Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/XIAriGwKiXIV89XyokuVSU6ok94.roa
File: XIAriGwKiXIV89XyokuVSU6ok94.roa (raw, json)
Hash identifier: hF3zC1oiW03gwgTs9lo/n7vUmEiv8dfR/NI1cnnwuzk=
Subject key identifier: 5C:80:2B:88:6C:0A:89:72:15:F3:D5:F2:A2:4B:95:49:4E:A8:93:DE
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 01941FFA61A2648925202D0ADFC39E320AAE
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/XIAriGwKiXIV89XyokuVSU6ok94.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58067
IP address blocks: 185.214.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:61:a2:64:89:25:20:2d:0a:df:c3:9e:32:0a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c802b886c0a897215f3d5f2a24b95494ea893de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:54:a7:db:9d:f8:0c:aa:de:b7:43:7b:29:
3b:72:b9:b4:79:8c:0e:3a:4f:c1:eb:84:13:1b:ad:
b9:2e:ff:e6:25:25:5b:f3:29:2f:87:50:ff:94:54:
01:00:e9:8c:80:18:4d:dc:11:94:0f:06:4f:85:82:
f0:8e:57:41:1e:fb:bb:54:63:78:01:b4:cc:ae:5e:
bb:10:32:22:8b:b2:1a:20:99:c6:33:1c:7d:9c:0a:
01:0f:ee:1d:9e:e1:1c:9c:97:35:9c:70:7a:49:29:
bb:e3:3b:07:aa:cb:c6:d7:6a:03:72:5d:54:b9:55:
6d:47:9e:35:d8:95:a0:8d:e9:14:c4:f3:fa:82:b4:
3a:c8:5b:26:00:6a:bf:83:73:c0:07:ba:85:44:48:
93:39:cd:ae:b4:4a:37:aa:f3:18:61:8e:62:12:67:
f3:5e:a0:fc:77:80:e0:e1:4b:a0:c6:0a:8e:d3:ce:
ed:bc:f1:40:e8:55:3c:43:87:b8:16:f1:4b:7b:05:
e9:f5:b5:e1:35:91:19:2a:64:18:13:c1:55:0e:74:
1f:f7:60:07:1d:64:64:e8:97:c0:51:d7:07:b5:4a:
2b:a6:13:90:7a:d8:48:9a:13:19:8e:6d:6e:94:24:
f0:a0:1b:8e:08:62:aa:68:bd:9e:17:dd:4d:3d:c0:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:80:2B:88:6C:0A:89:72:15:F3:D5:F2:A2:4B:95:49:4E:A8:93:DE
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/XIAriGwKiXIV89XyokuVSU6ok94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:ee:1f:49:ba:51:82:34:29:c4:11:a6:16:c5:01:87:f2:23:
bb:08:73:e3:af:5b:ab:75:51:3f:cb:44:80:1f:27:a5:03:fa:
be:98:e6:0e:b6:a3:a0:e2:a0:23:b1:62:88:08:a5:83:fb:5f:
0b:2b:7c:84:76:10:0a:64:b3:69:f7:d9:b9:5e:51:19:1f:09:
a2:cd:f1:32:8a:ca:ea:0f:e0:9a:e6:ff:34:0d:c7:47:23:f2:
5e:11:f1:13:6c:f0:0d:db:0d:33:4a:b9:22:55:8c:39:4e:c9:
39:28:85:65:fe:b9:11:38:f8:fc:8b:b9:dc:b7:fe:8b:0d:3b:
17:b5:c4:04:1f:9f:bd:2b:72:db:78:16:f7:64:be:aa:67:02:
e7:58:37:2f:e4:c2:30:b8:4b:e7:e1:67:41:9f:aa:df:31:ea:
05:41:31:25:4b:1a:55:08:31:c8:bd:0a:5f:18:24:78:2c:f1:
31:3c:dc:4e:cd:26:4b:9f:24:f1:30:87:4c:df:61:77:65:3b:
6c:90:4d:30:35:f9:af:10:7d:f9:f2:ef:36:b4:6c:3a:a3:4c:
7d:17:92:e8:8f:48:c5:a6:dc:20:a2:ab:9d:1c:b0:ff:01:88:
dc:fb:45:53:68:e6:e6:ed:55:9c:a3:84:ad:cb:e5:ab:c3:c2:
b5:21:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:54:35 2025 by rpki-client