Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/XNxC8Cnro96xLXYJUGbzstZIBBc.roa
File: XNxC8Cnro96xLXYJUGbzstZIBBc.roa (raw, json)
Hash identifier: u42CQkmyXOR/Lb8UIj62kKWGGqrr+TV9Tc/umz6JNsc=
Subject key identifier: 5C:DC:42:F0:29:EB:A3:DE:B1:2D:76:09:50:66:F3:B2:D6:48:04:17
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01950F2D50182E3DB8DACC088A9E8583BA28
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/XNxC8Cnro96xLXYJUGbzstZIBBc.roa
Signing time: Sun 16 Feb 2025 14:33:02 +0000
ROA not before: Sun 16 Feb 2025 14:33:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210717
IP address blocks: 2a03:5840:140::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:2d:50:18:2e:3d:b8:da:cc:08:8a:9e:85:83:ba:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Feb 16 14:33:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cdc42f029eba3deb12d76095066f3b2d6480417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:62:43:db:7c:28:4e:34:2f:7f:5d:00:d5:
20:2f:8e:7d:b3:68:c8:df:e5:8b:1e:61:0e:13:bb:
dc:45:0d:bb:4b:92:4b:8b:38:b0:05:2b:c8:a1:3f:
0d:42:53:09:58:87:4f:9c:b5:5a:fa:ab:2b:e8:0b:
84:8f:6b:ce:f8:c2:84:3a:24:5b:b9:b6:dd:aa:2b:
92:7c:b8:46:92:60:c5:22:6a:ed:fa:af:ee:8f:52:
0b:4f:96:48:28:73:30:3f:55:f6:db:53:e7:53:ab:
5e:db:b8:9e:67:c0:42:6d:5c:37:d0:20:40:1d:ea:
94:78:91:64:a9:14:99:9b:99:f2:b7:a0:86:ce:e5:
d2:f0:51:09:a5:da:69:36:d4:c2:fd:fd:ae:46:ae:
47:df:aa:8f:c4:b9:e1:3e:1d:b1:d2:35:39:ce:ef:
a5:d4:1b:20:30:b8:57:68:5f:4d:6b:6d:47:b1:99:
58:7c:5b:b7:4a:58:b0:ff:2b:ea:72:b0:07:9c:b9:
49:93:ce:2f:85:07:2c:28:6c:5b:0a:02:9e:18:03:
f4:33:4d:58:bb:92:70:73:b2:26:f8:1e:e7:ec:3f:
d0:ff:27:73:82:70:75:c9:4e:14:89:2d:44:36:f2:
49:b0:e3:a2:37:26:d0:ce:bc:79:c0:fc:22:70:f0:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DC:42:F0:29:EB:A3:DE:B1:2D:76:09:50:66:F3:B2:D6:48:04:17
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/XNxC8Cnro96xLXYJUGbzstZIBBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:140::/44
Signature Algorithm: sha256WithRSAEncryption
7e:f8:d5:a5:2b:0b:10:f7:80:50:f7:7c:bd:80:e5:d4:78:e9:
d1:9b:18:25:86:17:64:30:4a:9e:77:aa:f9:bc:22:c3:64:ff:
93:fd:38:c4:7c:fb:3a:88:39:45:9f:e6:1d:8b:be:27:57:ac:
ea:b0:c9:67:cf:c5:b5:45:f3:23:d4:af:51:35:bb:04:dc:ac:
2c:11:c2:95:3f:3b:b4:5a:71:26:6c:07:fb:fb:18:4d:d4:28:
f4:13:d7:8f:3f:9d:99:f8:e5:b9:5e:e9:e9:eb:fe:84:02:e6:
34:7b:0f:e6:22:f2:bc:86:3f:a6:62:76:6a:19:7e:c3:74:57:
4a:67:9b:1f:46:37:a9:88:59:d5:40:4f:5c:45:7e:cd:25:6b:
09:c9:09:0c:d2:65:bb:54:70:fc:16:7e:8f:6b:58:17:eb:74:
1f:54:d9:d8:89:59:d4:09:c0:9b:8a:ad:97:f6:0e:9e:49:b4:
ba:bd:20:de:02:5c:07:48:11:9b:d8:6d:98:f8:b9:7d:40:ad:
fd:59:6d:f6:49:55:73:64:2d:ce:88:1c:e6:7d:c0:12:86:7f:
59:ad:ad:e5:8c:a0:c4:ee:27:e0:9d:6c:ee:ee:8b:15:9f:67:
41:c4:75:50:6b:4c:92:88:f5:fe:20:36:23:70:a3:8b:06:71:
82:f1:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:06:40 2025 by rpki-client