Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/XfddXSazKRwlAti_xB3GX9aF4dA.roa
File: XfddXSazKRwlAti_xB3GX9aF4dA.roa (raw, json)
Hash identifier: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=
Subject key identifier: 5D:F7:5D:5D:26:B3:29:1C:25:02:D8:BF:C4:1D:C6:5F:D6:85:E1:D0
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019424B39AD6CC07869315776048DFCEC1BB
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/XfddXSazKRwlAti_xB3GX9aF4dA.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206449
IP address blocks: 185.186.108.0/24 maxlen: 24
185.186.109.0/24 maxlen: 24
185.186.110.0/24 maxlen: 24
185.186.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9a:d6:cc:07:86:93:15:77:60:48:df:ce:c1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5df75d5d26b3291c2502d8bfc41dc65fd685e1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:61:14:10:02:b0:24:7e:b8:21:62:67:c6:
4c:dd:c7:3e:4b:f4:da:5f:71:d2:30:5a:4c:42:3f:
f6:d4:26:e1:15:fd:c3:39:91:25:3e:b6:aa:dc:66:
0d:8e:ae:43:9c:23:97:3a:27:6e:79:9a:ca:ca:04:
dd:61:05:f2:fa:72:b7:20:59:0a:8c:a4:e2:5f:5a:
14:e3:f7:22:ae:0b:5d:4a:3c:02:83:ef:65:4d:01:
da:56:f9:4c:ea:98:9a:07:0e:48:1b:dd:fc:ba:9d:
c7:93:38:11:0c:a6:95:61:e5:f2:42:66:4a:10:f8:
e8:22:4f:11:81:e5:57:c8:ec:0f:b3:c0:3d:49:5e:
e3:ad:52:f9:1a:b4:84:1f:7e:9a:55:68:64:6d:eb:
c8:96:7c:5c:5f:81:fe:d2:b9:21:3a:a1:c2:4c:71:
45:6b:48:96:0f:4d:5d:3b:b7:13:1f:d7:74:5b:27:
53:4f:81:22:9e:2f:b9:34:44:d5:b8:4c:49:7b:e7:
b0:bf:9c:9c:91:fa:51:26:85:59:93:b8:09:18:ec:
3a:9d:45:03:d8:dc:b7:ad:2e:91:83:5e:9a:53:2b:
dd:00:cb:10:20:0f:78:a0:df:bb:4c:b4:e9:61:50:
d1:d5:85:df:eb:23:35:0b:39:f6:fe:95:f2:88:e1:
dc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:5D:5D:26:B3:29:1C:25:02:D8:BF:C4:1D:C6:5F:D6:85:E1:D0
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/XfddXSazKRwlAti_xB3GX9aF4dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:86:c5:86:2b:8b:f7:0f:4c:0b:8e:8c:bc:32:b2:9c:8f:c6:
0d:37:b7:fb:07:56:a8:e1:1a:97:ff:e6:6d:ab:cc:31:38:6f:
18:92:60:e7:2b:b1:e3:8a:3d:21:29:0c:12:e3:4b:91:40:e8:
43:2b:40:37:b7:f0:30:b5:05:ef:99:d5:cd:dc:46:1a:de:58:
2b:b8:a0:b1:39:94:f1:55:84:68:3b:3a:03:28:bd:ff:81:70:
b3:dc:60:41:86:6f:94:2a:fa:6b:38:fd:4e:2a:3a:53:c7:95:
66:48:77:0e:7f:cf:cc:d1:a2:55:15:c5:88:62:73:26:a7:07:
d8:71:f1:ed:0f:99:b7:d2:55:93:31:31:9c:18:0a:40:f0:ec:
1a:65:05:c0:4e:7d:03:48:da:9c:40:e1:8a:ab:ab:f8:a1:8f:
b2:09:12:e3:60:1b:63:b9:4b:5b:45:96:c8:76:11:aa:3d:03:
d8:e9:05:06:75:78:44:fe:94:32:e7:19:2e:8e:47:d5:0a:f4:
b8:70:22:17:25:ef:a3:74:aa:9c:87:96:af:1f:b2:47:b3:a4:
95:4d:5f:01:b9:d9:3b:ce:de:3b:11:4d:e3:13:79:3e:df:0d:
39:41:f8:2f:91:3e:c7:54:3c:0b:97:79:98:c4:75:4c:3b:8f:
f0:e6:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:47 2025 by rpki-client