Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/xytDSya4p2EgaXuzXHLS_THUKdo.roa
File: xytDSya4p2EgaXuzXHLS_THUKdo.roa (raw, json)
Hash identifier: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=
Subject key identifier: C7:2B:43:4B:26:B8:A7:61:20:69:7B:B3:5C:72:D2:FD:31:D4:29:DA
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 01942747B3B4D11EA9BAE4DD6101C2BF43E4
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/xytDSya4p2EgaXuzXHLS_THUKdo.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 91.103.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b3:b4:d1:1e:a9:ba:e4:dd:61:01:c2:bf:43:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c72b434b26b8a76120697bb35c72d2fd31d429da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:a0:70:c6:c0:b2:aa:3a:57:22:60:ec:47:
82:d9:97:4f:bd:fa:73:69:a4:a0:00:29:66:be:13:
3a:4e:55:dc:ef:7b:6c:ea:33:d0:7d:ae:ca:8c:c7:
6a:2f:5d:61:d6:52:00:78:5e:7c:37:aa:c4:80:31:
4a:46:23:b8:69:65:2c:20:c8:10:99:40:6c:b4:9d:
ef:24:58:89:1f:a5:6e:20:79:9b:f3:a8:3c:6e:d7:
fc:0f:60:5d:15:46:a9:3a:1a:a8:4a:3a:b2:06:cb:
f8:eb:8b:7d:f2:c6:13:de:cc:61:bc:07:3c:af:d1:
10:98:95:4b:2f:e9:1e:dc:96:31:13:b3:b8:f3:03:
7f:c0:83:97:26:18:b7:7a:1a:99:26:11:40:e7:59:
31:77:2c:f3:31:c5:22:59:b8:c2:12:91:d1:02:43:
a0:ba:78:e7:c2:dc:f6:a0:a4:ee:ac:62:e6:22:92:
57:82:cf:2d:ed:d6:9d:5d:54:b3:51:a9:dc:33:19:
6d:16:40:2a:90:cb:15:90:65:29:e5:14:2b:d9:8e:
9d:3c:31:a9:ad:1d:5a:38:e0:b1:b3:e9:80:57:91:
bd:2b:8c:f3:e2:62:c2:45:60:18:a4:6c:c8:79:25:
01:14:39:03:ab:5c:8c:d2:f4:a0:f1:61:7b:59:49:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2B:43:4B:26:B8:A7:61:20:69:7B:B3:5C:72:D2:FD:31:D4:29:DA
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/xytDSya4p2EgaXuzXHLS_THUKdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.140.0/24
Signature Algorithm: sha256WithRSAEncryption
62:29:77:64:67:77:f5:55:52:0f:83:35:ca:23:4c:bf:9f:e9:
d2:0e:60:30:24:5e:99:55:bf:66:c8:c5:8d:ce:77:73:21:10:
3b:06:af:21:40:31:c4:dd:58:fa:04:0d:cb:00:42:70:a2:8b:
f2:2c:bb:e5:df:6e:2f:ad:04:b9:27:df:75:fd:a0:6e:7e:66:
02:3a:5d:e6:f4:c1:23:b0:29:31:fd:11:5d:21:1f:d2:0c:1c:
a0:ed:8f:52:a6:a5:69:52:71:0e:a1:c8:85:db:a8:23:b5:8d:
c4:67:33:3b:9b:e2:c9:3b:a8:47:63:4c:d9:cd:0c:90:6d:5c:
9a:95:9c:76:a0:f7:f6:ec:1e:91:ee:0a:65:2a:0d:83:36:de:
12:8c:65:14:e3:69:2b:e1:4c:3c:24:aa:23:41:26:58:44:fc:
eb:de:38:23:8d:27:b7:58:34:0c:32:40:e6:03:e8:54:0a:10:
d0:5b:71:27:85:b1:c4:07:04:40:8c:3e:ce:57:98:61:67:7e:
e5:19:c4:28:35:48:d1:0b:f1:e1:d3:88:28:97:31:45:7a:fb:
39:da:40:60:b2:c6:08:0d:f0:59:d8:11:b6:c9:4e:8d:7a:c4:
16:57:83:35:61:9f:96:bd:1d:fe:74:6c:45:78:80:43:a7:00:
cf:6b:25:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:15:54 2025 by rpki-client