Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa
File: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (raw, json)
Hash identifier: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=
Subject key identifier: 5F:F5:2D:FA:5D:31:86:51:09:BD:08:29:74:4F:96:B7:FC:27:A2:1D
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 019425FD4D7EABA6315B0753392F070CE769
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa
Signing time: Thu 02 Jan 2025 07:49:04 +0000
ROA not before: Thu 02 Jan 2025 07:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 185.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4d:7e:ab:a6:31:5b:07:53:39:2f:07:0c:e7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Jan 2 07:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ff52dfa5d31865109bd0829744f96b7fc27a21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:7b:88:e5:66:79:48:73:e1:d1:59:31:cb:
ae:79:fb:e6:af:d0:a4:d3:52:74:be:54:6a:34:1d:
c6:9b:ca:16:c8:b4:67:8c:93:45:e1:a1:f9:ca:78:
7a:06:70:55:8f:1b:12:32:06:54:1c:3a:57:32:eb:
3c:86:a2:19:95:c7:33:2d:1c:48:9c:2d:43:fd:e5:
52:db:19:d1:e8:ad:05:d2:af:af:8d:25:46:f9:f6:
e4:cf:34:8d:dc:bc:7d:80:b6:18:07:41:a6:4e:26:
43:45:bf:77:95:87:3c:9d:2d:33:d8:c8:46:81:71:
6a:2e:7a:af:9f:b3:a3:ea:86:9d:d7:ef:17:50:0b:
f1:99:d8:4a:02:9c:46:40:db:55:dc:e3:80:21:67:
1b:7b:c4:01:1b:e2:1f:88:ae:8a:ac:c3:f4:6c:61:
e4:77:81:68:21:97:71:cd:52:e3:bc:35:05:c2:ae:
28:ee:4d:42:5f:f8:56:f9:ed:81:ee:43:57:ac:a9:
a6:cc:4d:4b:2c:de:f5:7c:e3:54:f2:99:5e:aa:16:
de:b4:85:c8:81:81:1e:5d:67:5d:92:1b:c6:60:80:
84:35:d6:b9:52:df:a7:e5:e9:da:29:d2:df:ce:f4:
e9:91:7c:0d:9d:b9:54:81:4e:aa:f6:7f:cf:99:a6:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F5:2D:FA:5D:31:86:51:09:BD:08:29:74:4F:96:B7:FC:27:A2:1D
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4d:ee:47:1a:b1:f2:28:fb:ab:d4:d0:90:c0:f0:f0:02:12:
b8:5a:68:fe:57:7c:41:a6:8b:d7:ab:30:1c:7f:23:8e:2e:3c:
f1:d3:a0:1e:57:b6:5b:8a:7f:d0:79:e9:bd:f6:9d:84:a8:28:
62:28:c5:3a:ed:4b:76:ba:30:8f:b1:bf:f5:7a:65:23:a2:0c:
ee:7d:1f:28:b1:c0:a9:e6:a5:f6:62:42:2d:be:91:96:2d:82:
3a:24:cd:ae:b5:5e:e5:f7:06:c6:0f:ac:97:4f:ac:d3:09:5d:
db:b6:24:dd:36:8e:7d:9e:de:75:3c:fb:58:95:12:ae:0f:dd:
87:18:01:11:d3:cf:46:b2:19:58:51:56:02:34:3e:7e:aa:68:
f7:2f:be:b3:63:7a:f2:34:28:84:46:3b:9c:ab:8f:45:73:d8:
3e:0a:99:83:02:43:88:eb:a8:33:3a:1a:02:11:12:97:83:7e:
a2:55:d4:82:a2:7d:b9:69:a4:9c:6e:7a:cd:12:6b:72:f3:34:
ca:a2:7d:55:7a:74:68:b2:79:27:57:8b:5c:32:40:72:70:cc:
e5:6f:e7:0e:8e:9b:6b:21:13:db:fa:fc:9c:1d:a8:a8:2d:ee:
69:27:2a:7d:2b:9b:f8:1a:25:89:92:fa:76:01:47:59:7d:85:
39:f2:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:38:17 2025 by rpki-client