Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xh90gjkdUREP6u7CqXiyIEvYxEA.roa
File: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (raw, json)
Hash identifier: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=
Subject key identifier: C6:1F:74:82:39:1D:51:11:0F:EA:EE:C2:A9:78:B2:20:4B:D8:C4:40
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194282419E592E3DFF830ACBE8FC6FFF609
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xh90gjkdUREP6u7CqXiyIEvYxEA.roa
Signing time: Thu 02 Jan 2025 17:50:42 +0000
ROA not before: Thu 02 Jan 2025 17:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 270172
IP address blocks: 5.102.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:19:e5:92:e3:df:f8:30:ac:be:8f:c6:ff:f6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c61f7482391d51110feaeec2a978b2204bd8c440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:47:5d:39:e3:c0:4a:a4:f4:94:30:1d:85:
0f:40:e5:a0:5e:6e:c7:36:04:92:37:68:15:bd:1b:
ae:15:1e:67:04:cd:84:83:54:bf:00:76:e9:23:f8:
8f:82:85:10:4d:b4:d9:e6:05:c1:cb:a1:f8:1e:03:
01:5a:2a:20:a8:d1:49:35:2d:0f:18:55:6c:7d:08:
64:cf:c2:02:0e:d7:d8:85:5d:fb:31:87:c4:30:95:
87:35:23:8d:33:10:22:7b:7c:e6:11:bf:bb:2f:f4:
d6:e1:54:d3:2d:87:81:0c:b6:99:89:94:83:a4:81:
ed:44:f6:3c:c0:43:25:40:fd:fd:64:c1:6d:af:7f:
a6:30:11:dc:6f:50:a7:43:c9:37:fb:42:f2:75:5c:
2f:da:60:ac:e2:f0:bc:af:e3:82:fa:f7:47:a9:99:
5a:ba:3f:33:ae:45:6a:2a:fa:54:1f:60:71:e3:8f:
a0:a4:64:76:d6:6d:d4:c5:4f:00:23:37:da:98:2b:
20:fc:c1:75:b8:93:b5:cc:a2:8d:00:b7:d7:41:e9:
2b:07:2d:c8:9f:88:27:c4:91:06:1d:14:30:ef:8c:
dc:fc:50:17:65:c8:51:4b:25:35:c1:65:4c:fd:5b:
84:9a:0b:b1:ac:da:34:ad:e0:75:71:24:73:b3:a3:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1F:74:82:39:1D:51:11:0F:EA:EE:C2:A9:78:B2:20:4B:D8:C4:40
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xh90gjkdUREP6u7CqXiyIEvYxEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.108.0/22
Signature Algorithm: sha256WithRSAEncryption
02:9b:fc:98:b2:c2:7f:e0:f3:55:f1:d5:1f:2f:86:b2:e4:a7:
aa:45:2a:6d:eb:4f:91:4b:60:26:57:a0:31:49:ef:01:61:3b:
68:e6:8e:b8:ac:c8:cc:f5:52:d0:e2:c3:07:ea:63:22:c0:12:
03:da:bc:29:1f:2a:7d:af:bb:fc:a7:54:e5:da:0e:ff:c0:44:
0a:2f:92:85:34:c9:aa:2e:0a:11:1a:c4:04:38:e5:a9:62:8f:
76:2f:a1:a6:7e:3d:5c:e6:0d:fb:c9:81:12:19:ef:7d:e6:80:
00:db:24:08:c0:8d:a5:be:b5:cb:50:8f:19:f5:83:96:c4:8d:
5e:f2:c1:12:3e:b1:31:87:5e:af:07:6d:a9:01:75:41:f5:8f:
e1:80:0d:3c:5d:25:7b:96:07:13:00:fa:62:4a:c6:e5:7b:c1:
01:c5:39:ba:04:0c:24:50:49:be:c5:78:eb:64:8d:32:e8:15:
78:ad:0b:75:80:de:7b:32:c3:ac:4c:7e:29:d7:a3:08:f6:26:
99:89:c6:40:2a:e1:d2:94:bd:e6:eb:cb:ce:e0:ea:0d:9b:0d:
75:4f:2d:76:6a:9a:8b:ac:d4:db:68:8c:dd:b2:fc:d5:74:08:
2c:52:11:60:8d:ab:ee:ac:ef:46:f9:f5:d1:46:1d:9c:46:dc:
d5:07:9c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:16 2025 by rpki-client