Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa
File: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (raw, json)
Hash identifier: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=
Subject key identifier: C4:13:55:A7:2C:8E:38:BF:31:13:45:41:88:5A:4E:96:D6:36:97:84
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 019425FC020D5A026776BF5C78BBBE22116A
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa
Signing time: Thu 02 Jan 2025 07:47:39 +0000
ROA not before: Thu 02 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8280
IP address blocks: 185.82.37.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:02:0d:5a:02:67:76:bf:5c:78:bb:be:22:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jan 2 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c41355a72c8e38bf31134541885a4e96d6369784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:77:be:4e:06:aa:5b:c2:28:17:ff:41:e7:
d4:e4:8b:96:d4:f8:01:f0:78:e3:68:b0:22:a9:ad:
84:d8:8c:8c:1c:09:76:33:1f:d3:3d:70:3d:d1:39:
ce:1e:dd:28:72:9b:72:e3:a2:32:39:41:eb:26:b8:
8e:da:cb:1a:92:81:85:2d:7f:2d:83:fe:d3:73:c5:
71:7a:46:8f:fb:db:bb:61:c2:8a:c6:3a:26:54:c1:
f5:75:69:62:de:94:65:ac:23:2b:37:d3:81:8d:83:
20:b1:7e:4f:e4:c3:3f:62:b6:d2:69:ce:0e:f6:64:
dc:fc:80:ce:89:5a:c6:14:86:9b:79:c1:43:a3:52:
81:c5:49:2e:5e:1b:cd:8c:c7:9d:e4:00:16:9f:29:
1e:a9:39:59:43:2b:d2:28:55:79:90:5b:e4:a0:bd:
4c:f8:c4:df:de:87:5c:b3:f0:98:8c:f6:e3:3c:2c:
32:b8:50:a9:7b:d3:1c:fa:67:72:27:df:9f:82:df:
46:83:1f:30:87:09:70:0c:00:69:1d:bf:21:9e:05:
0c:cf:b8:96:b7:3c:c9:ce:b6:64:4c:8f:97:cb:e2:
dc:c0:82:df:ac:c2:10:af:41:69:60:cc:83:09:58:
ba:aa:20:d2:95:86:69:0b:a8:72:49:03:4c:1d:4e:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:55:A7:2C:8E:38:BF:31:13:45:41:88:5A:4E:96:D6:36:97:84
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.37.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e2:b4:ea:19:64:9e:cc:2e:11:ff:d3:d0:ff:06:2f:f9:54:
bd:86:68:a5:81:e9:d7:07:d1:5b:7d:70:77:22:45:07:7e:7e:
e7:c1:7d:b5:2f:b4:57:80:74:f9:1d:5c:6f:96:ce:d3:96:88:
7f:60:a4:b4:0a:d7:f6:c3:bd:3a:89:ad:b7:76:d6:09:0b:b9:
fa:3c:5d:fa:c6:60:c9:7c:6a:0a:f9:3a:01:13:c1:ef:34:67:
86:66:90:fb:fc:27:21:e6:20:ed:71:8b:8b:02:7a:a7:be:7d:
a4:86:6c:0a:66:eb:04:17:89:f1:8e:e3:da:66:62:48:da:74:
2d:e9:1e:ea:4b:ed:f2:67:9f:b3:00:7a:1b:93:a5:60:cd:74:
c1:9c:d0:d0:cb:48:c4:f6:3d:ea:80:7f:62:74:26:66:4b:58:
c4:13:4c:2d:5b:a8:ce:e0:2f:c2:0f:34:2f:2b:2f:39:ab:99:
db:76:82:01:86:25:36:c8:b9:34:18:a6:d7:55:6b:d2:95:4b:
60:eb:4d:32:ed:68:09:9a:16:0b:f3:e5:38:a9:d6:4d:d0:c4:
e8:a0:ca:c1:aa:03:4c:07:ee:a0:36:5a:89:53:6d:d5:72:11:
e2:65:1d:ab:56:ef:80:86:c5:15:5d:03:fe:16:ec:c3:b9:e0:
37:c0:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:00 2025 by rpki-client