Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/XIqtTjvuJ5glY39EaIP6KmILhoo.roa
File: XIqtTjvuJ5glY39EaIP6KmILhoo.roa (raw, json)
Hash identifier: oyK+JoJZ3ZJXn7BAWGpujgyfoF5xI3Ds91YiwWdI2PE=
Subject key identifier: 5C:8A:AD:4E:3B:EE:27:98:25:63:7F:44:68:83:FA:2A:62:0B:86:8A
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 0194274872C6535E4660A3D25616AA3ED29E
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/XIqtTjvuJ5glY39EaIP6KmILhoo.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207925
IP address blocks: 45.141.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:72:c6:53:5e:46:60:a3:d2:56:16:aa:3e:d2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c8aad4e3bee279825637f446883fa2a620b868a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a4:10:8e:7f:11:3f:86:e2:7e:b3:fa:aa:2c:
23:0a:5f:92:53:10:01:81:06:17:77:ae:ed:d5:2b:
5e:f5:be:73:50:c5:c2:9c:a1:01:b8:ab:99:c7:62:
0c:c2:1e:c2:98:e4:81:51:03:7b:79:7e:fb:08:d9:
da:4f:52:6d:13:f8:f4:cf:bd:05:fa:53:f2:c4:78:
30:57:88:ae:73:d1:af:e4:74:4a:d3:d2:54:20:db:
60:67:e5:64:5e:f3:26:15:12:80:20:bc:61:80:b5:
da:9c:dc:19:a9:6d:d2:c6:bb:b6:c1:d0:97:b1:41:
65:e8:a4:97:af:c0:12:9f:7c:43:c3:09:e8:96:57:
38:46:6c:54:eb:8b:8d:b2:11:c3:4e:0a:5e:27:52:
d3:fb:24:c2:52:93:b3:88:16:53:4f:2e:b2:8c:f6:
f8:50:c0:fe:0e:b3:82:92:36:a4:ff:56:c5:eb:08:
52:a2:96:bb:32:10:ca:bd:4f:c0:f4:9c:b2:48:34:
0f:2e:09:d3:89:1f:db:f8:45:49:b5:91:d5:c4:8b:
c0:2b:b5:c6:78:b7:14:08:50:b0:20:1a:73:b4:2f:
13:ff:f3:98:d2:ff:14:fe:f8:46:27:e3:f8:90:66:
98:b6:0d:b9:a1:a3:5f:c1:2f:3c:52:9a:4a:9e:72:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:AD:4E:3B:EE:27:98:25:63:7F:44:68:83:FA:2A:62:0B:86:8A
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/XIqtTjvuJ5glY39EaIP6KmILhoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.55.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d1:5c:58:55:13:a6:ab:f8:b5:18:6d:f4:17:1f:7b:25:5c:
64:4d:56:3f:39:77:cb:f5:37:62:17:fb:96:0a:f4:fe:20:ec:
cb:f2:bf:3f:0a:bf:89:cb:5d:37:ec:6c:75:a6:71:bc:ab:ad:
c4:f6:39:80:cc:07:99:8d:c6:31:2f:e3:1e:dd:cf:54:75:e7:
7f:2f:d3:77:03:65:0c:9a:7e:f6:1f:43:41:77:6d:1d:9c:9a:
64:8e:b7:7c:2c:8d:ec:70:2f:19:13:a0:f7:1b:7f:59:3f:fd:
9e:c6:b3:bb:93:d5:3a:48:5a:0a:bf:6a:fd:d2:eb:51:24:f3:
79:0e:a7:67:f1:b8:63:21:79:a1:c0:fa:02:23:65:a7:1b:fe:
45:d9:7f:ba:4f:46:ec:2d:00:53:d2:28:09:c6:f5:1c:70:a8:
ec:8d:0d:37:18:11:89:06:af:e4:1b:c7:31:d6:9c:41:01:d6:
62:5b:58:a3:24:36:a4:ca:4b:ee:71:a2:8b:31:91:8e:17:64:
d4:3d:cf:d8:9c:5e:d9:e6:5d:9b:06:75:bc:f8:68:2d:22:a5:
01:bd:49:48:85:c1:0f:cc:0e:01:49:cf:4f:39:84:a1:36:9d:
c7:ba:60:23:27:29:0e:3d:aa:c7:66:ab:15:9a:ad:b1:37:5b:
83:02:93:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:19 2025 by rpki-client