Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa
File: Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa (raw, json)
Hash identifier: 6XHRFIs5VNl1aw2+x8Rz4IQniQIfYw9CyiplPPtk5bE=
Subject key identifier: 5F:38:9B:F0:07:C4:62:A6:36:70:79:AE:B8:CF:B0:C3:FC:39:B1:6D
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 019425211E22F44ECB823A86C6B7B7BDEE07
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa
Signing time: Thu 02 Jan 2025 03:48:34 +0000
ROA not before: Thu 02 Jan 2025 03:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210546
IP address blocks: 178.250.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:1e:22:f4:4e:cb:82:3a:86:c6:b7:b7:bd:ee:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 03:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f389bf007c462a6367079aeb8cfb0c3fc39b16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ef:a1:fa:f4:75:10:8e:2b:4e:c6:e7:a6:68:
86:2c:b1:2b:68:06:8f:e7:77:fb:d7:2f:6e:20:c1:
e0:df:a8:bd:25:e7:db:94:18:5f:2b:7a:7f:e4:7e:
17:e5:17:91:c3:7c:7f:c0:fd:57:cc:11:60:12:e0:
df:03:ac:9f:b4:8d:69:d8:85:e8:32:99:c0:ec:dd:
ed:fa:98:78:c4:bb:57:5e:b9:8c:70:58:74:67:e4:
b5:b3:7d:43:ea:22:f2:25:e1:dd:72:9c:fa:64:e5:
15:a9:13:f1:91:6f:1b:ed:03:89:c0:ff:2f:00:26:
9f:f1:bd:24:bc:8a:1c:72:cc:e0:8d:bf:94:7b:ff:
b0:b7:73:00:dd:9a:a1:71:2f:c2:34:e1:ed:fe:0c:
69:ff:2b:ca:3a:55:f0:54:6a:3b:2d:bc:34:39:44:
17:97:38:6a:fd:5f:96:2c:89:a5:d7:b8:95:e1:42:
0f:85:66:4c:11:99:3f:42:ee:28:f5:54:10:33:ba:
91:72:13:19:f1:0d:62:b3:dc:50:c5:43:b8:ae:fe:
d4:3f:81:09:91:52:46:6e:f8:12:77:2f:19:a5:a2:
22:2c:ad:5f:9b:02:fd:86:e9:05:e3:d1:aa:01:e7:
a6:5f:74:14:19:27:cb:e4:a7:d5:6e:c2:d8:60:b3:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:38:9B:F0:07:C4:62:A6:36:70:79:AE:B8:CF:B0:C3:FC:39:B1:6D
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:37:b2:48:bd:9c:fb:2f:f2:f6:e8:32:e1:6c:e3:58:0b:03:
20:16:9c:df:55:34:97:21:ff:3f:58:e4:4e:c4:eb:5d:4e:16:
fc:68:3c:7d:5c:9d:50:c0:98:8e:a8:65:de:b1:c6:2c:6d:b9:
91:fc:96:f8:2c:80:d3:86:23:26:6e:a7:0f:d9:78:35:d4:5b:
68:a8:fb:1f:7c:c5:9e:e3:42:7a:f6:93:6a:d8:50:04:11:0f:
22:31:d2:47:a2:d7:e4:74:da:d4:88:b4:31:1d:3f:0b:6d:9c:
d9:be:4b:bc:d7:c7:38:63:92:75:78:72:26:e6:09:9b:db:5b:
1c:85:8a:df:45:a6:38:75:53:72:3b:c4:58:1f:cf:c7:58:88:
78:fb:2e:7b:eb:1f:04:84:c8:81:03:3d:45:ce:12:8e:9a:c8:
51:d6:f8:73:57:62:60:7d:3a:02:0e:11:b3:af:4e:50:ab:66:
85:e4:dc:de:d2:6e:90:98:82:ee:de:a6:7e:6d:67:ab:bc:4f:
c3:4c:fc:af:75:ca:ce:2f:7e:e1:3b:34:cc:ca:11:7b:ea:86:
01:0f:4e:ce:ba:a3:21:1a:01:cc:61:85:d2:45:6f:c2:91:fd:
2c:41:72:3b:28:93:38:37:d3:03:81:c5:5c:0d:df:6d:df:8a:
ef:a5:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:15 2025 by rpki-client