Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/XyZfXZHg4uFsALbjTF4WPub-Cts.roa
File: XyZfXZHg4uFsALbjTF4WPub-Cts.roa (raw, json)
Hash identifier: 0Kb2El3NoaTiQrKFTa7SCx9tua9dR19ZSce50SQFwIo=
Subject key identifier: 5F:26:5F:5D:91:E0:E2:E1:6C:00:B6:E3:4C:5E:16:3E:E6:FE:0A:DB
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827BC98283EAF21C24614809FDEA62B
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/XyZfXZHg4uFsALbjTF4WPub-Cts.roa
Signing time: Thu 02 Jan 2025 17:54:40 +0000
ROA not before: Thu 02 Jan 2025 17:54:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42964
IP address blocks: 79.172.206.0/24 maxlen: 24
79.172.215.0/24 maxlen: 24
79.172.217.0/24 maxlen: 24
79.172.237.0/24 maxlen: 24
87.229.98.0/23 maxlen: 23
87.229.102.0/24 maxlen: 24
178.238.223.0/24 maxlen: 24
213.181.222.0/24 maxlen: 24
217.144.61.0/24 maxlen: 24
2a02:730:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:bc:98:28:3e:af:21:c2:46:14:80:9f:de:a6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f265f5d91e0e2e16c00b6e34c5e163ee6fe0adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:ea:c2:75:1d:2d:82:e0:89:64:0e:d4:1d:
26:f3:2e:e4:bd:b6:6a:c2:30:af:54:bb:c2:68:43:
d7:e3:10:54:74:54:07:a6:f1:46:76:56:a2:d5:10:
64:71:20:0a:56:b7:b8:32:10:11:df:5d:9d:03:a3:
0c:d6:8d:c0:21:40:c3:03:fc:27:02:59:72:a1:9c:
62:18:87:94:b8:84:b0:7b:9c:f6:6e:01:74:fd:6a:
01:4f:e1:60:31:77:06:ca:0b:44:1f:8c:66:4f:e6:
12:b4:20:53:cc:89:9f:ac:df:e6:c3:34:30:09:93:
84:f4:e1:47:0c:38:26:a7:e4:90:16:fa:8e:81:e4:
00:38:4b:be:95:89:92:1e:60:b7:00:6f:b7:bc:e4:
0d:44:5c:6b:aa:2a:ca:a6:f8:41:da:8e:49:3c:f7:
7b:8d:34:a0:5d:76:ee:79:d0:0c:72:ae:c5:db:75:
0d:c5:d2:14:12:38:b7:36:e2:54:9d:bc:16:41:b3:
58:c8:ad:7e:49:5a:f8:4f:50:60:6d:22:33:b8:a3:
0e:b4:ba:f9:5b:1f:9d:75:cf:a8:64:be:91:a1:29:
bf:9f:db:4a:e5:53:0b:ab:fc:13:c8:c7:e4:45:02:
b5:2b:58:64:8d:b2:10:66:f5:39:7c:6c:39:7b:ea:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:26:5F:5D:91:E0:E2:E1:6C:00:B6:E3:4C:5E:16:3E:E6:FE:0A:DB
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/XyZfXZHg4uFsALbjTF4WPub-Cts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.206.0/24
79.172.215.0/24
79.172.217.0/24
79.172.237.0/24
87.229.98.0/23
87.229.102.0/24
178.238.223.0/24
213.181.222.0/24
217.144.61.0/24
IPv6:
2a02:730:1::/48
Signature Algorithm: sha256WithRSAEncryption
68:55:9f:61:b1:31:d4:86:5a:3b:39:de:bd:3e:cc:7f:e5:bd:
3c:a2:e8:98:5a:47:76:90:25:07:5f:53:4f:dc:f1:f8:d7:62:
1a:a8:12:08:b0:70:00:13:01:4f:30:13:c8:2c:9a:f7:58:bc:
e8:06:92:91:2d:f9:9d:4b:9b:1f:e0:0f:c7:77:d4:5c:92:d5:
e4:29:db:30:26:a2:8d:9b:98:38:2f:14:46:fa:2a:7a:1c:9f:
53:ce:f9:87:f0:cc:a1:30:60:25:9b:0f:d8:44:e7:19:84:a4:
4d:17:94:52:6f:73:55:72:84:72:4b:cd:92:13:24:b2:cc:e4:
08:ed:d2:3f:93:34:f3:02:df:6f:fc:05:fa:83:88:b0:95:72:
2c:47:28:62:58:a3:ba:13:a2:b1:66:c6:f7:59:72:3e:96:b3:
4d:bd:4c:0b:9e:93:7b:1d:c0:30:d7:bc:b0:1c:8d:71:fc:19:
62:42:15:3f:67:4d:cf:47:ab:72:fd:c7:e9:d7:3a:47:f4:e1:
25:83:79:0e:5a:b4:4d:3b:6e:22:3c:ec:0a:cb:b0:b5:c5:bb:
9c:27:b6:6a:6d:12:96:d3:9c:ba:11:b7:7e:ce:75:3e:f7:a0:
34:90:40:a8:e4:97:4f:1e:a7:a3:9a:02:54:79:85:c8:df:a2:
3e:d8:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:23 2025 by rpki-client