Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/XhbfPxl0mTvKXWs6aYEV15Sf1Zw.roa
File: XhbfPxl0mTvKXWs6aYEV15Sf1Zw.roa (raw, json)
Hash identifier: Y9+T7Mn/gKGvDXGyHmLcv1HeCAXW8+WFBTkhydKojcU=
Subject key identifier: 5E:16:DF:3F:19:74:99:3B:CA:5D:6B:3A:69:81:15:D7:94:9F:D5:9C
Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial: 0194266B416DF458440BC2A35F73877CC91E
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/XhbfPxl0mTvKXWs6aYEV15Sf1Zw.roa
Signing time: Thu 02 Jan 2025 09:49:10 +0000
ROA not before: Thu 02 Jan 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20521
IP address blocks: 37.114.72.0/21 maxlen: 32
78.110.16.0/20 maxlen: 32
80.245.208.0/20 maxlen: 32
95.131.232.0/21 maxlen: 32
185.56.252.0/22 maxlen: 32
195.38.30.0/24 maxlen: 32
217.168.160.0/20 maxlen: 32
2a00:1cc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:41:6d:f4:58:44:0b:c2:a3:5f:73:87:7c:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
Validity
Not Before: Jan 2 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e16df3f1974993bca5d6b3a698115d7949fd59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:4f:70:0e:19:3b:18:d0:a2:e7:49:a8:4a:
7d:a6:41:b0:9e:a8:5a:a2:f9:ab:ae:ed:35:bd:e0:
b0:fb:2d:20:46:68:f4:52:f5:b4:48:a4:14:12:4e:
b4:09:7c:88:aa:aa:6c:9f:88:84:22:66:ec:4c:b2:
8d:58:98:ac:e5:da:ee:b4:50:39:64:5d:bf:d8:65:
6c:18:9e:5c:1d:4e:25:e0:51:7d:30:bb:52:ac:a7:
3d:49:d8:1f:3c:8c:07:7d:b0:6a:42:7a:00:cb:1b:
ba:38:b9:5a:3c:9c:4e:c9:f4:26:98:9e:4d:d9:7b:
0e:3c:a4:8b:81:c0:80:a8:df:78:4e:e9:73:3a:be:
61:17:23:5c:47:92:b0:27:97:10:ad:ae:aa:b6:b7:
14:6c:e6:99:64:4e:2e:43:e1:ea:3e:eb:41:d1:5c:
ae:f7:01:5c:ee:4f:22:1c:bc:aa:76:44:0e:08:71:
17:cf:c9:38:bb:e2:ef:e8:e4:08:5c:ed:1a:13:23:
41:6a:1f:86:3d:cd:19:e0:23:4d:a4:5d:c0:d7:51:
28:a2:14:8e:f9:f0:4f:63:11:9d:05:38:68:2e:ed:
ea:7e:13:ad:a6:ef:84:cc:72:f3:eb:7f:37:98:25:
b7:43:4f:63:79:5f:ed:07:17:1e:f8:dd:dc:01:4c:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:DF:3F:19:74:99:3B:CA:5D:6B:3A:69:81:15:D7:94:9F:D5:9C
X509v3 Authority Key Identifier:
keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/XhbfPxl0mTvKXWs6aYEV15Sf1Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.72.0/21
78.110.16.0/20
80.245.208.0/20
95.131.232.0/21
185.56.252.0/22
195.38.30.0/24
217.168.160.0/20
IPv6:
2a00:1cc0::/32
Signature Algorithm: sha256WithRSAEncryption
22:d3:68:46:37:7a:72:23:af:5c:d3:4f:f0:d2:ad:1b:4c:36:
fd:0a:d4:c6:07:a1:cc:fa:6b:7a:5f:7a:b6:3d:3b:9d:50:f9:
92:c1:d2:4d:c0:a7:ab:c3:d5:ab:9a:39:a5:83:7f:57:0e:fc:
b7:02:e1:8b:a9:21:03:40:37:31:5d:d6:0f:9f:b4:d9:1b:48:
e4:27:85:16:b9:12:2a:a5:8a:2f:05:3e:78:84:88:a6:99:1b:
35:6c:00:b4:cf:2e:6c:2a:f6:f6:11:57:3b:17:ba:eb:ad:24:
3b:6a:c3:6f:a1:6a:f4:ad:9a:28:14:aa:1e:83:a1:2d:3a:e1:
8b:fa:43:c9:07:3b:90:7b:b5:02:1e:86:fb:7c:62:65:31:dc:
f9:54:f0:88:2c:38:6e:fc:72:69:6f:4a:e7:c4:0a:c6:cf:4a:
dc:80:e5:c0:f6:22:ab:8f:d8:bc:3f:61:06:02:4e:48:07:26:
ff:d4:a9:b1:94:c1:f9:1a:ff:ce:c9:8a:51:e1:76:74:77:db:
b4:b9:ee:be:ba:fc:80:16:48:cb:69:84:9d:bc:37:04:f8:e0:
30:c9:0a:dc:f1:ae:9a:18:c8:9e:66:5f:51:ea:ba:c8:d3:48:
f1:db:0c:45:4f:03:9c:6e:48:50:c7:46:ff:e4:4a:11:c5:a5:
5d:4d:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:04:56 2025 by rpki-client