Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xX_uq_mEyXStKMwyfdqkd7m4BOo.roa
File: xX_uq_mEyXStKMwyfdqkd7m4BOo.roa (raw, json)
Hash identifier: 6maM/OZPyrSvEq//B4iEONjd63OXQGgs8NrnctnJMVA=
Subject key identifier: C5:7F:EE:AB:F9:84:C9:74:AD:28:CC:32:7D:DA:A4:77:B9:B8:04:EA
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195192FDFB32D348BE31792F4244C57D1AB
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xX_uq_mEyXStKMwyfdqkd7m4BOo.roa
Signing time: Tue 18 Feb 2025 13:12:02 +0000
ROA not before: Tue 18 Feb 2025 13:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198662
IP address blocks: 188.132.164.0/24 maxlen: 24
188.132.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:2f:df:b3:2d:34:8b:e3:17:92:f4:24:4c:57:d1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 18 13:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c57feeabf984c974ad28cc327ddaa477b9b804ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:6d:be:51:fd:4b:91:de:aa:35:e0:90:de:
2b:04:04:9e:1b:29:2f:a5:ad:48:8f:f0:1d:a2:71:
35:ba:c1:b3:18:16:5b:0a:ed:6d:94:76:e5:f3:b9:
0d:04:25:8c:a8:52:35:e3:5d:02:07:0e:2c:be:cf:
b8:39:ec:ea:8d:35:79:60:0b:03:f1:36:60:02:f4:
b3:2c:f6:89:49:23:a1:b8:d4:fe:74:dd:cd:b5:78:
c4:34:64:4e:20:dd:ed:39:b2:ba:68:88:65:37:69:
80:42:f3:8f:b0:7b:c7:66:84:1d:e0:f9:bf:0b:7f:
42:32:d3:79:f1:b5:41:2f:fc:c9:35:f4:ed:1f:5a:
86:d6:a4:92:a6:78:14:2c:4f:51:0f:49:9b:7a:a0:
1d:78:70:16:24:6f:bb:c4:52:84:ce:4b:cb:17:99:
35:ef:2e:0d:5c:36:13:63:5b:fe:19:40:81:60:bc:
30:10:70:2b:e3:a2:e6:6a:80:c9:ae:85:73:e1:00:
f0:fb:6d:2e:ab:95:82:e1:e9:a4:95:2d:ba:16:38:
e1:8e:f1:86:0f:34:1a:c8:a1:47:44:4a:07:e0:a5:
ff:ea:df:ed:e2:fa:04:47:f1:64:48:b6:50:bf:55:
78:dd:7c:cf:c8:d1:ea:58:d5:98:3a:1d:30:08:58:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:EE:AB:F9:84:C9:74:AD:28:CC:32:7D:DA:A4:77:B9:B8:04:EA
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xX_uq_mEyXStKMwyfdqkd7m4BOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.164.0/24
188.132.190.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0e:83:93:cb:c8:2e:cc:af:e3:7f:a4:8a:7e:de:78:90:f6:
b2:e4:09:47:84:ac:c3:a7:bf:d0:21:62:50:92:47:33:72:ca:
bd:68:38:f4:2c:7d:bc:4e:c8:a6:26:5f:6a:18:9a:d3:68:38:
79:7b:90:f0:24:f2:a9:a0:51:55:e7:b9:5f:6b:a6:a0:d6:7f:
24:87:69:ca:71:31:ee:91:82:fc:da:1f:9f:0f:08:bf:02:b4:
75:fd:b2:ab:c7:ba:81:31:e3:81:6e:c0:e2:5e:97:3b:cf:0b:
d0:49:cf:22:6a:3e:9c:3b:f3:25:97:10:fd:ae:ce:96:96:fa:
73:3f:dd:9c:3d:ff:d4:3e:4b:d8:a6:ba:7e:22:0f:c4:05:a6:
62:cd:03:4d:90:60:06:7a:e7:d1:85:f6:88:40:90:da:ae:0e:
27:f7:69:4c:5e:ca:c5:7c:8a:55:f7:c1:76:0c:2d:26:b1:0b:
27:6d:36:96:a2:1e:13:c8:b6:e6:91:1f:5f:03:4d:76:0b:0a:
45:fb:47:be:57:33:3e:9c:f1:4b:84:e5:87:83:87:fb:00:45:
bd:eb:2a:db:a9:4c:74:91:75:2a:ae:c8:98:91:84:c7:e7:de:
85:3a:a7:a3:6c:ce:5e:c1:08:26:4a:e7:cc:4b:54:25:1c:0f:
59:f7:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:01 2025 by rpki-client