Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xpnC2_6GytOlLvWkX6Oq7vQLRAU.roa
File: xpnC2_6GytOlLvWkX6Oq7vQLRAU.roa (raw, json)
Hash identifier: 4sD+FwVn1W7I3RIXptRApTIHbraWIeXISlxbDc/zMw0=
Subject key identifier: C6:99:C2:DB:FE:86:CA:D3:A5:2E:F5:A4:5F:A3:AA:EE:F4:0B:44:05
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FCC47052CAB2B2A9EB53E97EEE7D7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xpnC2_6GytOlLvWkX6Oq7vQLRAU.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59718
IP address blocks: 93.171.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cc:47:05:2c:ab:2b:2a:9e:b5:3e:97:ee:e7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c699c2dbfe86cad3a52ef5a45fa3aaeef40b4405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:49:40:5f:75:70:7e:24:fd:39:15:b3:8e:
4a:bb:1b:ca:19:8b:75:d8:2e:7d:74:bc:52:68:5e:
98:ce:f2:ca:2b:2f:86:a2:d5:c1:ae:be:80:1f:25:
35:22:bc:3d:f7:df:dc:aa:03:d7:70:4c:d0:d6:58:
27:77:b3:df:46:84:a5:0c:5c:c9:a9:17:23:9c:d8:
23:ac:46:6a:c1:53:c3:c2:f0:5e:2f:d6:5a:7b:02:
c2:77:2b:0c:9f:7e:d5:c3:7b:a5:24:e9:b9:bc:a6:
26:86:b4:93:17:3a:24:9b:c1:43:7e:77:26:44:4e:
74:b3:6a:10:2a:0a:07:15:dd:68:8b:90:e5:77:0b:
22:fc:29:2c:82:db:62:1c:dd:08:57:ea:2f:55:e4:
6a:4c:bc:07:55:b3:38:36:7c:1a:1a:53:ef:f0:55:
f8:05:3f:67:e3:ad:c5:bd:ff:e0:a6:61:49:7c:6e:
06:be:29:f0:13:d8:3c:14:90:f2:a0:56:39:98:26:
c3:95:1a:2e:2d:cb:f1:30:61:67:61:33:49:7b:05:
6e:59:49:5d:37:f0:0d:55:d8:97:19:6b:06:31:74:
d3:40:22:27:a8:c2:3a:70:eb:d5:97:e5:6f:28:48:
94:dd:24:ee:6d:79:3b:a7:83:ac:48:0d:2b:45:6a:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:99:C2:DB:FE:86:CA:D3:A5:2E:F5:A4:5F:A3:AA:EE:F4:0B:44:05
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xpnC2_6GytOlLvWkX6Oq7vQLRAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.139.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f9:65:f5:23:de:a5:e7:1c:54:8f:93:c5:15:16:47:3b:dc:
73:91:13:b0:2d:8f:ad:2a:74:99:1d:19:98:db:5e:0f:58:7e:
6b:4e:00:1f:2e:24:aa:43:60:64:14:60:24:36:19:b2:b6:49:
2b:eb:3a:95:ca:f0:fd:cf:bc:56:a5:3b:11:ee:53:83:9d:ee:
61:49:e9:8b:10:36:9f:b9:9f:c7:9a:8a:07:c8:91:dc:dd:9b:
1e:c1:8a:db:33:17:93:96:a6:d6:7a:fe:81:f7:75:f4:6f:31:
4a:3f:bf:22:f6:62:3e:36:42:db:56:5c:2e:13:1e:70:42:7f:
cf:15:ba:0b:03:d8:d1:c8:8c:7c:32:bc:33:8b:c4:b9:97:68:
e9:ab:fa:c4:a5:15:4a:66:19:2c:58:d5:57:09:cf:4e:50:0e:
eb:46:7a:7b:e7:d1:42:ef:3f:f0:07:48:b8:9d:3d:37:03:ac:
05:4b:9c:b0:e4:81:7a:a6:ed:bd:56:10:d9:83:b3:b6:cb:98:
b3:a1:d2:c7:eb:ca:44:48:52:57:32:8c:61:42:cd:04:97:5c:
62:a6:2f:5e:0b:84:94:8b:c9:fa:5c:c5:a2:9d:a9:5f:8a:8d:
bc:e1:6d:20:18:64:39:83:7e:65:b7:85:34:e5:46:55:2b:c3:
10:86:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:50 2025 by rpki-client