Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/XGMXPH0k8-5rXAApgK_FwiIHVbw.roa
File: XGMXPH0k8-5rXAApgK_FwiIHVbw.roa (raw, json)
Hash identifier: LETl7Q2SLIjIADceXGkwohhIwnRaE0pssDZ20NTpfqo=
Subject key identifier: 5C:63:17:3C:7D:24:F3:EE:6B:5C:00:29:80:AF:C5:C2:22:07:55:BC
Certificate issuer: /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial: 018CC7951A5924DAD097E5A67BBB9058F210
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/XGMXPH0k8-5rXAApgK_FwiIHVbw.roa
Signing time: Tue 02 Jan 2024 00:31:26 +0000
ROA not before: Tue 02 Jan 2024 00:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47875
IP address blocks: 94.124.35.0/24 maxlen: 24
94.124.38.0/24 maxlen: 24
94.124.36.0/22 maxlen: 24
94.124.36.0/24 maxlen: 24
94.124.32.0/22 maxlen: 22
94.124.32.0/24 maxlen: 24
94.124.37.0/24 maxlen: 24
94.124.32.0/21 maxlen: 21
94.124.33.0/24 maxlen: 24
94.124.34.0/24 maxlen: 24
94.124.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1a:59:24:da:d0:97:e5:a6:7b:bb:90:58:f2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c63173c7d24f3ee6b5c002980afc5c2220755bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:06:a8:43:4e:14:93:34:f8:1c:e7:04:43:29:
93:dc:f3:57:7e:27:60:02:83:0a:32:a1:c8:9a:69:
b1:c9:a4:ed:1c:35:45:b8:4c:5c:a0:32:e0:ba:33:
d1:fd:45:3b:c8:fe:85:c1:a8:db:83:a5:d4:fc:50:
c3:b2:6b:74:27:2a:7e:2b:5f:2e:69:c2:56:9b:f6:
59:8c:41:b3:cc:ac:78:e7:2a:b9:73:b9:ff:3b:f1:
db:e6:52:18:be:71:72:dc:47:06:4b:68:e5:98:eb:
53:36:f6:c2:de:42:fa:88:3e:27:9b:2c:c4:af:77:
f9:40:c5:dc:2e:6a:7f:ca:d5:86:51:30:13:1a:d2:
e8:c2:ed:92:1e:44:a1:98:f4:69:cd:09:09:e2:44:
ae:07:ab:85:6b:76:b3:b6:7a:70:1e:3f:bb:60:48:
61:64:8d:b5:82:6f:17:1f:21:9c:aa:6f:48:b3:c9:
a5:07:21:2a:6f:c6:98:67:12:ff:31:a4:28:b9:bf:
da:42:00:9d:f6:24:da:a4:e8:06:23:95:01:37:d8:
ab:33:38:66:2f:27:3a:d8:04:c8:09:be:ce:a9:d3:
bb:d9:96:ee:ee:54:c1:a8:83:34:83:ab:74:ad:ef:
70:f7:dd:a9:32:b2:ad:22:09:b8:54:f1:63:c6:d2:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:17:3C:7D:24:F3:EE:6B:5C:00:29:80:AF:C5:C2:22:07:55:BC
X509v3 Authority Key Identifier:
keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/XGMXPH0k8-5rXAApgK_FwiIHVbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.32.0/21
Signature Algorithm: sha256WithRSAEncryption
47:f2:5e:ea:1f:ca:f2:9a:4c:16:dc:42:70:b2:59:f0:04:fc:
44:42:58:28:22:7c:46:20:9e:e8:f3:55:8a:55:1e:03:ca:e9:
d5:64:7b:a4:aa:1d:fb:fd:01:f6:cb:ff:82:55:9a:fc:44:be:
dc:2a:93:9b:27:f5:c4:39:c5:b9:d0:f1:84:bb:94:d3:bc:f1:
24:5c:05:ee:fc:5c:d1:b3:cf:47:71:0d:0b:73:65:ae:c4:3b:
3f:9c:88:e3:e8:13:b1:23:b6:a9:01:63:ec:7f:1c:f8:98:17:
00:8b:92:93:c9:26:73:6d:47:96:c5:01:6e:5b:5b:af:c4:da:
3a:31:0c:e1:09:61:48:d6:b0:d2:af:34:d5:05:b7:c0:be:65:
41:1c:8e:51:dc:46:df:54:d6:34:d7:c3:7e:fe:5f:d3:da:d6:
16:86:ca:a8:95:e5:4c:5c:c4:2a:10:32:11:f2:b6:7a:b1:1c:
42:b8:df:9a:46:78:60:0a:45:b9:ec:21:5c:b6:f1:fb:47:d7:
7f:71:16:12:bf:ef:a7:21:76:ba:cb:b7:89:70:f2:18:e8:4f:
96:43:9e:81:a6:94:ae:78:09:98:3a:64:9a:75:88:a2:42:0b:
58:0e:45:3d:ba:e2:55:36:cf:0d:05:fe:86:9d:41:b2:92:60:
e3:2b:b3:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlRpZJNrQl+Wme7uQWPIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMmU2ZmQ1MGRkYzgxN2FiYmFjNWE2NGY3YzZhMTI1NDY4
NTljZTIwHhcNMjQwMTAyMDAzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzYzMTczYzdkMjRmM2VlNmI1YzAwMjk4MGFmYzVjMjIyMDc1NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAaoQ04UkzT4HOcEQymT3PNXfidg
AoMKMqHImmmxyaTtHDVFuExcoDLgujPR/UU7yP6Fwajbg6XU/FDDsmt0Jyp+K18u
acJWm/ZZjEGzzKx45yq5c7n/O/Hb5lIYvnFy3EcGS2jlmOtTNvbC3kL6iD4nmyzE
r3f5QMXcLmp/ytWGUTATGtLowu2SHkShmPRpzQkJ4kSuB6uFa3aztnpwHj+7YEhh
ZI21gm8XHyGcqm9Is8mlByEqb8aYZxL/MaQoub/aQgCd9iTapOgGI5UBN9irMzhm
Lyc62ATICb7OqdO72Zbu7lTBqIM0g6t0re9w992pMrKtIgm4VPFjxtLwiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFxjFzx9JPPua1wAKYCvxcIiB1W8MB8GA1UdIwQY
MBaAFJsub9UN3IF6u6xaZPfGoSVGhZziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXk1djFRM2NnWHE3ckZwazk4YWhKVWFGbk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYmEyZDktNzRjZS00ODgxLWIyM2Yt
N2NiMDcyM2RhMGJkLzEvWEdNWFBIMGs4LTVyWEFBcGdLX0Z3aUlIVmJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zYmEyZDktNzRjZS00ODgxLWIyM2YtN2NiMDcyM2RhMGJk
LzEvbXk1djFRM2NnWHE3ckZwazk4YWhKVWFGbk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXnwgMA0G
CSqGSIb3DQEBCwUAA4IBAQBH8l7qH8rymkwW3EJwslnwBPxEQlgoInxGIJ7o81WK
VR4DyunVZHukqh37/QH2y/+CVZr8RL7cKpObJ/XEOcW50PGEu5TTvPEkXAXu/FzR
s89HcQ0Lc2WuxDs/nIjj6BOxI7apAWPsfxz4mBcAi5KTySZzbUeWxQFuW1uvxNo6
MQzhCWFI1rDSrzTVBbfAvmVBHI5R3EbfVNY018N+/l/T2tYWhsqoleVMXMQqEDIR
8rZ6sRxCuN+aRnhgCkW57CFctvH7R9d/cRYSv++nIXa6y7eJcPIY6E+WQ56BppSu
eAmYOmSadYiiQgtYDkU9uuJVNs8NBf6GnUGykmDjK7NF
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:36:09 2024 by rpki-client on console-ams.rpki-client.org