Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/XWsgGaUk-tCex2rEANvQhHC_vUw.roa
File: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (raw, json)
Hash identifier: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=
Subject key identifier: 5D:6B:20:19:A5:24:FA:D0:9E:C7:6A:C4:00:DB:D0:84:70:BF:BD:4C
Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial: 0194228D496BFE8BCC2DFC2A7EE3C6E8C8AE
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/XWsgGaUk-tCex2rEANvQhHC_vUw.roa
Signing time: Wed 01 Jan 2025 15:47:52 +0000
ROA not before: Wed 01 Jan 2025 15:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50078
IP address blocks: 193.104.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:49:6b:fe:8b:cc:2d:fc:2a:7e:e3:c6:e8:c8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Validity
Not Before: Jan 1 15:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d6b2019a524fad09ec76ac400dbd08470bfbd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:d5:22:0f:36:a3:51:47:51:45:bb:b3:07:
3e:dc:a1:02:76:64:42:d4:2a:4a:4d:f9:4f:ec:61:
b3:88:f4:94:d0:8e:e1:68:45:51:74:dc:f3:78:d7:
1c:32:5c:52:d2:a0:56:05:43:f0:20:1f:32:cd:9d:
49:74:33:e0:e8:1a:b5:34:bf:68:19:46:85:52:b6:
53:0a:10:91:ae:ec:33:7d:84:ff:04:f2:e9:d0:ba:
3d:39:85:46:9d:e6:7d:10:02:c8:48:c3:6f:f5:6e:
3d:df:13:e7:e3:90:32:6f:1d:63:6f:50:16:be:c1:
6e:2b:69:69:18:b1:a4:8f:cd:6c:69:58:83:86:3f:
6c:2c:84:69:72:34:6e:96:3c:fc:e8:f0:8a:f6:1f:
9d:e2:0f:30:79:ef:e8:d9:5a:42:21:57:30:0c:4e:
fe:83:4f:af:2b:57:3a:d5:af:2e:db:2c:a4:f7:b7:
a7:65:8e:45:fe:8b:5d:f1:b6:77:b3:c3:3d:9e:0a:
31:35:cc:9b:22:42:39:99:8c:e4:2f:6b:33:32:cc:
98:89:ed:93:ab:09:d8:b3:3b:fe:ed:f0:fa:2f:ec:
99:9e:1b:d8:97:e1:71:aa:6f:10:28:3e:78:bc:2a:
ea:50:d9:1b:98:8e:d2:b0:c2:8a:f2:22:e1:87:35:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6B:20:19:A5:24:FA:D0:9E:C7:6A:C4:00:DB:D0:84:70:BF:BD:4C
X509v3 Authority Key Identifier:
keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/XWsgGaUk-tCex2rEANvQhHC_vUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.89.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8b:22:8c:45:75:40:5f:81:89:2b:1f:f5:e7:57:21:1b:0c:
2c:1b:a7:08:17:b3:da:98:8d:e8:07:63:3f:ff:03:0f:4a:61:
13:ad:fb:be:fd:9b:14:f9:b7:c2:1e:a0:b1:b1:4c:02:5f:d6:
f4:0b:92:96:74:b9:68:5a:78:1b:42:d4:22:ec:a6:1c:23:4f:
7f:a2:af:bd:e5:cb:bb:56:8f:2b:fd:49:ae:d1:68:75:e2:ef:
50:63:e4:9c:68:3d:8d:77:3e:39:b7:fa:d7:39:03:fe:09:50:
35:94:0a:34:94:28:ef:d4:78:02:66:3a:c9:c2:e0:45:71:d0:
08:27:13:1c:f1:61:05:0e:5f:d4:e2:62:64:b0:21:dd:9d:7f:
07:11:d7:e8:ff:38:0f:08:93:78:bd:e8:19:72:c2:ef:71:38:
6c:00:0b:23:fb:28:b2:dd:0f:34:2d:3b:df:8c:5b:f7:91:a8:
38:18:33:d4:32:13:72:e4:54:77:66:f1:9e:65:5b:2b:9d:79:
c7:6e:c3:55:a2:df:7a:d7:f4:db:16:3a:c2:49:05:36:32:d1:
89:c6:22:17:2f:63:48:85:86:fa:11:61:24:b7:78:31:8f:1a:
13:70:93:45:04:67:79:f4:61:21:22:73:ee:e4:c5:0b:09:51:
84:88:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:06:47 2025 by rpki-client