Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/dxg__1hqTnA8TMbpWBwZfn6ppbM.roa
File: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (raw, json)
Hash identifier: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=
Subject key identifier: 77:18:3F:FF:58:6A:4E:70:3C:4C:C6:E9:58:1C:19:7E:7E:A9:A5:B3
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 0194258F63DDB5FBDDC539F99D1D2CADBAB9
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/dxg__1hqTnA8TMbpWBwZfn6ppbM.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49024
IP address blocks: 95.131.122.0/23 maxlen: 23
95.131.122.0/24 maxlen: 24
95.131.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:63:dd:b5:fb:dd:c5:39:f9:9d:1d:2c:ad:ba:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77183fff586a4e703c4cc6e9581c197e7ea9a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:28:76:a8:55:a9:90:21:84:25:3d:7b:18:
15:9b:5c:fc:d6:73:0d:44:67:0b:dd:07:06:7a:08:
2d:47:3f:30:cd:3b:1a:59:62:d8:5a:0e:46:f1:2f:
b1:0b:fa:27:df:72:8a:73:fa:52:8f:95:a2:81:27:
24:56:e2:ea:3b:9d:1c:4f:b1:4b:09:aa:9b:50:ee:
29:0d:42:40:76:1c:45:e7:27:4f:e5:a1:03:e0:45:
4e:1a:54:c0:17:7c:1d:52:f6:bf:88:ae:a4:41:b2:
f6:be:a1:49:49:0d:4a:27:02:b9:5a:b6:45:2a:ec:
95:00:f5:c7:58:1b:26:6a:16:63:c1:62:be:9b:3f:
35:e3:38:25:a1:52:17:93:d2:69:b3:2c:06:66:b8:
57:ab:3c:08:2d:cc:d5:95:0f:db:5e:e4:3c:a8:48:
37:c3:68:df:65:73:07:e8:6e:55:91:c7:20:41:90:
34:45:c8:7a:2f:5c:64:73:30:ae:cb:e9:1c:61:ea:
87:ef:48:bd:6a:47:4d:d0:b0:cf:5a:a8:92:d2:9f:
35:99:ba:93:21:9a:3d:42:5b:be:d8:b4:fd:7d:41:
ae:64:06:d9:2a:c6:78:c7:29:ce:4b:65:e5:20:e7:
40:db:08:c7:09:fa:21:5e:80:ad:56:bd:ba:91:3b:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:3F:FF:58:6A:4E:70:3C:4C:C6:E9:58:1C:19:7E:7E:A9:A5:B3
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/dxg__1hqTnA8TMbpWBwZfn6ppbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:de:5e:b8:ec:ee:fe:8a:84:2b:09:68:43:fa:d2:86:01:8b:
b6:21:b4:4a:f0:82:dd:21:af:34:a6:b4:64:4e:48:2b:32:d4:
4b:ac:31:73:28:e5:9e:fc:8a:c1:14:75:ee:e8:57:de:97:4d:
5f:27:3f:b4:4f:d3:43:39:11:27:ed:1f:8d:2c:7b:2f:8d:05:
53:0f:05:28:7f:8d:ed:14:15:34:76:b0:26:9b:02:22:12:1d:
8e:71:7d:67:98:46:46:71:d7:ef:6f:77:bd:2d:4c:f5:e9:a6:
1b:67:6d:7b:27:66:2f:d6:50:8d:37:67:30:be:f2:19:62:c1:
f6:55:5c:a5:79:ab:8e:78:a2:bd:84:2d:ab:10:5c:e2:ae:07:
f6:fc:1a:7b:65:79:a5:aa:38:9e:5b:9b:69:0a:af:b5:6e:e4:
f8:49:4e:79:e4:95:e1:e2:12:58:c3:44:d4:7a:21:ce:7e:d9:
a7:22:d8:78:fb:b8:63:ec:23:b8:94:8c:1a:f7:ab:a9:8e:63:
b9:15:63:20:25:e3:0b:86:1f:14:4e:e0:7a:9d:79:96:6e:a8:
40:bf:dc:1a:e5:d1:d7:f2:1f:71:52:a6:ef:39:2a:cb:7e:8d:
0a:99:a3:9c:c9:34:7c:a3:17:1e:5c:c7:6a:c1:05:25:74:e4:
2f:d3:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:40 2025 by rpki-client