Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/XaQFQicfhG4nS73QjVCHMUwAPG8.roa
File: XaQFQicfhG4nS73QjVCHMUwAPG8.roa (raw, json)
Hash identifier: vEWEx+WC0m8X0tM9GZ7AzmWSqkdHKT5bYqE12jvQZ1Y=
Subject key identifier: 5D:A4:05:42:27:1F:84:6E:27:4B:BD:D0:8D:50:87:31:4C:00:3C:6F
Certificate issuer: /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial: 019426D93755CE0981754DFED946E290FBEB
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/XaQFQicfhG4nS73QjVCHMUwAPG8.roa
Signing time: Thu 02 Jan 2025 11:49:17 +0000
ROA not before: Thu 02 Jan 2025 11:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202177
IP address blocks: 217.173.202.0/24 maxlen: 24
217.173.203.0/24 maxlen: 24
217.173.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:37:55:ce:09:81:75:4d:fe:d9:46:e2:90:fb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Validity
Not Before: Jan 2 11:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5da40542271f846e274bbdd08d5087314c003c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:0a:5a:18:2b:ef:b8:f1:7f:c4:32:42:f2:
54:68:5d:67:c5:d1:28:1a:47:80:9b:be:7f:ca:a3:
82:f3:59:d4:a8:d9:54:67:f6:2e:d5:8b:2a:d8:9c:
e3:5d:b7:4b:e6:96:a6:f2:c8:a0:19:77:31:d2:4d:
89:45:80:e1:39:c7:3e:3e:61:8b:15:da:6a:42:c6:
e1:43:0b:94:be:d8:26:e1:8d:86:d0:b3:75:17:4d:
7f:a8:b1:4c:8e:a5:e5:d4:77:87:0a:08:88:37:70:
1a:2a:34:d8:f2:3b:ab:01:af:8d:b8:66:b8:43:49:
71:99:a6:b9:9d:73:fb:c0:1a:f6:ad:fa:db:76:08:
54:20:2c:de:1d:0d:66:81:56:75:33:9a:2d:67:3b:
35:e4:a0:31:9f:ba:bf:ae:31:4d:e9:82:70:f9:32:
68:f9:63:cb:53:b1:15:73:33:18:41:c1:e8:f4:89:
d4:59:74:48:1b:66:5b:26:8f:50:41:1c:cb:43:27:
7a:6d:de:55:95:1c:0c:5a:92:c3:90:db:11:39:c1:
41:17:c5:75:f8:cd:35:ab:05:25:a6:a6:b5:37:1b:
ba:c4:81:fb:9c:fb:c9:80:ae:b9:14:f3:16:2f:63:
22:1c:f0:39:ec:6d:85:80:ba:70:91:ba:f1:b4:2f:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A4:05:42:27:1F:84:6E:27:4B:BD:D0:8D:50:87:31:4C:00:3C:6F
X509v3 Authority Key Identifier:
keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/XaQFQicfhG4nS73QjVCHMUwAPG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.202.0-217.173.204.255
Signature Algorithm: sha256WithRSAEncryption
c0:d2:4b:c6:87:a4:e0:33:61:78:fb:29:0f:1c:da:4e:be:7a:
db:1a:9c:8d:1d:26:dc:6c:d1:26:7b:86:13:e4:39:88:88:3b:
4e:a9:2d:33:d4:a4:50:a9:44:bc:76:20:4b:e0:c9:59:ae:a3:
8e:d6:22:66:91:59:ba:ba:ee:c6:9e:dc:df:68:71:bc:40:a8:
db:f2:ff:00:38:15:f5:e6:9a:12:ce:53:61:34:76:83:08:da:
14:12:d9:10:e2:70:f6:76:48:e8:e8:4b:72:b7:c5:59:7a:31:
76:28:d8:90:ee:49:35:a7:4d:23:f5:d5:a3:2f:6b:c3:2a:f6:
11:3c:4b:d5:2e:b1:e1:60:ff:50:35:d4:13:3d:7c:e3:13:f9:
c1:70:0d:cb:cf:d8:b2:c6:ac:90:d3:75:2c:2d:53:9f:93:9c:
c7:0a:cd:f4:72:e6:16:17:e4:75:71:3f:71:91:d8:1e:f1:4d:
0f:e7:a8:e7:31:09:9c:7f:ce:bf:cc:0a:be:be:53:e8:fc:85:
06:1b:60:ee:d5:a8:de:55:69:02:f9:30:f7:24:2f:e1:b9:91:
cf:30:bf:1c:d2:3d:b5:20:31:a6:83:73:f5:78:20:30:7c:ff:
fe:69:28:5f:31:0e:fd:6b:d3:d9:d0:a8:db:c8:a8:4d:b3:91:
81:6d:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:22 2025 by rpki-client