Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/XS-Ybz0hvV9BojCYEUiidWOyx20.roa
File: XS-Ybz0hvV9BojCYEUiidWOyx20.roa (raw, json)
Hash identifier: rQhYc9pPbBgv4YgNdF82ibLtydUp9AsYJJ57Y6MS2So=
Subject key identifier: 5D:2F:98:6F:3D:21:BD:5F:41:A2:30:98:11:48:A2:75:63:B2:C7:6D
Certificate issuer: /CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Certificate serial: 019422FC49F783FECA5479C070E532C9A5F0
Authority key identifier: 32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/XS-Ybz0hvV9BojCYEUiidWOyx20.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57689
IP address blocks: 91.213.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:49:f7:83:fe:ca:54:79:c0:70:e5:32:c9:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d2f986f3d21bd5f41a230981148a27563b2c76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:4b:3b:d0:c3:42:ce:e8:5e:b1:09:bc:a9:
80:31:39:f7:6f:02:49:3f:09:33:ec:f0:5c:67:3a:
f7:e4:45:85:b9:bf:77:25:81:73:e3:60:6c:b2:cb:
9a:32:da:14:4e:0a:e3:25:63:5f:49:32:e1:d0:b6:
0c:64:c8:aa:7d:7e:09:ce:77:96:19:62:36:d5:51:
44:2b:1e:c9:49:51:da:0a:47:5b:d0:a7:66:f2:39:
ba:bd:79:cf:42:4d:19:d5:95:cb:08:28:3f:34:ab:
32:b5:1c:bb:a7:b6:02:44:e0:e6:e0:13:d1:5d:aa:
73:b3:4e:9a:86:cf:7d:18:d0:03:b4:aa:4b:6b:d9:
a7:f7:79:4f:05:a9:8a:cf:95:b3:40:f7:1a:b8:a6:
c1:1c:43:6a:9d:e1:50:8b:8f:b3:6e:9c:35:0a:45:
a6:9f:1f:e4:fb:46:d0:9e:7c:e4:0a:fd:43:fe:5f:
74:c6:1c:1b:00:8d:24:52:f6:0f:9e:2d:af:e3:3b:
f5:f4:fe:b3:92:b6:06:d5:3c:a8:ee:78:84:47:fa:
42:76:29:b8:7e:fd:86:27:6f:49:74:68:35:af:6c:
38:9a:9a:10:40:3d:7e:e0:4c:66:73:ed:c5:c3:f7:
4f:00:c7:79:d6:f3:9c:b3:07:97:7f:f7:6d:c8:69:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:98:6F:3D:21:BD:5F:41:A2:30:98:11:48:A2:75:63:B2:C7:6D
X509v3 Authority Key Identifier:
keyid:32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/XS-Ybz0hvV9BojCYEUiidWOyx20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.18.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:6e:5a:f8:a9:e6:26:c8:0c:d2:55:5e:7f:3d:49:62:e4:5f:
97:e9:2a:dd:e2:88:b7:46:99:a6:d2:43:0b:20:4f:90:f6:a1:
5d:2b:8a:6b:65:46:52:c0:17:8c:ec:9f:9f:eb:ae:b1:62:fd:
84:3d:2b:10:e7:2a:7a:65:86:b3:b0:12:7d:46:55:0d:24:46:
c6:24:ae:63:3d:d4:1e:a6:0d:c2:3f:01:0e:20:83:4b:ec:16:
56:b7:49:51:21:86:db:dc:c6:33:70:77:e3:c7:29:35:cb:d0:
e5:d2:ff:ff:f6:c6:33:7d:15:a4:dd:8e:3a:d1:0f:48:80:cd:
d1:4b:42:16:c7:38:21:13:4e:12:fd:0d:68:1a:35:97:6a:a8:
6a:0b:4d:af:23:8c:a8:dd:6f:f9:11:5e:11:f5:22:09:af:6b:
44:1f:85:f2:c3:c3:f1:9c:29:0c:91:94:95:7e:1a:0a:2f:8e:
99:06:58:d7:87:6c:a8:0d:35:e4:77:6a:e2:ee:4d:bf:b9:69:
ea:44:89:6d:b9:a2:31:ff:49:0f:2c:2b:f3:a0:07:48:7b:ed:
ed:e6:a6:58:81:77:de:4f:ac:d3:79:c1:fd:65:f2:ee:60:b3:
55:a6:2c:ce:f2:95:07:b9:a0:67:7b:67:4e:6d:dd:2c:ed:e8:
6a:be:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:54 2025 by rpki-client