Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xXczAqKR1Z3pEnzeERVUZBPkfYY.roa
File: xXczAqKR1Z3pEnzeERVUZBPkfYY.roa (raw, json)
Hash identifier: QdFqCIE7BBA+t0KYHNXC6SAbKNZGOvzCYfS0qtje+6E=
Subject key identifier: C5:77:33:02:A2:91:D5:9D:E9:12:7C:DE:11:15:54:64:13:E4:7D:86
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483C3D1B60679FB10BDBD279CBE76A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xXczAqKR1Z3pEnzeERVUZBPkfYY.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50129
IP address blocks: 31.15.0.0/22 maxlen: 22
185.225.244.0/22 maxlen: 22
185.225.244.0/24 maxlen: 24
185.225.245.0/24 maxlen: 24
185.225.246.0/24 maxlen: 24
185.225.247.0/24 maxlen: 24
185.241.122.0/24 maxlen: 24
185.241.123.0/24 maxlen: 24
194.31.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3c:3d:1b:60:67:9f:b1:0b:db:d2:79:cb:e7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5773302a291d59de9127cde1115546413e47d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:cc:8e:51:b6:45:2b:43:6d:ff:71:a7:76:
99:5e:b2:61:34:91:86:b2:bf:4c:a2:60:4f:e9:8f:
d9:f3:2c:07:77:2d:56:e3:f0:f7:fc:db:44:0f:be:
df:59:b8:5d:d5:a7:29:b4:6c:b6:cf:28:30:31:dc:
8c:ca:fc:9a:34:d0:71:21:11:a4:5e:bb:9e:d7:b4:
e2:34:ee:73:3b:d0:be:1c:1c:1f:6c:11:d9:54:19:
e1:93:1a:be:8a:c0:42:b9:25:b0:98:65:65:3c:68:
da:02:ae:32:0c:b1:77:a6:b0:f9:7a:2d:5c:8e:d8:
8d:94:05:8a:ad:8f:71:d1:12:06:4e:9a:64:a4:0b:
c5:a0:e2:e6:d7:09:0b:fa:20:95:05:25:ee:49:7f:
ec:e5:b4:c9:3a:60:ea:22:a5:54:a3:57:1a:6e:35:
76:80:1a:55:17:ff:74:69:3c:18:d3:3c:01:8d:72:
0d:e5:11:d9:4f:d5:1b:a3:82:12:40:4a:43:c0:11:
c6:d9:af:44:10:a2:aa:28:8b:d0:e9:ef:70:43:b7:
e3:9e:b6:53:87:9a:4e:f3:16:87:d7:46:b5:30:60:
a3:e1:95:c7:b6:fe:56:1a:45:a4:3e:8b:10:61:a5:
8a:a1:fd:8f:71:4c:c9:a4:74:0e:1f:f3:44:df:ec:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:33:02:A2:91:D5:9D:E9:12:7C:DE:11:15:54:64:13:E4:7D:86
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xXczAqKR1Z3pEnzeERVUZBPkfYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.0.0/22
185.225.244.0/22
185.241.122.0/23
194.31.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:30:1f:86:1d:78:fe:aa:c0:18:10:d2:78:a8:db:36:cb:a2:
d2:9a:75:95:02:12:30:8e:30:54:a0:a7:1d:92:cc:71:b9:5c:
f9:34:73:de:a8:48:3f:29:f0:42:b9:52:00:37:c1:0e:ef:78:
bf:52:17:0d:67:db:54:20:d0:53:46:9f:33:5e:1c:e9:75:5c:
53:ff:8d:a1:68:44:c5:6a:da:df:9d:99:92:6c:42:18:6b:33:
d5:fa:59:4e:fb:62:7f:88:6d:65:c0:3c:0c:6a:5b:a5:e2:0a:
21:83:d9:e3:59:ac:38:d3:8b:42:3f:e8:d3:02:a6:6b:2f:9e:
22:e6:f8:13:f1:bd:c7:75:f5:20:30:aa:ac:31:ec:10:85:ce:
fe:f7:c6:f2:aa:b6:61:eb:f9:ad:2c:b3:23:ef:f9:71:a9:b0:
44:56:1f:7e:a9:1a:fe:28:b3:35:34:16:d7:ba:3a:41:f2:5d:
18:2f:34:c9:1d:23:3f:89:a7:56:b2:94:3b:9f:d1:b8:47:2b:
73:ff:e1:02:30:6c:ac:c3:95:13:69:92:94:af:f0:9c:ab:cf:
87:95:a2:33:cd:ca:f2:0d:05:34:82:a2:8f:26:68:ab:6f:50:
e9:72:61:22:61:54:35:40:41:27:8a:22:aa:2a:24:0e:05:74:
9c:d3:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:37:13 2025 by rpki-client