4a:e6:94:46:dc:f3:10:47:21:
1a:b3:25:f5:0b:33:c1:99:d9:d5:be:ba:2c:5a:f0:77:ee:b0:
0b:c9:52:2b:2f:70:4a:ae:81:4f:4a:f0:0d:8b:18:31:45:34:
a4:5a:8b:e3:64:f1:7a:ac:73:37:39:42:1c:aa:c5:fc:70:88:
76:2a:ab:25:8c:1c:0a:16:5f:c6:c2:d7:4d:ce:f9:8c:53:60:
eb:01:f2:3d:cc:fd:6b:79:e1:76:0b:cf:24:77:ea:0b:f8:ec:
0f:e3:b1:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:55 2025 by rpki-client