Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/xiQI9wb5Vmhp2H-a9gzDcGY5BXo.roa
File: xiQI9wb5Vmhp2H-a9gzDcGY5BXo.roa (raw, json)
Hash identifier: Gj567A+XwwphSIr0QUg/ooKHOAmNMmhZaIbIodkc2Xs=
Subject key identifier: C6:24:08:F7:06:F9:56:68:69:D8:7F:9A:F6:0C:C3:70:66:39:05:7A
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0194274845204B87E2534F70C73F82A4F5B7
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/xiQI9wb5Vmhp2H-a9gzDcGY5BXo.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3758
IP address blocks: 85.203.24.0/24 maxlen: 24
85.203.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:45:20:4b:87:e2:53:4f:70:c7:3f:82:a4:f5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c62408f706f9566869d87f9af60cc3706639057a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:2f:c4:56:eb:f4:6d:0e:e1:73:8f:92:0a:
8b:d5:ca:56:f8:6d:1a:14:cd:9c:96:36:5d:ce:d0:
6e:d5:af:35:ae:53:92:57:63:4b:29:6a:8f:73:5a:
44:0d:26:09:c4:c8:24:d1:a2:50:44:6d:40:61:cf:
60:d8:d6:19:60:7c:93:40:52:a8:65:a4:16:92:6e:
c2:5f:de:81:2e:60:ed:83:26:7a:c2:c1:1b:0b:3c:
5b:79:9f:cd:6f:76:6c:f5:10:56:b6:5f:73:8c:a9:
97:6d:10:c2:d6:12:59:2d:4d:88:0c:89:f1:d9:46:
75:23:8d:19:04:81:64:41:bd:4e:fe:64:c1:6c:78:
3d:4d:e9:28:2f:71:2d:ca:c3:e4:02:ab:56:da:88:
8f:df:2d:9a:38:90:7a:08:b7:eb:ac:68:76:1f:3f:
61:93:de:dd:0d:0b:e0:8b:8b:ed:6b:85:3d:2d:1f:
51:f5:20:d6:25:ec:e7:e2:fc:3c:7b:a4:5f:61:25:
a3:b4:8a:53:28:40:23:28:e3:84:17:76:f7:a4:6a:
9f:a0:af:79:69:37:14:d3:13:9f:92:00:7d:28:c7:
df:9a:71:3e:9a:70:ff:fb:be:ad:2f:8b:67:2d:08:
cc:4c:30:1d:16:94:36:c8:27:4e:ed:be:dd:69:ef:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:08:F7:06:F9:56:68:69:D8:7F:9A:F6:0C:C3:70:66:39:05:7A
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/xiQI9wb5Vmhp2H-a9gzDcGY5BXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.24.0/24
85.203.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8b:79:e1:84:06:05:10:35:d0:01:ad:78:38:99:41:38:c0:
41:42:c0:1a:39:7f:43:75:cf:66:c6:fa:e8:54:3a:a0:f7:f5:
55:77:72:34:68:e9:dd:6a:af:47:68:cf:7f:cf:7a:b7:35:d1:
57:23:9e:0f:58:73:70:57:7d:ec:e7:87:26:dc:f4:67:66:21:
4c:2e:d1:2f:75:18:e4:6f:d3:d2:bb:af:33:e4:5b:a8:ab:8c:
6f:ce:a6:96:7d:5b:5a:53:ad:08:27:aa:21:ed:9a:87:6b:bd:
cf:c9:04:9f:2c:e2:28:ea:e2:44:be:52:fb:f4:e8:e4:57:b4:
12:85:f1:d7:ab:b0:56:f2:05:d8:14:ac:b8:7a:ae:df:b0:5f:
e2:32:8b:25:15:0a:ce:76:c0:7c:2f:5a:d4:d7:f8:e9:41:17:
72:0d:60:2d:1f:b7:7d:60:30:cf:ed:ba:11:1b:16:91:b9:f8:
8d:ce:fa:a2:38:d6:8b:71:30:91:e6:36:21:4e:11:63:77:17:
5b:c4:39:79:a3:28:a1:4b:18:9f:91:4f:20:c6:a3:ff:38:d9:
cc:59:6a:d8:ca:55:9b:7d:58:97:4b:35:93:af:9a:84:98:22:
dc:2f:78:fd:3f:4a:a5:27:e0:a0:6c:d2:d3:ae:91:18:a7:ad:
6f:32:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:59:03 2025 by rpki-client