Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa
File: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (raw, json)
Hash identifier: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=
Subject key identifier: 5E:79:E6:A9:72:68:39:1D:2B:3B:D5:43:B0:E2:FD:46:33:29:A0:47
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 019426D969FC16919A3820918F53CBEE80CD
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 185.77.208.0/22 maxlen: 22
2a05:6440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:69:fc:16:91:9a:38:20:91:8f:53:cb:ee:80:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e79e6a97268391d2b3bd543b0e2fd463329a047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:b3:56:a3:c6:1e:7e:20:68:67:95:4a:08:
8d:2f:90:eb:0b:79:37:ba:bc:dd:10:68:37:9e:5d:
f3:e6:5b:14:43:44:68:1c:08:e4:e5:7b:50:72:a9:
16:34:73:2b:19:6a:84:1a:73:35:f2:96:ac:d2:b8:
ba:f5:ce:b8:7b:fa:8b:2c:c1:a8:6c:0a:ae:65:ff:
96:b3:87:96:3d:f5:d2:93:69:85:08:87:90:55:17:
c5:00:d0:c8:5d:72:21:7a:be:2a:a5:77:6e:a7:4f:
45:1d:af:3a:40:8a:80:fc:1e:1d:7f:95:4c:cf:49:
52:1f:e1:f9:71:32:00:c7:50:0a:df:ca:0e:82:03:
9d:4d:35:4d:b4:39:df:c2:8b:31:dc:6a:27:7e:20:
5f:dc:b7:54:37:f0:e0:60:6f:74:08:24:90:71:7d:
11:35:5d:ad:36:0c:40:2f:5d:25:c9:5c:72:88:36:
40:59:e1:5a:27:5e:34:b6:30:46:f3:b8:6d:4a:68:
93:64:7f:d2:10:ae:01:7d:53:24:e7:3d:f2:76:ce:
48:91:14:78:8c:8d:7c:ec:58:13:0f:af:5c:80:55:
8f:7c:33:aa:1a:80:e1:f3:9e:6e:a8:1e:19:aa:69:
3f:97:5a:b5:fd:7a:b2:cb:ba:16:ff:2b:02:19:74:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:79:E6:A9:72:68:39:1D:2B:3B:D5:43:B0:E2:FD:46:33:29:A0:47
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.208.0/22
IPv6:
2a05:6440::/29
Signature Algorithm: sha256WithRSAEncryption
7a:5d:4f:d3:80:f3:5d:8b:e7:02:8d:fa:71:32:63:3d:a2:b3:
f8:c9:1d:34:40:76:33:ad:43:88:64:b9:0e:1c:aa:0a:27:97:
11:6b:71:4a:7c:21:df:c6:d3:e3:08:26:99:05:17:62:29:66:
62:d3:e4:ff:c2:7e:05:60:27:fd:f2:e7:9a:96:1a:4d:ec:b1:
05:14:c9:c0:1c:70:88:a4:b5:ad:72:6c:4a:c0:4d:6b:c7:bc:
73:e0:bb:ec:5d:7b:a4:ca:30:44:c0:a8:d1:8e:ec:34:fa:96:
78:91:08:29:c0:29:92:ac:8d:24:7e:0f:8e:c7:f7:ca:d8:f9:
b0:19:39:fa:78:72:f8:e3:e5:51:4e:31:d8:31:73:4f:9d:e2:
88:85:8f:5a:70:32:71:95:12:41:9f:bd:5b:a1:5a:e7:86:e8:
ec:b1:7a:7d:3a:5b:07:1a:dc:06:e9:de:01:09:27:0e:b1:b0:
af:c1:a8:e8:a9:58:6e:cc:cf:26:2c:bd:2b:a4:55:67:9c:72:
f2:bd:4e:82:36:00:0d:14:78:bf:6d:40:48:7e:8b:4f:a2:95:
8d:5f:a5:2e:56:8a:60:8b:64:50:5b:94:a4:cf:15:83:f6:b2:
26:f0:27:eb:ba:53:8b:f0:ff:7a:a4:62:ea:b5:c0:89:c0:5a:
5f:9b:c0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:38 2025 by rpki-client