Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/xujMYWDLMyhqIWgA4xHOXbda_Ew.roa
File: xujMYWDLMyhqIWgA4xHOXbda_Ew.roa (raw, json)
Hash identifier: PTpzQ7Ys6HXSZaAHLbMSGjofVeB7J4xubWwZPF+3a7o=
Subject key identifier: C6:E8:CC:61:60:CB:33:28:6A:21:68:00:E3:11:CE:5D:B7:5A:FC:4C
Certificate issuer: /CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Certificate serial: 01942521FAFAD1EF362F7956E8A23B8264B7
Authority key identifier: 3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/xujMYWDLMyhqIWgA4xHOXbda_Ew.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29555
IP address blocks: 81.91.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fa:fa:d1:ef:36:2f:79:56:e8:a2:3b:82:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5dc2ba5942e04fdd8ba99516a1b93b1e4f9624
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6e8cc6160cb33286a216800e311ce5db75afc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:22:8c:9c:cf:13:35:d5:82:c1:84:4b:4b:
35:15:39:9d:c0:42:90:53:ab:74:f1:95:91:31:09:
54:1d:7f:cf:b4:62:dc:e3:f2:a1:69:77:f4:9a:65:
73:72:43:24:c2:f9:18:5d:67:7b:71:ad:ec:c1:ef:
64:38:23:c4:01:d8:4e:a0:8c:6a:c3:8b:f4:39:91:
b5:eb:10:43:02:d5:22:32:51:ed:16:8e:9a:ec:e0:
80:35:31:4f:b2:b2:48:8e:32:35:27:e1:23:51:bc:
fc:7f:17:4d:63:ae:36:03:94:3b:6e:82:d8:f5:6c:
3b:7c:57:64:97:04:dd:c2:84:a9:f3:e4:f4:0b:85:
89:cc:b3:53:d4:62:df:83:62:4b:7b:b6:53:45:fb:
c9:2a:7e:2b:1c:fd:63:2f:dc:c5:27:73:59:9e:b6:
4f:11:31:ac:14:d7:0c:0b:18:44:ef:08:17:26:4c:
ba:25:0b:e2:67:b1:fa:48:dd:c4:a9:d1:36:8c:99:
21:8c:d0:4d:44:13:b4:b6:07:7a:3b:50:77:1c:29:
07:aa:77:99:40:f5:a5:2b:a5:04:60:ce:2d:9e:0b:
1d:2a:99:d5:33:9e:31:53:d8:fd:33:a1:d5:fd:af:
0d:03:86:9d:9e:7c:f2:7b:a9:67:68:bd:15:72:89:
f8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E8:CC:61:60:CB:33:28:6A:21:68:00:E3:11:CE:5D:B7:5A:FC:4C
X509v3 Authority Key Identifier:
keyid:3A:5D:C2:BA:59:42:E0:4F:DD:8B:A9:95:16:A1:B9:3B:1E:4F:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol3CullC4E_di6mVFqG5Ox5PliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/xujMYWDLMyhqIWgA4xHOXbda_Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/714f54-fa75-4091-8c0b-9c15fbd5ee5e/1/Ol3CullC4E_di6mVFqG5Ox5PliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.188.0/24
Signature Algorithm: sha256WithRSAEncryption
41:88:bb:9d:ef:99:55:9d:9d:96:85:b1:67:7b:af:9d:a4:05:
85:d9:d5:22:f1:ab:6b:82:de:2e:74:9c:59:0a:e4:96:4c:3b:
ef:80:81:b6:5b:b2:2b:a1:d4:1d:b1:45:76:59:6c:e9:a0:43:
0f:10:18:9c:15:b9:ac:2b:e6:fe:9d:9e:53:3d:23:f6:2a:8f:
cd:f2:ae:e4:84:2d:7f:5f:2f:fb:19:3a:02:71:94:7b:5d:5f:
29:f4:9d:fb:5a:07:48:fc:e6:ac:c2:a8:21:73:0e:b7:c8:cc:
3e:d3:37:38:14:4c:43:83:b1:e9:6a:c3:2a:d7:6e:f1:84:91:
7c:b9:28:76:d2:e5:48:6a:43:af:60:7e:96:8e:fa:85:49:db:
c6:04:3f:e5:b6:11:4e:dc:48:6c:13:58:2a:b7:74:38:96:81:
04:b7:b4:86:af:44:62:d0:c5:fd:3f:10:89:40:d4:ea:ee:54:
89:83:25:19:e1:73:67:5e:f5:62:b8:99:5d:6f:bd:e8:b8:30:
94:78:28:09:27:0c:ce:4e:ca:a1:ae:dd:03:79:e1:da:88:86:
95:11:bd:76:08:ae:1d:0e:53:15:dd:c1:82:85:cf:c0:d9:bf:
d4:e9:c7:05:9a:ab:52:66:f2:aa:bd:66:a5:09:7c:3b:29:7e:
fc:93:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:29:52 2025 by rpki-client