Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/xuKZJebXbxs55nxOb7ZrfE7zGKE.roa
File: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (raw, json)
Hash identifier: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=
Subject key identifier: C6:E2:99:25:E6:D7:6F:1B:39:E6:7C:4E:6F:B6:6B:7C:4E:F3:18:A1
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 0194497C208D563D4C7BBCFBC00B4EE30700
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/xuKZJebXbxs55nxOb7ZrfE7zGKE.roa
Signing time: Thu 09 Jan 2025 05:14:18 +0000
ROA not before: Thu 09 Jan 2025 05:14:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43151
IP address blocks: 185.122.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:49:7c:20:8d:56:3d:4c:7b:bc:fb:c0:0b:4e:e3:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 9 05:14:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6e29925e6d76f1b39e67c4e6fb66b7c4ef318a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:de:36:16:78:16:0a:a8:2f:e1:3c:37:57:6e:
d7:cf:0a:47:1b:37:93:f4:06:5f:8a:b3:59:c9:52:
f0:ef:7e:1d:97:b3:36:13:25:42:00:02:ad:23:2b:
1a:77:87:32:74:97:51:99:48:ab:08:2f:5f:31:aa:
fc:6d:24:85:34:c0:44:cb:0a:14:13:33:89:3e:04:
60:17:c5:a0:d8:22:29:a1:0a:61:d1:ab:db:4e:df:
52:41:ba:81:30:d0:66:52:c1:26:8e:05:d2:72:00:
5e:34:4a:f5:0c:91:ff:7b:64:b5:98:1d:2e:70:7b:
db:21:31:f3:6f:84:a6:99:a3:6a:af:29:45:19:ef:
2a:12:1f:b7:d9:33:5b:71:e6:1d:ed:9b:a6:2d:4c:
91:6e:2e:5f:b9:96:02:91:03:64:09:3c:25:ab:04:
2a:7f:a6:02:9f:f2:61:84:d2:8b:29:53:9b:15:05:
14:2b:48:e2:a3:16:29:2f:58:21:65:2e:25:eb:4a:
bb:c8:27:73:01:66:d1:d1:f6:9d:5b:97:cd:62:51:
70:cc:7d:4d:1d:b1:b0:32:31:47:51:69:b2:2a:2d:
32:c9:84:ee:e9:cd:3d:2c:e4:d2:86:8d:9e:a5:e3:
e0:b0:49:e7:3b:5a:42:69:23:c3:07:14:f6:51:5c:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E2:99:25:E6:D7:6F:1B:39:E6:7C:4E:6F:B6:6B:7C:4E:F3:18:A1
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/xuKZJebXbxs55nxOb7ZrfE7zGKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.140.0/24
Signature Algorithm: sha256WithRSAEncryption
72:61:69:23:d2:8a:bd:d5:47:59:96:6c:14:07:4e:32:b8:14:
d3:de:b5:c8:78:01:f4:43:5a:55:65:03:32:fa:b9:dd:ac:3d:
00:be:1c:c6:8d:5f:43:d4:9f:04:ef:b1:77:34:1a:a1:4f:01:
e1:83:ac:64:dd:d1:96:30:23:08:6e:4c:98:54:eb:47:d2:31:
50:9e:ca:56:7e:7f:aa:14:8e:e4:ce:0d:95:74:58:15:87:ac:
fa:b2:bc:5e:eb:bd:24:3e:a9:8c:86:43:d9:eb:01:a0:cb:cd:
0a:0a:c3:27:5e:15:4a:d5:e0:e3:52:76:04:17:00:d2:27:69:
f1:5a:8a:7b:7c:95:96:60:e2:9f:35:3c:10:aa:92:68:11:28:
84:18:8d:2d:de:d3:19:4f:0f:30:f0:00:47:7f:ce:59:f5:95:
26:eb:ba:8a:0b:6e:d2:75:98:e8:82:c1:20:03:2f:21:63:bf:
4f:04:bd:00:e5:1e:ac:16:d9:46:a8:4d:f2:a1:f2:60:3e:3b:
b9:8a:fd:44:0c:0d:d2:01:43:9e:c8:53:ee:22:b1:88:c6:24:
b5:12:c2:1f:49:9e:e0:7b:c4:92:ac:3d:ef:ec:8c:b1:cf:76:
8e:b9:80:75:79:78:15:7a:e4:ac:f0:ea:c9:fa:ca:38:95:e7:
d3:48:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:48:49 2025 by rpki-client