Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Xp7WkJ5l3eZoZUcx93t4NIEuhSg.roa
File: Xp7WkJ5l3eZoZUcx93t4NIEuhSg.roa (raw, json)
Hash identifier: /yGbY+wQ8ZgsNTb1gkclLt/uHeEvOWzqLx8C5oyhBJY=
Subject key identifier: 5E:9E:D6:90:9E:65:DD:E6:68:65:47:31:F7:7B:78:34:81:2E:85:28
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B266AADC3F1241A4290AA59329B9EA
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Xp7WkJ5l3eZoZUcx93t4NIEuhSg.roa
Signing time: Wed 01 Jan 2025 11:48:47 +0000
ROA not before: Wed 01 Jan 2025 11:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197467
IP address blocks: 82.179.48.0/22 maxlen: 22
2001:b08:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:66:aa:dc:3f:12:41:a4:29:0a:a5:93:29:b9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e9ed6909e65dde668654731f77b7834812e8528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:f4:e5:3f:70:1e:ff:4f:72:20:1b:81:39:
eb:26:9e:31:6b:74:b8:88:7c:83:89:c3:83:5d:6a:
6a:1e:24:5f:8f:e8:2d:85:45:a1:6a:75:68:ec:dd:
3d:49:f2:d7:9c:57:35:c2:70:4a:ca:34:fd:b3:b3:
25:bd:df:51:c7:8e:27:c3:a9:da:a0:7a:b3:c1:33:
35:b5:6e:02:7e:ed:38:69:26:d5:12:20:94:96:f1:
70:8e:0c:02:f7:16:cb:c2:57:01:24:21:59:6d:2e:
ec:26:09:cb:5e:8b:45:3c:a1:d1:db:e9:57:00:4c:
6e:93:ee:8e:88:ed:9e:a5:68:4a:9c:4d:24:1d:f0:
d3:99:66:5c:7c:0d:d9:16:21:1c:4c:46:a2:a5:dd:
60:6a:fb:c8:59:ec:5a:7e:f3:65:60:cb:62:e0:9f:
b3:52:a7:8b:f6:18:1a:80:c5:a2:9e:21:39:63:62:
76:0e:87:c1:c4:d3:ec:dc:1e:cf:52:c0:9b:27:11:
a3:32:07:b3:e4:7c:30:da:e9:db:8a:17:4e:66:07:
ee:31:18:d0:7b:55:58:17:e8:ef:07:a8:4d:7c:2d:
7c:2f:d1:45:5a:df:be:e7:8c:57:89:14:d3:ce:e2:
d7:c9:7d:0b:a9:67:09:99:55:d3:7f:93:b5:bf:97:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9E:D6:90:9E:65:DD:E6:68:65:47:31:F7:7B:78:34:81:2E:85:28
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Xp7WkJ5l3eZoZUcx93t4NIEuhSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.48.0/22
IPv6:
2001:b08:19::/48
Signature Algorithm: sha256WithRSAEncryption
09:45:8a:87:61:a4:32:8b:0c:20:99:c4:4e:8b:33:73:8f:f5:
f1:6e:33:f3:25:b8:00:c0:53:a7:7f:62:34:52:cb:0a:08:65:
c8:bd:b8:9a:6f:be:2e:9b:29:3e:1a:af:34:5c:7f:2f:7a:68:
48:d2:bc:cc:fc:77:39:58:04:ff:3e:42:1d:6e:38:d9:4b:f6:
81:57:a8:82:a3:9f:a2:12:a0:ca:51:7f:87:6f:1e:13:df:af:
ba:08:8e:26:9d:82:4c:79:fd:b7:1e:92:f1:63:99:a0:d7:25:
67:03:b5:8f:be:78:3f:4c:36:33:c0:89:24:ba:4c:71:10:ad:
88:38:d6:7c:47:77:4d:4e:f3:1e:69:1f:df:84:ca:f4:7c:38:
48:cc:4a:d3:4a:cd:b1:f8:83:a2:75:9f:7d:f7:c0:aa:35:10:
f5:c9:91:bb:42:e9:3c:e5:80:82:7a:b3:b9:50:a8:cf:75:45:
09:2d:ba:e9:07:ef:78:5a:8b:94:e1:be:1b:35:89:96:16:b3:
54:8c:ce:d2:1e:f2:22:d6:51:f2:c8:25:f0:49:f5:47:1d:f2:
9e:13:d8:78:17:c7:b3:c6:ca:27:ea:2e:3f:ab:cb:87:1d:c5:
ec:88:55:00:79:9f:27:d2:30:87:43:3c:20:4e:17:a3:b5:0c:
a6:40:17:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:48:15 2025 by rpki-client