Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa
File: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (raw, json)
Hash identifier: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=
Subject key identifier: 5F:A6:D4:40:0F:F9:71:FF:33:6F:18:D1:89:05:6D:1E:98:C2:C4:24
Certificate issuer: /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Certificate serial: 01942144236A5047965E96FE6006F8B2C8C9
Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20700
IP address blocks: 194.11.204.0/24 maxlen: 24
194.11.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:23:6a:50:47:96:5e:96:fe:60:06:f8:b2:c8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fa6d4400ff971ff336f18d189056d1e98c2c424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:50:6c:ec:40:08:34:5c:7c:7a:f5:80:6e:cf:
12:3c:21:1e:16:15:44:15:4e:14:53:0d:b5:80:b2:
1e:aa:91:6c:11:d7:9a:c9:83:18:27:b5:41:c3:02:
2c:0c:99:5e:cc:6d:66:88:19:33:e1:29:3a:eb:2d:
c4:19:78:8c:2d:ca:dd:f2:58:16:5d:53:90:f0:16:
3e:fd:f8:ed:46:61:94:04:ff:9d:0c:13:76:2e:9c:
ce:99:ff:7a:3d:c6:ef:6a:9e:57:74:49:d0:00:cf:
9f:d6:fc:9a:0b:46:2d:b5:d2:76:3d:57:3c:46:45:
31:88:98:bf:50:26:05:0d:2f:c1:97:a2:94:b0:df:
ae:a6:36:51:9d:cb:0e:40:e6:63:4a:47:7c:8a:e1:
de:ae:de:62:63:68:35:02:c3:07:26:66:b5:04:95:
6b:6a:3c:4c:4e:f6:66:2c:7c:36:99:38:23:9b:17:
17:7a:27:cc:b3:ff:26:84:83:ba:00:b8:a7:03:18:
a2:3e:03:b4:e9:0f:b0:b9:22:9c:ac:b9:17:9b:6a:
0f:79:e5:96:5e:8b:6a:cd:79:72:a2:d7:33:cd:a5:
a8:ee:d5:a7:20:44:d3:0d:1b:ba:a4:37:7a:74:72:
92:2f:ef:d1:3d:e0:bd:5b:07:cc:33:7d:42:48:82:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:D4:40:0F:F9:71:FF:33:6F:18:D1:89:05:6D:1E:98:C2:C4:24
X509v3 Authority Key Identifier:
keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.204.0/23
Signature Algorithm: sha256WithRSAEncryption
14:bf:29:9a:4c:db:75:14:e9:a2:9c:e0:82:d7:49:aa:f1:fb:
6b:cd:c0:77:f0:1f:7b:bb:9d:1b:88:03:e5:06:5e:c2:a7:c8:
03:af:3d:91:e0:44:cd:a8:ec:cc:ce:95:0a:33:c0:c8:52:4a:
13:c3:c6:31:d1:d4:37:66:8f:23:45:ff:2b:23:e0:df:db:60:
aa:2b:41:20:62:6b:3f:43:8f:d2:23:9a:c3:4c:0d:62:f7:57:
21:d2:c4:dc:2f:e9:ef:c7:33:21:9e:e2:3b:29:86:a8:88:91:
1c:33:70:9d:da:59:2a:24:75:6b:5a:cc:a4:04:b3:cf:80:fd:
14:c1:ec:37:a8:61:1b:7e:0a:4b:8c:8a:81:71:9e:01:25:65:
e5:79:30:e8:20:55:40:99:a1:dc:bf:12:22:06:ec:77:3e:18:
53:6f:cd:44:8b:af:a2:7b:77:05:09:ef:da:c8:a2:d4:e7:61:
8a:ed:a7:d2:32:bc:be:86:fc:65:55:4f:61:ee:33:30:4f:ab:
31:c8:7e:78:24:1d:39:0f:f0:13:7a:8c:d5:ea:52:13:e1:b0:
46:8d:0e:83:91:70:db:84:9e:05:e4:f1:92:61:dd:20:69:98:
b1:37:68:d8:e0:b3:64:59:23:a4:c1:32:d0:52:bc:a0:9f:38:
95:a7:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:07 2025 by rpki-client