Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa
File: xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa (raw, json)
Hash identifier: IWeEq50Ry3wHX8kf3jXxRipWlWHUzhkegAPH2nDXTxI=
Subject key identifier: C5:97:85:3B:96:70:97:9C:44:17:52:F2:69:2A:74:DD:1E:7F:EE:38
Certificate issuer: /CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Certificate serial: 01941F8C1B1EFB110A755F1E6D624B4A179E
Authority key identifier: D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34858
IP address blocks: 91.195.100.0/23 maxlen: 23
195.238.246.0/24 maxlen: 24
2001:678:bf4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1b:1e:fb:11:0a:75:5f:1e:6d:62:4b:4a:17:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f700eeb05274b31dc1daf30cd7c81310ab452d
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c597853b9670979c441752f2692a74dd1e7fee38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bd:84:6a:89:8c:9d:e9:75:d6:65:7e:42:bd:
90:83:35:85:03:6e:c7:12:eb:ca:2e:a5:a5:cb:2f:
b8:d7:ce:56:fb:a2:b1:af:3d:55:55:70:d8:00:65:
08:60:bb:6c:1b:43:f5:1a:f8:86:83:4a:b1:67:f8:
7b:5d:9f:12:c2:89:ff:6d:9f:a5:c5:ee:95:26:c1:
ff:4a:b7:11:10:da:9c:f8:43:28:b0:a5:51:c6:48:
11:3e:db:75:b2:1a:10:24:e1:c3:52:d0:76:27:b4:
97:c2:2f:aa:6e:cf:81:24:83:4a:93:ea:bd:30:04:
aa:43:84:2b:08:60:13:47:92:1f:69:dc:58:df:aa:
43:b7:78:1d:fa:d7:2f:34:03:3f:28:e2:81:95:af:
91:ec:16:00:7f:fc:20:24:3f:28:08:fe:40:20:82:
9b:3e:9e:00:07:62:37:2f:3c:75:56:ec:eb:2f:c8:
4f:e6:a1:49:6d:af:ca:ee:4e:bf:d1:4e:7e:f2:ee:
11:fc:1c:5a:22:ef:a8:f1:8a:ff:c8:93:c2:4e:34:
9b:bb:0c:8c:ef:2d:2b:e4:41:a5:9c:2f:f4:11:e7:
86:43:25:84:b9:b8:be:e0:5f:e1:53:90:57:2a:82:
f0:6f:7a:40:01:06:0b:d6:f1:8f:d8:fe:b0:ba:ed:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:85:3B:96:70:97:9C:44:17:52:F2:69:2A:74:DD:1E:7F:EE:38
X509v3 Authority Key Identifier:
keyid:D8:F7:00:EE:B0:52:74:B3:1D:C1:DA:F3:0C:D7:C8:13:10:AB:45:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PcA7rBSdLMdwdrzDNfIExCrRS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/xZeFO5Zwl5xEF1LyaSp03R5_7jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b08a3a-d6b9-4a5d-9d37-371b9074887f/1/2PcA7rBSdLMdwdrzDNfIExCrRS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.100.0/23
195.238.246.0/24
IPv6:
2001:678:bf4::/48
Signature Algorithm: sha256WithRSAEncryption
30:05:c1:77:55:57:e1:d0:9b:cd:d4:89:94:e1:e8:de:22:3a:
68:9c:84:ad:a8:dd:56:6f:a3:02:ba:1b:44:4d:54:e0:61:40:
70:5a:ad:bd:97:90:ed:e0:b4:26:99:a2:6c:5c:18:b7:6a:a3:
b0:ad:cd:9e:6b:f4:c4:52:9f:61:2a:c1:b3:c0:fe:f4:58:16:
93:34:65:c3:c3:ef:28:7a:33:7d:91:9f:9c:75:78:f8:e8:7b:
c9:77:e5:f2:a0:5b:0d:c4:c5:d6:5e:b6:5d:88:e9:07:1b:cd:
9e:47:54:1b:72:26:84:d9:3e:8a:c9:23:7a:88:02:f2:79:59:
f9:53:b2:12:f2:96:56:0f:b0:1d:5c:3e:11:5e:a5:5a:62:3f:
8d:f7:8f:b6:a9:b6:e0:e4:24:35:8d:f2:fd:7f:9f:88:ed:f1:
3b:d6:05:e9:87:c6:8d:2b:a3:d1:18:e5:eb:d0:66:54:4d:e3:
91:77:e1:6e:d1:1d:4c:12:e8:1c:82:e6:b6:85:a6:f4:36:ed:
c3:14:e3:80:a0:d2:6b:f7:99:62:fe:53:18:a7:52:05:6e:6b:
db:32:d3:60:6b:b6:ab:30:3d:8f:f1:b5:31:b4:a5:7a:6f:cf:
34:56:78:cb:f0:ed:53:3e:21:9f:d3:ee:89:21:de:00:f6:4c:
50:b6:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:26:03 2025 by rpki-client