Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/XjFi2Cntd0oPDO451MBhOtZCDnM.roa
File: XjFi2Cntd0oPDO451MBhOtZCDnM.roa (raw, json)
Hash identifier: 7dr7flPYIycOqvdbpZ43N5qce8PY6ub0N0ZeKnZ45bU=
Subject key identifier: 5E:31:62:D8:29:ED:77:4A:0F:0C:EE:39:D4:C0:61:3A:D6:42:0E:73
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 0194258F4CEF931B383CCB072788C2A006C9
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/XjFi2Cntd0oPDO451MBhOtZCDnM.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210256
IP address blocks: 185.254.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4c:ef:93:1b:38:3c:cb:07:27:88:c2:a0:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e3162d829ed774a0f0cee39d4c0613ad6420e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:30:36:25:82:33:09:8a:25:12:43:41:a4:
eb:da:5e:92:1a:d3:38:4b:5b:6a:84:55:85:09:db:
cf:9d:8d:0f:0f:ab:19:cc:1a:97:bc:5a:5d:cc:f5:
5b:32:76:ff:d3:49:40:43:ca:87:d7:55:b8:ef:c4:
dc:61:a3:3c:52:65:ea:98:7e:40:52:28:9a:ab:1a:
8d:e9:34:57:65:ed:e6:51:aa:68:9c:55:eb:da:37:
9d:40:28:9e:8e:28:35:b8:bf:b9:ba:e2:38:6c:1f:
2d:72:af:2c:bb:30:24:cb:52:4c:9d:ed:a2:e8:75:
e3:dc:a0:73:a8:a1:2c:fe:0c:bb:bd:d0:d2:d6:2b:
7b:35:a2:99:ea:de:2d:13:2c:23:7b:d8:05:ec:03:
df:61:43:87:3c:0b:62:d1:c9:e5:60:69:6b:8d:e4:
49:87:f9:74:b8:26:1e:f1:24:16:2d:37:0e:b5:c7:
cb:b5:24:d9:29:3d:54:12:fb:d1:01:74:36:90:ab:
28:56:b3:d8:28:dc:98:a3:89:ae:53:e5:8a:ae:a0:
ea:fa:fe:d5:db:60:f7:4a:96:73:04:4b:56:8b:28:
b0:03:92:1e:9c:44:77:1f:38:1e:98:1e:3f:37:39:
46:98:df:cd:73:66:b5:db:ef:68:9d:88:92:f6:c4:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:31:62:D8:29:ED:77:4A:0F:0C:EE:39:D4:C0:61:3A:D6:42:0E:73
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/XjFi2Cntd0oPDO451MBhOtZCDnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.7.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1b:b1:99:b7:b9:cc:28:34:b2:31:27:d0:df:d8:01:5a:54:
1c:e6:f4:5d:47:71:a3:02:90:17:ca:28:6f:f0:91:d3:8e:56:
64:d4:23:c2:4f:80:a5:13:50:27:4a:63:21:01:49:fa:a5:a8:
6d:d5:c5:88:64:cb:39:bd:85:cb:f0:6b:9c:6b:98:e4:e1:26:
f9:50:67:38:f4:b3:ec:33:3b:3d:d7:f3:26:c3:31:7d:df:3b:
75:08:8e:08:90:9c:e8:db:fd:e2:a8:34:d3:24:be:9a:cd:ab:
eb:7e:f5:04:1f:50:a3:65:15:b9:66:e9:84:b9:2e:96:82:f6:
f2:34:7d:1e:e8:cb:88:5b:c7:49:57:fc:2b:27:b9:13:53:8e:
36:da:2a:18:db:ad:2f:42:e0:93:16:5f:c5:2f:8d:12:08:24:
cd:f7:f7:03:96:73:16:d9:ac:f0:8d:0c:f7:5c:33:fd:f9:8a:
cf:3c:28:83:bf:e6:5d:6e:ab:87:1a:68:05:4b:c2:0d:d5:b9:
7d:90:5f:e6:67:a2:dd:14:57:04:21:31:c1:93:c3:dc:d9:43:
7b:1d:e8:ec:c0:e0:5c:52:1d:e0:46:0a:1c:26:05:77:52:45:
36:c7:51:72:38:b0:71:1b:a1:66:2e:98:e4:50:75:87:f1:c8:
e0:44:11:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:12 2025 by rpki-client