Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa
File: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (raw, json)
Hash identifier: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=
Subject key identifier: 7D:72:F4:B9:A4:7C:10:64:DF:82:3C:0D:78:B3:DF:91:1F:97:61:9D
Certificate issuer: /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial: 019428272F6A61D7542D8B654DD0401AE828
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa
Signing time: Thu 02 Jan 2025 17:54:04 +0000
ROA not before: Thu 02 Jan 2025 17:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51545
IP address blocks: 91.217.245.0/24 maxlen: 24
185.155.104.0/24 maxlen: 24
185.155.106.0/24 maxlen: 24
185.155.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:2f:6a:61:d7:54:2d:8b:65:4d:d0:40:1a:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Validity
Not Before: Jan 2 17:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d72f4b9a47c1064df823c0d78b3df911f97619d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:83:06:f5:43:b5:2e:ea:65:ed:16:ff:b8:
ad:ea:ea:4a:81:e4:1d:86:ed:a3:f7:67:f3:b4:8a:
1c:01:b5:21:45:6f:13:49:54:af:84:a2:ff:6a:13:
00:1e:6e:70:12:f4:e1:16:60:d8:92:b3:5c:bb:be:
3d:98:fa:52:f7:18:31:12:cb:74:a0:46:4c:b0:c7:
a3:8a:7d:c3:c0:ff:9e:91:9a:c8:82:bf:e4:9e:c1:
ec:8d:86:33:1a:5f:b9:5a:25:62:1a:26:52:10:86:
23:5c:6b:91:9b:2b:25:93:fb:a6:7a:aa:33:7c:56:
51:ed:f6:ab:b8:05:a2:8c:d0:c1:ec:4c:b1:4f:af:
2c:0c:77:af:39:21:2a:49:f8:4f:9c:24:69:cd:30:
fd:01:5f:34:82:3d:5e:c0:c6:83:65:9f:06:73:47:
6e:4c:c2:82:b3:d6:cc:7c:4f:58:f4:5d:2d:07:eb:
42:83:fe:9b:37:fe:50:0d:e7:cc:22:ca:2b:17:e3:
30:cd:7c:08:57:4d:b6:0c:e2:fc:af:11:9e:01:3c:
1c:22:e3:8a:56:62:c6:94:94:2d:a7:f8:74:c4:13:
58:ff:54:c1:ed:eb:e1:00:4f:ea:13:58:05:64:91:
4e:fd:fb:e9:6e:f3:7b:b6:96:5f:24:65:e5:d9:f6:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:72:F4:B9:A4:7C:10:64:DF:82:3C:0D:78:B3:DF:91:1F:97:61:9D
X509v3 Authority Key Identifier:
keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.245.0/24
185.155.104.0/24
185.155.106.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:86:ea:50:fb:52:54:11:f6:e2:9e:e8:aa:d5:45:71:41:5a:
17:a7:55:0a:10:29:05:d1:0b:23:50:28:e7:0b:35:08:0d:4c:
5b:2f:d9:47:ef:3c:30:0a:cd:ec:92:d3:a1:a6:9c:64:bb:3f:
0c:2b:ba:9f:5c:ef:87:87:15:3a:83:e3:8e:69:fb:22:35:d6:
f0:78:94:16:09:04:f4:b1:2b:5b:a0:8c:ae:fb:dd:3d:f9:cb:
e6:3b:04:8a:4c:ef:dd:18:6d:58:36:96:ea:cc:71:6e:a9:c8:
f0:67:e3:be:61:72:d9:0e:b1:28:1d:2a:f3:96:0e:42:ef:43:
3c:7d:f9:e9:47:03:40:d0:4e:ae:aa:70:bb:99:34:df:49:c1:
08:4c:e9:fb:b8:66:d1:af:c2:2b:33:a7:c8:53:59:ef:fc:6d:
86:d8:45:d4:5c:22:13:df:c4:c3:6b:44:eb:5f:ea:f8:c1:bd:
c9:67:57:3e:88:be:de:9e:5f:43:04:e1:58:ae:f3:94:48:c4:
58:c2:df:69:af:d4:a8:e7:bb:c8:2f:99:37:74:f4:54:72:73:
0b:36:3c:8e:ca:a0:61:e5:05:9c:95:34:bb:d9:d1:12:57:cb:
f9:14:ea:09:82:31:65:c6:33:a1:11:d0:9a:44:c4:6b:0d:72:
23:a2:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:39 2025 by rpki-client