Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/xBLWMt7CnhdMhsDQsxTJKsgubzw.roa
File: xBLWMt7CnhdMhsDQsxTJKsgubzw.roa (raw, json)
Hash identifier: ZCdYsbGv+ldj13bvl4ML8UTblRYPsZ2+PffnDm+YrGQ=
Subject key identifier: C4:12:D6:32:DE:C2:9E:17:4C:86:C0:D0:B3:14:C9:2A:C8:2E:6F:3C
Certificate issuer: /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial: 019428255C2416D28400E820D96201F0C725
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/xBLWMt7CnhdMhsDQsxTJKsgubzw.roa
Signing time: Thu 02 Jan 2025 17:52:04 +0000
ROA not before: Thu 02 Jan 2025 17:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60774
IP address blocks: 194.15.88.0/21 maxlen: 24
2a09:2800::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:5c:24:16:d2:84:00:e8:20:d9:62:01:f0:c7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Validity
Not Before: Jan 2 17:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c412d632dec29e174c86c0d0b314c92ac82e6f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:38:00:08:c3:54:e4:7e:df:d5:cf:08:b7:
dd:36:7c:c0:d7:57:75:25:25:7d:4d:80:b9:ac:7b:
4b:8d:40:fd:14:97:b9:54:87:79:4e:67:d6:b6:ab:
7d:28:87:60:13:57:a2:13:1d:90:16:49:3a:85:67:
7c:5b:f8:f3:5c:40:6f:05:9a:c2:0a:b2:86:ef:d5:
60:6f:74:2f:62:f2:c9:d1:f0:b7:49:87:1e:97:db:
47:90:d4:67:b2:35:45:31:43:d3:36:3d:29:8a:16:
14:5f:8a:09:90:79:e1:20:0c:c7:9c:74:40:5c:27:
75:db:e3:50:47:de:dd:24:08:5f:74:2f:bc:34:a0:
bb:97:b7:58:f7:e7:79:d1:76:91:99:a1:ce:c1:66:
26:9a:05:d7:73:29:e3:af:9e:a7:d2:44:98:e5:a8:
c2:3e:e2:b3:8f:49:cd:42:83:ae:50:15:ab:45:82:
86:e1:ec:89:e7:9d:ad:27:e2:32:64:72:44:eb:b7:
ef:ed:db:d8:c0:99:56:d7:13:9e:e6:65:f3:f7:4b:
c9:22:cf:f4:ab:f3:fa:5a:42:7a:cf:e7:77:84:6a:
e7:9f:f2:55:3f:b9:18:e1:14:b8:a2:9d:46:43:41:
7f:b6:81:30:da:ff:32:42:e1:54:1b:cf:0e:b7:40:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:D6:32:DE:C2:9E:17:4C:86:C0:D0:B3:14:C9:2A:C8:2E:6F:3C
X509v3 Authority Key Identifier:
keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/xBLWMt7CnhdMhsDQsxTJKsgubzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.88.0/21
IPv6:
2a09:2800::/29
Signature Algorithm: sha256WithRSAEncryption
08:13:e0:28:90:08:4e:b8:db:ab:98:f1:d5:b5:b6:dc:71:21:
a1:16:43:d3:22:ef:61:bd:d5:42:fc:be:d1:fd:e9:a0:62:e7:
77:04:54:2d:14:95:bb:d0:58:00:d2:b3:fe:8f:f6:7d:e6:de:
1a:40:e2:53:c7:42:09:d4:6e:81:14:2b:fd:08:d8:d4:9f:3d:
0d:f1:e6:2a:3d:3f:12:2f:07:dd:68:b5:67:29:c5:b6:2f:59:
aa:12:dd:d7:66:d8:21:96:3f:bc:7e:72:e4:56:5c:8a:84:67:
86:8a:52:c3:41:6d:fd:06:4d:08:ab:b2:98:b8:c2:9c:14:1e:
b4:35:08:24:5d:f9:35:93:f7:ef:68:b4:7e:09:79:c7:db:40:
17:88:72:fe:61:cd:61:67:b6:27:39:9b:de:29:a0:e6:93:e6:
27:d6:ed:07:09:fd:b0:36:d3:a0:8b:56:bf:6a:dd:65:cb:b3:
d6:10:b1:d6:9d:87:67:a5:11:f4:b0:bb:3b:f9:52:7a:c4:a5:
1e:05:5f:a5:e1:46:e2:aa:87:c1:2f:6d:55:db:38:57:30:7b:
06:37:de:66:1b:3e:4e:74:03:45:13:cc:dd:59:2a:41:96:12:
f2:44:8d:62:bf:67:c9:12:b8:45:85:24:66:75:32:a6:30:30:
56:83:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:41:06 2025 by rpki-client