Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XztjZE9fk0Vtt_HAwfXOGECErRU.roa
File: XztjZE9fk0Vtt_HAwfXOGECErRU.roa (raw, json)
Hash identifier: z/1yrGu9uo9P4oY/P/grPvmf1u4cpPPfUAbFtUsr3Xw=
Subject key identifier: 5F:3B:63:64:4F:5F:93:45:6D:B7:F1:C0:C1:F5:CE:18:40:84:AD:15
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428277730CC571FA473C1445DBA04585D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XztjZE9fk0Vtt_HAwfXOGECErRU.roa
Signing time: Thu 02 Jan 2025 17:54:22 +0000
ROA not before: Thu 02 Jan 2025 17:54:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215620
IP address blocks: 89.45.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:77:30:cc:57:1f:a4:73:c1:44:5d:ba:04:58:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f3b63644f5f93456db7f1c0c1f5ce184084ad15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:ac:f9:e9:91:21:de:05:44:db:b4:b4:6a:
1d:7a:c7:b4:42:66:32:ec:3d:f0:b9:57:ba:b0:d7:
0f:bc:b5:3c:f5:b2:d4:56:6f:65:20:7e:93:af:3a:
e4:9f:d4:b4:cb:17:18:08:ce:04:16:45:b5:20:4d:
92:88:ec:45:0b:36:11:e9:3c:65:dd:ae:c3:36:4c:
aa:e4:a1:59:cb:22:b0:88:3c:54:05:54:10:4d:69:
2f:b2:fa:7c:dc:df:e6:f7:cb:ec:2e:39:cf:a3:45:
44:9a:30:37:4f:6b:d9:cd:64:36:a3:51:1c:b9:83:
f1:4b:c1:44:eb:d1:9b:bd:1f:87:e4:34:fd:ca:5e:
4a:93:e8:96:5a:df:e2:2c:3d:44:ed:7a:84:f8:f3:
ed:b2:f0:0a:a2:38:f1:8a:fd:bc:a9:8b:c4:88:fb:
6c:86:df:9d:fd:be:93:b9:77:82:dc:58:f3:c2:25:
44:94:0f:c7:59:40:03:67:9f:22:27:de:31:10:ef:
5c:4b:7e:b9:12:07:b2:7e:ff:3a:b3:df:bb:31:cd:
c1:fe:19:ac:a5:70:03:c0:c1:69:36:7e:d4:64:16:
d2:d6:ec:c3:93:9f:60:de:e6:e5:69:e5:90:9f:f1:
e0:5c:fd:fe:88:c3:0c:c5:f2:a1:98:85:ed:e6:e2:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3B:63:64:4F:5F:93:45:6D:B7:F1:C0:C1:F5:CE:18:40:84:AD:15
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XztjZE9fk0Vtt_HAwfXOGECErRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.44.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e1:49:72:f3:9a:8f:a6:d8:e8:c7:9a:07:13:dc:d0:18:2b:
6d:d5:61:09:a1:61:e4:34:6d:62:45:c4:45:bc:ac:8e:b4:5a:
1f:96:f1:0f:74:a9:4c:27:50:41:dc:4c:b5:9a:8d:ad:83:3c:
d7:e9:5e:4c:76:1f:de:b2:13:7c:af:80:8a:53:8b:6a:0c:a9:
15:7e:68:48:fe:b3:04:0f:5a:c2:c2:15:bf:b5:92:22:6d:fb:
d7:42:59:1f:69:e3:91:4c:a6:44:ad:ee:ec:7f:86:c6:56:59:
28:5e:ee:90:3f:0a:1b:9e:57:90:4a:26:59:c2:01:40:dd:3c:
bb:75:df:66:05:ce:25:33:4b:1a:27:0a:b2:31:ac:d2:86:e7:
e1:c6:77:87:2f:2a:3c:d5:d5:65:44:ac:1a:3c:55:99:97:1c:
2f:86:1e:52:61:35:04:b6:bd:d3:84:c8:5c:1b:12:ea:b0:73:
3c:c8:8e:40:08:f5:68:c3:05:da:e4:09:ee:e2:46:0a:50:f8:
27:88:b7:47:12:23:aa:87:c3:6d:2e:f4:64:a8:47:78:50:d0:
7b:12:2d:23:bd:37:9b:fa:ef:12:fe:67:5d:ad:26:58:7f:82:
cc:e7:03:8f:11:5e:a0:ae:4f:9d:66:6d:85:5a:eb:97:b2:12:
21:97:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:55:12 2025 by rpki-client