Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa
File: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (raw, json)
Hash identifier: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=
Subject key identifier: C6:2E:69:0F:CE:C7:EE:A9:9B:8C:4B:C9:E0:32:D0:41:D5:88:1C:14
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 019589AEFE977099244E019F233046702947
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa
Signing time: Wed 12 Mar 2025 09:28:21 +0000
ROA not before: Wed 12 Mar 2025 09:28:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 145.79.32.0/21 maxlen: 21
145.79.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:ae:fe:97:70:99:24:4e:01:9f:23:30:46:70:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Mar 12 09:28:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c62e690fcec7eea99b8c4bc9e032d041d5881c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:7d:17:25:f3:fc:d1:d0:e4:5f:6e:e0:8e:
f9:a6:29:85:02:b2:bd:c0:29:52:e2:76:7f:28:2c:
e2:9d:65:04:98:0b:7d:7e:11:17:2d:c1:c4:c5:2b:
93:df:d6:51:a7:35:6e:12:d0:7a:dc:ca:41:c8:b0:
eb:32:f0:0b:d2:b6:d1:7b:41:e1:46:1c:93:23:4e:
a6:e2:99:b0:ae:80:a6:62:b2:4b:f2:f5:57:99:83:
9b:9a:b7:97:13:5c:eb:e3:78:78:14:b7:98:86:cc:
20:99:71:72:c8:f9:fc:67:26:b5:20:9e:cc:45:5a:
e0:be:ef:0a:70:05:b2:82:a3:f6:75:eb:d7:84:c6:
d1:b8:31:65:94:fd:13:82:dd:24:79:7c:a1:01:50:
f0:52:70:58:fb:fc:05:40:cf:5e:d4:81:2a:0a:1f:
5f:16:33:e8:ca:28:e0:89:d1:6b:80:5b:b1:78:4a:
f3:92:a5:b5:f0:2c:51:c0:10:57:58:dd:94:c3:39:
a1:bc:99:dd:c3:76:f5:1e:4c:7b:9b:ff:24:75:b2:
5e:1a:36:63:1d:eb:35:80:50:5e:b6:c7:e5:95:2e:
b4:78:bf:c3:d4:35:3a:24:1d:9a:90:12:98:2d:b0:
56:de:e5:4d:79:e4:4a:68:b1:45:b8:09:30:90:dc:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:69:0F:CE:C7:EE:A9:9B:8C:4B:C9:E0:32:D0:41:D5:88:1C:14
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.32.0/21
145.79.200.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:a6:37:08:0b:ce:c4:5e:fe:4d:2b:ff:84:54:0b:9c:f6:40:
3c:2d:2d:4f:5c:91:67:1e:3a:20:77:e9:9e:9d:42:a6:7b:a8:
e5:04:92:68:0a:dc:82:f2:e9:0e:c7:5f:e8:ed:f2:b2:74:c8:
91:d9:b7:7c:23:86:e4:e1:fa:a7:9e:54:51:43:6b:9d:d6:ba:
c5:7e:97:95:7f:41:bf:bb:9f:ed:77:4f:8b:85:2a:5d:29:84:
e9:86:92:ed:81:c9:54:12:44:e5:97:13:d9:90:ce:d0:61:81:
72:8e:3c:c3:fb:42:33:29:4b:98:5a:da:77:ce:62:22:5d:08:
dc:66:99:e3:18:6b:df:cb:73:72:86:ee:f3:f2:8b:a4:72:75:
da:ef:61:2a:0e:93:bb:17:2c:c1:18:97:af:a5:e7:c2:a5:2a:
7b:dc:4b:0d:c1:ff:54:8c:34:e2:7f:a0:da:96:2e:5c:ad:24:
6b:74:51:15:2a:e2:f3:f8:85:f1:cb:25:6a:69:80:8d:a4:8e:
37:3b:92:b4:75:e9:1d:73:4e:90:0d:d4:76:a4:77:11:73:70:
0c:b4:2d:64:82:3c:af:b1:9a:08:d0:8e:64:60:57:19:3c:8e:
07:af:c4:73:70:c0:1b:3a:b5:81:7d:fc:49:33:b5:80:e5:04:
0a:ff:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:44:02 2025 by rpki-client