Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xzCn6Ih4n51EkLn-Mi4FmdEeQJA.roa
File: xzCn6Ih4n51EkLn-Mi4FmdEeQJA.roa (raw, json)
Hash identifier: n+PO5KNffdvOy3GYfuEXmtO8nN0X3PLm6DIW4XAJlcY=
Subject key identifier: C7:30:A7:E8:88:78:9F:9D:44:90:B9:FE:32:2E:05:99:D1:1E:40:90
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274846D5C3C30F11C65BE4148E29DA84
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xzCn6Ih4n51EkLn-Mi4FmdEeQJA.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204741
IP address blocks: 85.209.72.0/22 maxlen: 22
85.209.72.0/24 maxlen: 24
85.209.73.0/24 maxlen: 24
85.209.74.0/24 maxlen: 24
85.209.75.0/24 maxlen: 24
217.76.253.0/24 maxlen: 24
217.76.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:46:d5:c3:c3:0f:11:c6:5b:e4:14:8e:29:da:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c730a7e888789f9d4490b9fe322e0599d11e4090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:6c:89:6a:10:6c:de:13:33:86:f8:c4:f1:
98:57:16:4b:f6:c0:41:3f:58:5b:c1:da:ce:e7:da:
46:c4:9d:d4:65:b6:3f:40:30:b1:a6:4f:9b:da:01:
fc:b4:35:30:ad:f2:62:17:ff:63:58:d6:04:a3:d8:
40:bb:77:16:b0:64:0d:05:f5:d9:c5:72:e2:68:e0:
20:65:be:d9:bc:9c:48:dc:ed:16:14:a8:e4:7d:a6:
ad:10:17:59:f7:47:e4:d4:fb:83:a1:8a:2a:3d:e2:
f9:f4:b6:f7:a8:05:80:57:a0:05:9a:f0:cc:74:57:
03:17:7c:d3:e3:e9:69:67:95:dd:54:a8:b3:70:6a:
9b:2c:36:35:dc:fa:70:0e:76:56:7d:08:85:51:4d:
b5:60:13:77:7d:54:52:ab:2a:8b:13:b0:43:c5:45:
0d:37:4f:04:ca:c3:5d:c9:ce:60:47:76:b0:13:fd:
78:16:b3:d4:7a:be:cf:99:80:18:de:94:87:fa:d8:
d5:36:e4:a2:65:4c:b5:e7:c2:d8:f6:28:13:2e:66:
9f:45:18:a8:86:79:9c:32:c7:cc:c9:c5:43:fd:b5:
3d:9b:14:53:c9:80:93:ac:40:1b:c2:7a:7d:28:e5:
c2:43:54:5c:f4:bc:cf:20:34:01:fd:47:9c:4a:9e:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:30:A7:E8:88:78:9F:9D:44:90:B9:FE:32:2E:05:99:D1:1E:40:90
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/xzCn6Ih4n51EkLn-Mi4FmdEeQJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.72.0/22
217.76.253.0-217.76.254.255
Signature Algorithm: sha256WithRSAEncryption
ad:d6:99:04:69:0e:f0:81:3e:16:1a:ec:6d:a0:ba:2a:88:65:
ef:f8:70:1a:55:0a:cd:78:95:4a:de:42:5a:7b:6d:09:f1:19:
e9:1c:c1:c1:c9:9e:f1:46:28:6b:56:f3:ad:2c:63:a8:2f:1d:
cc:d0:cc:e5:6c:03:df:f2:9b:18:c2:37:9a:de:51:2c:89:c9:
a3:25:3a:38:b2:04:ce:de:c9:3b:c9:6a:3a:af:30:39:b0:94:
03:ad:b7:b5:da:db:fb:83:dc:5d:e7:05:2c:b0:1e:6d:76:c0:
92:71:f1:6d:76:7a:c1:30:ac:9a:d9:76:dd:93:d3:35:c9:6f:
cf:7c:01:a1:24:dd:ca:cb:cc:6a:38:10:8f:c4:a8:9b:d9:b3:
d5:9b:00:9f:54:e7:c1:23:2d:1a:c8:53:76:ee:ea:07:70:38:
c9:8b:fd:5b:42:41:b0:27:f6:87:cc:0d:c1:15:43:5f:15:e8:
7c:3f:49:c4:3c:a0:52:f3:d8:d6:3c:d4:a9:47:72:93:bf:3c:
a5:4c:2d:b7:93:39:ba:ad:b3:09:ed:e0:0b:8a:a9:cf:62:fa:
d2:6d:ac:0f:37:66:29:d7:31:12:45:6a:26:e7:fa:40:8a:a2:
88:c5:89:53:55:3f:9b:fc:9e:91:9f:47:b8:d2:24:bd:d4:8e:
34:6b:47:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:49:22 2025 by rpki-client