Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/xW2URwmy3MAc43ukfcbqMYMuxdw.roa
File: xW2URwmy3MAc43ukfcbqMYMuxdw.roa (raw, json)
Hash identifier: Ma/n0ismeTjhAebqRYXqWhimU+dr8eW7Fszdn7DlAoU=
Subject key identifier: C5:6D:94:47:09:B2:DC:C0:1C:E3:7B:A4:7D:C6:EA:31:83:2E:C5:DC
Certificate issuer: /CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
Certificate serial: 0194228D7E9F010FAD57AA1343FBDC81CFBF
Authority key identifier: 95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/xW2URwmy3MAc43ukfcbqMYMuxdw.roa
Signing time: Wed 01 Jan 2025 15:48:05 +0000
ROA not before: Wed 01 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208719
IP address blocks: 185.127.240.0/22 maxlen: 24
2a03:9960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7e:9f:01:0f:ad:57:aa:13:43:fb:dc:81:cf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588390cf321dc43ce3ac0bc8fb09554d5fc2e77
Validity
Not Before: Jan 1 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c56d944709b2dcc01ce37ba47dc6ea31832ec5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:56:b7:72:cc:a5:fb:54:86:c5:24:3a:20:
36:53:ec:6a:00:65:5f:5c:ad:a9:d7:05:2c:41:2f:
4f:58:7a:49:bc:6a:91:be:17:69:dd:79:b9:4f:60:
7c:3d:73:e4:59:88:59:4b:92:52:57:7d:fd:9e:45:
f1:1e:8f:37:80:63:27:74:49:1e:c8:ab:41:3c:2b:
40:8f:6f:49:b8:99:dc:ee:96:5b:ed:6f:7d:1c:a8:
e1:08:9f:e3:fd:53:61:9e:60:23:b8:88:e1:fd:75:
88:03:43:ad:3e:33:72:40:f5:0a:dc:43:4f:45:0b:
b4:35:98:c0:d0:51:9e:15:25:f7:d5:97:5a:4f:aa:
7c:a4:e8:c5:ef:9a:2d:a1:ce:a8:49:34:ee:0a:03:
a0:bb:42:20:20:c7:d8:bc:6e:c8:33:de:c7:94:23:
11:56:f5:e9:cf:47:5d:cc:04:7a:aa:56:f4:c5:8e:
b8:b7:b6:d4:2a:a1:15:84:fb:38:99:9e:12:08:00:
3b:ef:d7:09:df:41:02:36:81:05:4d:d0:99:b7:fd:
67:e0:3e:02:fa:26:b5:87:6e:e4:9f:a8:2e:b2:fe:
93:0a:89:4d:68:be:9b:6e:cc:89:b9:6b:6a:c2:ed:
07:80:ab:d1:32:c7:bb:23:51:ae:75:c1:2b:83:12:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6D:94:47:09:B2:DC:C0:1C:E3:7B:A4:7D:C6:EA:31:83:2E:C5:DC
X509v3 Authority Key Identifier:
keyid:95:88:39:0C:F3:21:DC:43:CE:3A:C0:BC:8F:B0:95:54:D5:FC:2E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/xW2URwmy3MAc43ukfcbqMYMuxdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1cf6e4-97c5-4f7f-84bb-4ff048e9ae90/1/lYg5DPMh3EPOOsC8j7CVVNX8Lnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.240.0/22
IPv6:
2a03:9960::/32
Signature Algorithm: sha256WithRSAEncryption
15:bc:30:91:80:6f:d0:af:6d:35:42:9e:31:fb:5f:7c:4c:ba:
d4:da:04:14:da:86:72:c9:8e:8f:ba:a1:f7:1a:47:4e:5b:be:
48:e6:40:c1:c7:07:11:d9:39:48:3c:2c:ea:4a:a3:8f:7b:22:
4b:fd:07:47:62:26:b6:05:0a:d9:d1:ac:a0:1e:a5:6a:5c:88:
c8:c2:03:18:fd:ff:21:3a:e7:d0:17:e1:8d:f7:ac:91:b5:95:
77:95:a8:ee:40:a2:64:36:f1:87:fe:c2:1e:ce:2a:36:12:3b:
40:ad:60:86:a7:50:fa:fa:24:f1:7e:6f:11:c6:35:e8:be:7b:
c9:a2:c9:fb:f4:b3:4c:68:10:3a:9f:79:b7:df:de:4d:45:e4:
96:9f:f1:72:30:d9:8a:21:5c:6f:70:bc:82:af:28:17:80:43:
eb:d0:6c:68:15:58:fe:49:ba:86:52:fe:91:7a:dd:94:c8:e1:
e4:86:de:0b:a6:a4:c3:d0:f6:1f:16:3a:6a:5f:39:2d:8b:76:
c7:bd:a9:ae:be:85:3d:c3:9a:59:70:31:95:9b:15:51:3d:83:
27:3e:9f:b0:08:6f:6c:ec:42:cd:21:6c:54:4b:d7:35:43:bb:
4e:70:5c:0f:42:ea:44:53:87:8d:3e:a8:a7:9a:37:a9:9c:e3:
f2:91:52:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:00 2025 by rpki-client