Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa
File: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (raw, json)
Hash identifier: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=
Subject key identifier: 5D:78:59:48:94:F0:FB:77:52:9A:C4:58:F5:BB:D7:42:A1:C1:68:8B
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019425FDC52CC226256CC2698BB297C9E37B
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15924
IP address blocks: 194.1.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c5:2c:c2:26:25:6c:c2:69:8b:b2:97:c9:e3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d78594894f0fb77529ac458f5bbd742a1c1688b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:13:0c:e3:ed:6c:d1:71:5d:6e:84:7a:5e:81:
db:84:d6:7d:82:1a:65:9c:21:07:d0:c8:78:d5:24:
8b:b9:21:bf:2c:9f:87:65:1b:b9:ac:44:72:67:7c:
38:63:85:6e:de:3a:c4:e5:a9:44:0d:ef:76:50:60:
e1:a7:1c:2e:0a:e6:ef:c0:9b:02:4e:45:75:0f:25:
a5:bd:97:b3:a2:e5:f0:32:6c:73:f5:df:9d:e3:57:
30:dd:b0:45:7a:54:4e:57:0d:10:d2:fe:e8:7f:9f:
07:0b:f1:34:f0:d8:25:31:a5:d9:65:2d:48:31:5a:
46:48:86:55:4e:0f:1b:d9:1c:d1:e1:75:96:f6:a0:
28:3d:5e:03:85:e4:19:e4:18:53:6a:4d:0b:ed:4e:
63:87:40:f6:2c:04:b1:56:eb:72:f2:a9:3a:29:fe:
ff:b3:5a:58:cb:8d:1e:24:5d:5d:66:0e:b5:2c:16:
ae:ed:1d:76:3e:04:77:19:c4:0d:2b:80:c9:ed:26:
0a:d5:67:32:b4:16:85:6b:45:31:58:65:ea:0c:1e:
44:3f:e6:df:e9:0b:e9:76:0e:99:a1:c6:a4:50:f0:
9f:1f:27:8f:4d:09:af:d5:6f:41:50:1f:b2:7a:ff:
89:6e:da:10:6d:f1:5f:17:47:b4:8d:be:f0:50:47:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:78:59:48:94:F0:FB:77:52:9A:C4:58:F5:BB:D7:42:A1:C1:68:8B
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ff:9e:7e:7c:97:e7:00:1b:71:ba:78:96:5d:8a:e8:0b:15:
19:d5:19:e6:d6:be:44:c0:84:06:00:c7:54:66:9a:b4:52:3c:
4c:38:4b:95:14:4c:0b:5c:9c:4c:9e:eb:b1:b9:fd:23:96:06:
e8:da:a3:ed:79:b2:ed:c4:58:36:72:c2:47:92:03:44:36:84:
2c:5c:01:9c:50:f6:c3:c3:81:3f:f7:0e:59:23:60:10:99:31:
fe:e9:b8:1d:8e:e9:9a:8e:d5:6c:33:b7:a3:37:41:2d:1e:ef:
63:0d:52:bc:35:26:2b:aa:f7:be:07:25:fd:b8:39:63:55:8d:
36:ff:d8:c8:66:24:09:de:1a:df:ed:3e:e7:a3:8a:4e:cf:1b:
79:d1:a4:0c:36:d6:33:7a:51:a4:ec:7c:af:21:14:eb:02:7f:
e9:82:4c:aa:90:ef:7e:67:d7:36:d5:33:d0:83:30:fd:21:eb:
a5:06:89:ae:af:ac:a8:db:5d:ec:a8:b2:d1:e7:f1:32:94:f1:
b2:68:76:bd:a5:3c:1f:0c:24:c3:ba:5b:1c:92:a7:40:9c:4a:
e2:8d:09:f7:e8:4c:50:d3:b6:3b:cc:dc:f9:13:4d:58:70:93:
3c:41:f1:f3:34:39:4c:c9:ae:ff:33:d4:43:0c:9e:c4:58:9c:
f8:21:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:23:34 2025 by rpki-client