Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa
File: X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa (raw, json)
Hash identifier: Whnqs1Wwvsp0OIKAaEg9kGiqf108NquKFQHaJWKxLGE=
Subject key identifier: 5F:74:0C:B7:57:E6:57:8C:13:14:04:0F:1D:9E:33:B1:13:AF:F0:8D
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 0194AC7B901404CA67CEB21841EF2BBB230F
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa
Signing time: Tue 28 Jan 2025 10:36:06 +0000
ROA not before: Tue 28 Jan 2025 10:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.135.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:7b:90:14:04:ca:67:ce:b2:18:41:ef:2b:bb:23:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Jan 28 10:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f740cb757e6578c1314040f1d9e33b113aff08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:79:e8:0b:f5:e6:61:1f:b8:e2:83:4c:5a:
76:37:fe:8d:56:ef:87:94:57:16:ba:65:cd:4c:ba:
dd:9a:c5:65:30:82:68:7c:6f:73:e2:c4:ca:26:e7:
b8:f4:94:0a:f2:98:a7:16:59:07:25:ae:9c:b4:8f:
ea:87:25:83:25:54:9e:fa:8e:de:42:1e:28:56:36:
c1:79:30:c3:68:4a:5b:da:2c:22:8d:43:34:16:ba:
58:a5:a8:d8:8c:de:b5:05:55:1f:c3:1b:6a:ca:fa:
69:35:77:c5:8f:13:9f:69:c0:21:59:bf:a3:f4:2a:
7c:a1:d2:0c:b9:13:f1:43:05:55:b0:a7:61:94:42:
02:b0:da:3e:2c:be:83:28:eb:4d:91:06:f3:51:f8:
ae:50:8b:4b:0e:75:51:c1:7e:4e:04:30:55:40:03:
be:08:e0:d4:39:77:db:de:73:8d:e1:7c:32:6b:ce:
48:41:74:19:a8:b7:37:bc:56:27:d1:cb:dd:78:11:
be:e6:7e:a9:1c:c0:81:e2:b8:d6:ad:88:0f:7e:87:
f4:e4:f3:c9:6f:77:1f:49:81:74:cf:6c:12:24:d3:
57:21:9c:32:4c:a7:bc:64:45:31:c0:24:27:82:d0:
af:bc:e1:78:66:f4:e6:92:fc:85:c0:c3:03:ab:3f:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:74:0C:B7:57:E6:57:8C:13:14:04:0F:1D:9E:33:B1:13:AF:F0:8D
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.58.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a3:59:2e:5b:b0:c1:12:8e:d5:81:5d:c1:a4:70:1a:0e:88:
e2:6a:41:ac:8d:e6:69:e3:e2:a1:48:ba:05:e5:2a:ce:ff:76:
62:c6:60:5a:42:cd:d0:7e:26:f8:06:a7:e9:aa:5c:77:00:a9:
0b:92:98:51:1b:b7:7a:b3:42:57:03:c4:fc:83:f1:8b:67:a1:
eb:ba:a7:31:5c:0e:f3:95:0d:3b:d4:5a:e2:97:09:a1:71:76:
39:8d:60:c6:84:cd:7f:ff:95:c0:c4:2f:ca:c7:6a:5e:c4:36:
4a:95:e5:f4:c9:c2:01:ff:60:c3:03:e8:a3:8d:9a:fa:c2:07:
33:87:10:07:de:53:1e:25:c3:c8:7f:1e:4f:8f:e2:fc:d5:2b:
84:7a:f6:b5:ab:1d:db:60:2c:4c:15:f8:2d:94:ef:93:36:5f:
4a:bf:58:84:cf:ea:a7:e7:68:02:d6:b8:32:25:7d:26:4b:f8:
20:53:2a:0f:35:f3:1e:bd:db:49:59:6f:bd:5d:00:2c:63:5f:
ee:22:04:f2:69:ca:ce:41:1a:01:ab:cb:8c:70:ce:26:1f:0b:
04:6a:cc:b8:e5:b1:3f:c4:f3:ff:d5:6e:95:37:83:ac:55:0e:
c6:b5:e6:e1:e4:d8:4b:3d:63:5b:a8:57:f8:14:5a:a0:32:04:
b8:62:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:08 2025 by rpki-client