Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/xNQR2jyCo-wMte68YS73m1IZ9O0.roa
File: xNQR2jyCo-wMte68YS73m1IZ9O0.roa (raw, json)
Hash identifier: BWuMWNUBHZ2TpJe9eyJrXKCjlVJ/6BKirHJr21VbUdA=
Subject key identifier: C4:D4:11:DA:3C:82:A3:EC:0C:B5:EE:BC:61:2E:F7:9B:52:19:F4:ED
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 01941F8C633247F4256B6B1632C727135A58
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/xNQR2jyCo-wMte68YS73m1IZ9O0.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196655
IP address blocks: 109.68.128.0/21 maxlen: 24
178.22.16.0/21 maxlen: 21
185.40.200.0/22 maxlen: 24
193.142.23.0/24 maxlen: 24
2a00:1f50::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:63:32:47:f4:25:6b:6b:16:32:c7:27:13:5a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4d411da3c82a3ec0cb5eebc612ef79b5219f4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:e1:35:0d:85:b8:7b:76:97:22:fa:9e:9e:
86:48:03:36:24:23:bb:95:b2:88:9f:69:23:ad:13:
e0:ee:e5:72:55:d1:8e:4e:b3:3f:e6:2b:3d:36:3c:
8b:da:30:8a:66:ba:d0:b3:82:9c:81:c9:b5:4a:4b:
88:b1:d7:2b:e9:87:dd:2c:80:79:a0:6c:b6:4c:24:
e6:a7:1b:f2:d7:a3:83:1d:44:dc:ec:3f:0d:da:5b:
e5:4b:c1:e7:87:a8:a0:7d:2a:c6:65:73:57:9c:67:
e6:f5:44:ed:9d:1e:85:d1:20:93:2f:fa:ff:55:e1:
d6:30:41:44:87:1f:54:2e:9c:6f:e1:5c:e8:92:ee:
9c:53:37:fc:64:04:0b:5e:cd:9a:c2:24:84:70:41:
f4:52:6c:75:01:d4:5c:d0:ef:09:60:b5:06:57:bc:
eb:ff:f2:d3:ee:59:45:66:26:08:fe:d6:3b:e7:b7:
07:9f:ce:a7:92:ee:b8:6a:8e:b2:4e:c8:ae:d7:19:
8c:98:d5:7c:a0:96:e9:fe:f3:93:3d:8f:76:33:33:
6d:a2:ee:1b:75:c6:0d:8a:eb:b8:34:55:72:fb:a8:
58:6c:d7:b5:9c:54:90:1a:a9:52:36:bd:9d:a2:37:
22:64:78:85:e4:ba:6e:83:2a:b1:b6:66:cc:b5:3e:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:11:DA:3C:82:A3:EC:0C:B5:EE:BC:61:2E:F7:9B:52:19:F4:ED
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/xNQR2jyCo-wMte68YS73m1IZ9O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.128.0/21
178.22.16.0/21
185.40.200.0/22
193.142.23.0/24
IPv6:
2a00:1f50::/32
Signature Algorithm: sha256WithRSAEncryption
12:ef:80:47:55:40:ff:39:f9:a8:58:71:9f:ab:28:49:98:21:
34:77:54:cd:e1:ec:2e:27:5d:fc:de:9d:75:1b:d7:8f:a7:39:
7f:39:d9:66:77:7b:4a:b8:d3:2c:7c:b0:4b:83:bf:a3:5d:cf:
3b:ed:5c:66:ca:6f:7a:a4:5d:01:f0:c7:12:92:03:d1:81:ea:
51:98:cc:32:bc:61:40:10:e4:a5:1d:e6:fe:85:31:4a:49:99:
0b:b6:39:5f:68:08:e9:ef:55:18:db:39:40:b7:c5:8c:34:a5:
32:56:6d:6c:8b:2c:bc:bd:ed:02:1c:52:18:fa:e5:ed:fc:4e:
e9:03:4b:1e:12:3d:59:93:75:76:00:56:67:b3:cb:76:3c:62:
96:a2:5a:cd:be:36:bf:6e:59:d8:bf:88:3c:04:71:87:22:5d:
47:2e:eb:07:c7:02:5c:fb:4f:2e:c5:64:3b:61:36:f4:67:fe:
3a:79:6b:88:82:b4:7e:3b:a8:eb:83:9e:b4:45:68:f3:8c:fd:
ab:ed:1d:68:cd:d4:6e:ff:75:2f:0b:8d:3b:d3:fd:ef:27:44:
c6:73:d9:09:01:e6:81:0d:c2:c1:bb:0d:72:6f:f8:b2:40:c1:
49:49:25:a7:04:81:91:fc:9b:20:cd:4a:53:07:5f:cd:aa:8c:
70:07:8a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:13 2025 by rpki-client