Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/Xr_rDLYraAo68ErahQgmSI-O1wU.roa
File: Xr_rDLYraAo68ErahQgmSI-O1wU.roa (raw, json)
Hash identifier: J6qlUAjts0NQEOL4PZk86cvMfl9rIEmZqCSL49mQz94=
Subject key identifier: 5E:BF:EB:0C:B6:2B:68:0A:3A:F0:4A:DA:85:08:26:48:8F:8E:D7:05
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 0194282836D9DDB2344F96C9A816FB859E86
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/Xr_rDLYraAo68ErahQgmSI-O1wU.roa
Signing time: Thu 02 Jan 2025 17:55:11 +0000
ROA not before: Thu 02 Jan 2025 17:55:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.150.216.0/23 maxlen: 23
2a07:7c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:36:d9:dd:b2:34:4f:96:c9:a8:16:fb:85:9e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Jan 2 17:55:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ebfeb0cb62b680a3af04ada850826488f8ed705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:30:91:f9:23:70:f2:03:b0:37:fc:2b:b9:
17:5b:d7:28:68:fb:2b:e9:bc:47:2f:18:17:29:7e:
f0:95:d4:5e:00:af:f5:7c:c5:f7:99:21:82:58:f6:
13:0b:98:57:f0:49:a4:21:08:cd:9b:b9:8c:78:06:
c8:c3:e0:ce:17:0d:4e:5d:75:5d:2f:a7:c2:bf:90:
76:b8:45:6e:3c:0a:4d:03:e0:bd:da:74:92:d5:20:
44:7a:db:d8:c2:ed:03:26:96:c1:5a:91:ea:31:ea:
fe:f1:a3:c9:a3:21:99:8a:93:c1:62:60:a9:f8:e6:
be:5b:c5:55:5a:e1:7a:1f:f1:b3:3c:1c:90:dd:28:
ca:5e:2e:c0:15:b7:1a:8d:e5:4a:0f:8c:d1:7f:df:
4c:c6:ae:91:be:f2:9f:da:69:32:7e:9a:98:c3:0f:
82:69:50:81:60:c5:6d:e6:32:f1:6b:56:99:2f:f9:
90:a1:a1:77:06:ee:be:d3:1d:ad:3f:3c:06:7e:a7:
59:ca:7e:6f:f7:dc:49:0a:ec:fa:df:f0:b3:14:dd:
51:8a:c5:f9:6b:74:1e:51:8e:06:7c:c2:88:9a:dd:
b3:16:d0:37:19:6b:1b:b8:53:b9:30:f9:b3:4e:93:
10:8d:10:f9:f2:89:d7:59:ba:f3:7b:d5:71:5f:65:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:EB:0C:B6:2B:68:0A:3A:F0:4A:DA:85:08:26:48:8F:8E:D7:05
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/Xr_rDLYraAo68ErahQgmSI-O1wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/23
IPv6:
2a07:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
90:cd:ab:a5:63:28:8a:20:93:65:d5:ca:d1:7c:31:c8:0f:e0:
33:54:46:85:9f:e0:58:de:5f:13:35:49:a8:dc:b2:d6:79:53:
48:99:35:16:82:4c:6e:d9:de:1f:a6:42:60:74:20:61:4c:f4:
01:60:7a:85:e4:c2:db:2b:8a:5e:a5:a8:57:93:c9:0d:dd:b0:
eb:ff:8a:43:da:77:50:f2:37:95:1d:93:7f:08:d5:ab:16:d1:
74:9d:1b:6e:35:54:b0:7f:fb:84:b5:1c:f3:0d:31:fb:5e:c3:
0e:ba:39:53:0a:45:c7:ab:70:6e:ad:17:bc:78:78:c8:86:60:
7c:bb:42:9f:d3:19:08:2f:6c:82:af:1d:56:23:5c:2e:5f:2c:
f8:f4:b5:ab:70:d2:27:c3:b6:67:b9:10:bf:42:b7:de:b6:f0:
f6:39:18:82:83:b2:1f:2d:4e:a3:f2:70:d8:43:19:cc:34:cd:
2a:df:be:f2:5f:9c:36:4f:a7:c1:2d:39:78:c3:c8:c3:f4:3e:
d7:4f:06:97:45:d3:59:3a:f3:02:4c:9a:ec:04:bf:74:75:f3:
bd:68:20:51:8f:cd:23:f0:ed:1d:4a:e5:70:12:66:23:91:76:
5f:37:cd:6b:3a:e1:7b:76:bd:79:a9:db:1c:fb:d0:22:b0:fb:
39:db:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:32 2025 by rpki-client