Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/XKLo22yCHGXk836_NiS1tUu23bU.roa
File: XKLo22yCHGXk836_NiS1tUu23bU.roa (raw, json)
Hash identifier: YIucgsHMKAv9VlAABTFpvd0lAGyjSYl01+heYFoudqg=
Subject key identifier: 5C:A2:E8:DB:6C:82:1C:65:E4:F3:7E:BF:36:24:B5:B5:4B:B6:DD:B5
Certificate issuer: /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial: 0194258FB134E0470CE273737D57BA67B4E6
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/XKLo22yCHGXk836_NiS1tUu23bU.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 194.61.102.0/23 maxlen: 24
2a03:98c7::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b1:34:e0:47:0c:e2:73:73:7d:57:ba:67:b4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ca2e8db6c821c65e4f37ebf3624b5b54bb6ddb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:94:cc:a1:f0:7e:b1:a0:04:76:d6:29:02:
3c:60:b2:b8:fc:a9:ac:43:5a:70:e8:4b:72:ab:c0:
1b:9c:51:4a:bd:70:a5:8f:4b:1d:3b:13:d5:af:f3:
5d:a4:23:7b:91:f2:c4:fb:48:69:42:82:ed:69:be:
4c:88:6c:9a:57:6f:be:1e:96:9e:d6:fe:77:0b:9f:
a4:34:47:6f:64:62:95:76:92:66:96:dc:ae:fb:9f:
a8:c8:d2:78:4a:14:12:59:56:42:18:85:fb:d9:bf:
c3:bd:4b:60:05:9a:8f:47:4e:6d:33:1e:24:84:b9:
d9:51:97:19:d9:f8:9d:36:1b:af:4a:71:7f:f9:75:
25:76:88:e1:d3:01:86:46:e3:27:79:5d:5d:c0:45:
1d:5a:19:d7:79:49:85:66:ee:43:97:36:71:d3:7d:
56:66:6b:93:e4:a8:e2:4d:f6:28:da:63:22:b9:a2:
4c:32:05:08:67:09:a9:67:f0:62:e8:40:1e:cd:3f:
c0:3f:4c:fc:d8:0e:7d:8b:65:54:b2:5a:7a:67:98:
d1:a5:81:1e:1c:1c:48:3e:73:02:ad:05:9e:fe:44:
19:4c:30:30:23:56:a8:28:48:c8:b6:79:00:02:c6:
1e:70:35:7f:57:8c:3e:79:be:e8:a6:3f:a6:f2:52:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:E8:DB:6C:82:1C:65:E4:F3:7E:BF:36:24:B5:B5:4B:B6:DD:B5
X509v3 Authority Key Identifier:
keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/XKLo22yCHGXk836_NiS1tUu23bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.102.0/23
IPv6:
2a03:98c7::/32
Signature Algorithm: sha256WithRSAEncryption
7a:56:40:8e:0e:0a:22:c6:7b:c5:46:54:1d:e1:e3:86:e8:ff:
ca:04:e5:61:1c:f0:85:ce:1e:b7:ba:fa:68:2b:e4:aa:82:6a:
19:d7:3b:30:80:00:0b:2e:50:8e:4b:95:cd:43:85:d8:4c:60:
e7:cd:10:f2:e9:49:54:93:0a:7a:83:fa:bb:06:8d:f0:71:97:
f5:8b:35:a5:f3:7f:d8:5a:17:f8:64:11:84:08:5c:7d:de:41:
60:55:2a:b7:39:94:06:f3:f1:5c:a4:fd:34:66:aa:e5:c8:20:
7e:34:96:d8:c3:1a:e4:09:55:86:92:93:b9:d5:08:18:22:e1:
42:0c:a7:24:6a:80:ec:7d:da:f6:6b:cc:87:b3:7f:ea:af:73:
1d:28:eb:90:17:52:cc:4a:b5:b4:d2:80:d1:e3:95:ae:66:b1:
61:89:4d:2f:de:a4:70:73:6d:62:0f:9a:c2:ac:5f:45:d9:fd:
39:f2:02:3e:cb:c0:5f:60:5c:b7:f4:50:84:50:2d:a0:68:e1:
c4:19:79:a6:ce:41:8e:f0:bc:76:00:23:03:91:d0:76:59:bb:
91:a6:5d:48:76:fa:ff:ac:96:ac:94:ab:8d:5d:55:08:92:2e:
ee:00:6d:3b:d1:38:0a:0a:da:29:cb:ba:02:23:72:0b:bd:8e:
98:f9:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:54:26 2025 by rpki-client