Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/XuO7mhRFAxWWJf3a_uruRMjL2IE.roa
File: XuO7mhRFAxWWJf3a_uruRMjL2IE.roa (raw, json)
Hash identifier: RQDFwJe4JCe2zZylFuaxaBjfCKElGwq/EnTU4HdBtkk=
Subject key identifier: 5E:E3:BB:9A:14:45:03:15:96:25:FD:DA:FE:EA:EE:44:C8:CB:D8:81
Certificate issuer: /CN=b6b6af4ddf8316fbf101c93644e6594146570762
Certificate serial: 0195C8DEF5986D2A655A6CB51F32F6B35E2E
Authority key identifier: B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/XuO7mhRFAxWWJf3a_uruRMjL2IE.roa
Signing time: Mon 24 Mar 2025 15:56:49 +0000
ROA not before: Mon 24 Mar 2025 15:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214406
IP address blocks: 194.39.246.0/24 maxlen: 24
212.125.136.0/23 maxlen: 24
2001:3f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:de:f5:98:6d:2a:65:5a:6c:b5:1f:32:f6:b3:5e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b6af4ddf8316fbf101c93644e6594146570762
Validity
Not Before: Mar 24 15:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ee3bb9a144503159625fddafeeaee44c8cbd881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:c3:06:e9:61:31:a8:5d:c7:d5:59:73:5b:
f9:79:ed:0b:f0:04:9e:3b:e6:2f:1d:39:b2:e5:93:
e9:9c:a5:76:aa:a8:44:cc:28:2c:8b:ba:84:28:f2:
79:89:87:54:af:0d:7c:50:3c:2d:5c:88:55:42:83:
dd:50:16:a2:fd:79:1b:7f:d1:b4:7c:37:25:a3:e3:
77:e9:5d:84:72:25:4c:ab:9b:8f:d5:45:55:93:43:
37:80:e0:a3:29:fc:67:ec:66:e6:9d:89:bf:4f:f3:
44:f2:e9:cc:4a:6c:d0:eb:7a:4c:48:33:c0:f1:11:
7f:d9:3f:5d:ba:5b:63:dc:46:27:bc:b8:f5:de:85:
80:c6:b1:9c:e4:14:08:c8:6c:6d:26:a9:3c:94:2a:
23:7a:f9:d9:bf:e0:cd:ca:e4:00:c5:7e:d4:bd:d6:
98:25:b3:23:9a:1e:a6:b8:fe:72:99:e2:9a:1f:7d:
9a:8d:87:62:67:67:25:60:eb:e7:20:31:9b:11:3c:
21:d0:4a:87:37:7c:09:6d:e8:62:e6:c6:36:ec:b9:
29:0f:7f:3b:2e:d7:4e:1d:2e:d7:01:05:19:b1:45:
4a:c8:ee:b5:96:35:30:32:bc:0f:26:af:bb:23:f8:
2b:fa:90:7f:09:6c:d1:58:3c:d8:a0:da:bf:de:70:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E3:BB:9A:14:45:03:15:96:25:FD:DA:FE:EA:EE:44:C8:CB:D8:81
X509v3 Authority Key Identifier:
keyid:B6:B6:AF:4D:DF:83:16:FB:F1:01:C9:36:44:E6:59:41:46:57:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/travTd-DFvvxAck2ROZZQUZXB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/XuO7mhRFAxWWJf3a_uruRMjL2IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/25651d-ee73-48ed-af68-29f420752d5e/1/travTd-DFvvxAck2ROZZQUZXB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.246.0/24
212.125.136.0/23
IPv6:
2001:3f00::/32
Signature Algorithm: sha256WithRSAEncryption
92:71:62:2e:47:9e:f6:9c:94:1e:a9:39:97:27:33:7a:8b:18:
61:4a:55:c6:46:7e:26:c4:60:95:46:e3:9f:b4:ec:7e:ee:87:
d5:94:25:3c:88:b4:c2:6d:f5:bc:af:16:43:a8:e5:53:c2:84:
e2:e9:22:50:98:77:c8:5e:ad:26:68:b4:7b:a0:62:38:3a:f2:
48:98:bc:80:d4:52:d5:3a:b3:64:77:b6:69:23:83:6e:19:ab:
cb:be:98:b3:e3:e3:bf:1c:9a:c7:ed:14:08:ce:96:c5:f5:fa:
3f:f8:7b:91:55:4e:39:ef:2e:aa:ce:1d:00:c5:92:3b:1f:9f:
60:8e:f6:cf:33:c2:0f:aa:df:ca:8a:f9:d1:08:df:2a:1f:bc:
b2:44:10:6f:66:da:8c:06:c8:0c:a1:2c:b0:e6:41:f4:ee:f8:
2b:50:32:68:61:d6:13:8b:4d:0d:59:2a:f4:37:9d:71:91:6f:
da:7f:74:88:66:4e:ac:d6:6f:84:62:6b:ef:77:0f:87:f8:28:
4c:19:95:71:49:01:e1:c2:88:b7:e5:74:6a:ad:29:7b:3c:a4:
62:c6:8a:5d:d3:62:d5:13:1b:f6:d3:eb:04:30:53:bc:20:0b:
04:a2:f2:2a:4c:0e:43:1c:ea:8d:86:0c:b2:be:59:69:c0:64:
9e:95:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:21:15 2025 by rpki-client