Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa
File: xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa (raw, json)
Hash identifier: Ham3CQIGB6RAgApXtIdpnkUHiIBxk1FnaFEgcgcWWRc=
Subject key identifier: C6:E3:A5:04:85:E6:19:CC:20:E3:01:35:25:0A:9D:A4:8E:0C:B9:A4
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3C2AE40BA162391B0CF95C5CD070
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212685
IP address blocks: 37.114.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3c:2a:e4:0b:a1:62:39:1b:0c:f9:5c:5c:d0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6e3a50485e619cc20e30135250a9da48e0cb9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:7a:ea:34:e8:84:48:91:8b:e0:eb:19:83:
8f:8c:ec:3d:58:3a:5c:a7:98:16:be:60:72:cb:1c:
10:d0:03:71:d0:7b:c1:6f:ef:19:0b:39:03:33:25:
41:eb:ab:5b:d0:3b:da:7b:3c:8f:a8:f6:d7:96:d0:
e5:ee:33:e8:11:ec:96:89:43:09:88:50:1f:03:31:
7c:2d:ae:89:de:09:73:69:48:e3:66:9c:3e:79:46:
73:77:c0:cc:0e:f8:36:ca:9d:aa:46:f7:14:9c:1c:
e3:44:ff:6e:2d:7e:fc:e6:e6:e8:52:5c:25:7f:53:
fc:90:cf:32:46:80:24:02:df:b5:95:42:d5:a8:9a:
2a:dd:12:e7:cf:b9:3d:5a:45:85:a7:3a:65:7e:12:
d9:56:b9:c9:40:5c:a0:25:d6:0c:b8:67:cc:80:9f:
72:bd:87:57:fb:80:59:d3:5f:0d:6c:80:c0:59:09:
ef:20:28:07:32:19:56:2d:8c:31:9f:50:f2:4c:7f:
15:40:ad:b2:bd:2b:f2:1b:26:9a:3c:b5:5f:82:30:
9e:43:53:30:55:62:c2:57:63:fe:5f:4c:ea:a5:4e:
89:3e:25:03:f5:e5:0c:d3:a4:9b:f2:84:c1:6a:2e:
af:61:38:a8:62:a2:7e:c3:7b:a1:85:49:82:bf:e6:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E3:A5:04:85:E6:19:CC:20:E3:01:35:25:0A:9D:A4:8E:0C:B9:A4
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/xuOlBIXmGcwg4wE1JQqdpI4MuaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.36.0/24
Signature Algorithm: sha256WithRSAEncryption
33:bb:a8:4d:bf:05:cd:34:2f:3c:f1:02:1b:c2:81:be:43:cb:
27:e5:d3:7c:c8:eb:ca:00:d6:b3:15:32:78:29:9a:66:41:dc:
fe:cb:a6:a7:dd:ce:a3:3c:e3:e0:d5:26:c3:03:3f:b8:a3:19:
7a:51:f9:91:34:df:e8:e8:05:fa:24:40:e8:f1:dd:79:85:31:
21:61:a8:3c:9f:1e:6c:45:fb:46:e1:21:a3:22:bd:6c:c1:13:
8c:6c:44:2c:76:00:a6:71:72:3b:5a:dd:ef:f7:6a:6c:72:4b:
4b:fc:16:df:b9:b2:3f:0e:c3:5b:23:5b:a9:de:e7:c4:3a:82:
e1:32:04:bc:88:d0:e7:79:42:16:e3:2d:90:7d:88:c4:05:25:
79:6d:a2:c6:72:f3:5a:48:88:c8:6b:bb:ba:2a:e6:a0:e4:f4:
74:69:73:c0:3a:ba:e6:1b:d5:cf:ad:ce:d9:eb:d6:ee:50:24:
08:db:2f:ef:04:ca:9a:bc:80:e7:c8:e9:30:fa:bc:4f:4e:19:
06:6a:45:33:d7:b1:4b:1b:96:6f:ff:a9:ac:6f:c4:f5:ab:3a:
fd:7b:9f:b1:9f:ab:28:c6:9d:36:e8:14:ae:dc:f7:6a:15:91:
52:dd:f2:40:56:bf:fb:df:72:6e:d0:76:01:9c:7f:35:96:f1:
1f:b3:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:50:53 2025 by rpki-client