Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/XlEutT53Peaefw9BWBX8iOxdk0o.roa
File: XlEutT53Peaefw9BWBX8iOxdk0o.roa (raw, json)
Hash identifier: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=
Subject key identifier: 5E:51:2E:B5:3E:77:3D:E6:9E:7F:0F:41:58:15:FC:88:EC:5D:93:4A
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 0194228E0921752E2C3195E6EC2EFBE36202
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/XlEutT53Peaefw9BWBX8iOxdk0o.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 188.172.137.0/24 maxlen: 24
188.172.138.0/24 maxlen: 24
2a03:7d40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:09:21:75:2e:2c:31:95:e6:ec:2e:fb:e3:62:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e512eb53e773de69e7f0f415815fc88ec5d934a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:95:b4:8f:2d:c4:55:42:27:48:cc:bb:cb:
b0:6b:b8:fa:5f:1d:8b:97:79:03:0a:22:c3:c1:a5:
f6:d2:7a:12:71:c0:68:9e:a6:46:9b:db:5f:ce:7b:
5b:de:6c:16:cf:9d:82:7b:02:5e:81:44:b4:03:65:
93:c6:21:07:e6:05:75:9b:83:3b:70:18:13:a0:07:
9b:4c:1d:b4:6c:dd:5b:c9:84:2a:4c:1b:5b:c1:61:
52:41:37:c8:ed:60:48:d1:af:a2:28:ef:53:c9:ac:
18:b1:44:90:80:7d:f3:83:c3:dc:37:3e:73:2c:7c:
70:91:3e:2e:7e:bd:b8:b4:84:91:12:fe:e0:03:08:
10:6f:34:91:a1:bc:6f:be:f8:1a:5b:e8:c2:67:0e:
7d:ca:8d:01:b0:6d:18:3f:ed:0d:17:05:82:cc:d2:
cb:f0:42:16:28:5b:f7:3e:20:6a:6f:b9:76:1d:6e:
a2:3a:3d:c2:b3:53:91:8a:8e:78:3f:be:69:6c:84:
c2:19:33:76:ce:a4:6f:90:77:40:9e:4f:38:eb:53:
47:8a:e1:6c:32:22:56:12:3e:ae:60:05:0b:bb:46:
c1:e2:8c:17:28:65:13:aa:47:3c:9f:d8:9c:ba:76:
bc:a7:b0:41:ba:43:dd:8f:8c:5f:2c:91:a2:01:84:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:2E:B5:3E:77:3D:E6:9E:7F:0F:41:58:15:FC:88:EC:5D:93:4A
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/XlEutT53Peaefw9BWBX8iOxdk0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.137.0-188.172.138.255
IPv6:
2a03:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
8a:0b:b6:2f:11:33:63:6c:78:db:6b:d7:14:b1:9e:d1:f4:fe:
bb:47:2f:7f:d9:41:8d:1d:04:42:40:96:73:f2:a6:3a:4f:f9:
98:03:85:81:ae:cf:69:98:28:80:04:25:f8:82:aa:12:a7:65:
34:ca:f4:14:58:ff:76:a5:39:70:eb:9b:86:78:70:02:55:af:
d6:98:47:cd:94:e2:bc:87:bc:d9:e2:27:c8:03:ad:27:d1:29:
f7:d7:95:8a:5f:3c:cc:23:88:77:7d:03:59:5a:c3:96:0a:d7:
57:e0:ea:c2:e0:15:f0:92:1e:43:39:2e:1f:a7:cb:12:a1:9e:
aa:80:3e:93:38:47:8a:e7:49:b8:e1:54:31:5e:64:e2:f4:e3:
b3:0e:6f:a7:c9:eb:a6:0c:d9:5b:35:53:41:25:59:f4:0b:be:
09:18:3d:1f:c9:14:54:4a:9e:53:6f:2b:87:10:8b:8f:48:71:
47:2d:66:f1:78:fd:7b:dd:e7:f9:94:af:0b:1f:65:5b:db:18:
ac:1a:95:73:93:6a:33:72:65:88:6d:bc:ec:dd:89:2e:96:76:
c2:d3:af:5c:b3:cd:5f:c7:9b:85:be:95:55:68:83:15:e9:55:
15:43:ec:3d:3a:0a:c2:c8:53:bc:92:da:6b:3f:71:4a:0a:79:
84:dd:89:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:38 2025 by rpki-client