Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/XoV9N0j6H78F41W2zYIj2kSiFP4.roa
File: XoV9N0j6H78F41W2zYIj2kSiFP4.roa (raw, json)
Hash identifier: XyaPIDPQv/zJjAxhNU5V2ftiSqBuA4U9SWVpvc6Tesw=
Subject key identifier: 5E:85:7D:37:48:FA:1F:BF:05:E3:55:B6:CD:82:23:DA:44:A2:14:FE
Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Certificate serial: 0194236A2D265AFEF63083856BC25641CFBF
Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/XoV9N0j6H78F41W2zYIj2kSiFP4.roa
Signing time: Wed 01 Jan 2025 19:49:08 +0000
ROA not before: Wed 01 Jan 2025 19:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21488
IP address blocks: 193.110.106.0/23 maxlen: 23
194.246.116.0/23 maxlen: 23
217.66.96.0/21 maxlen: 21
217.66.104.0/21 maxlen: 21
2a0f:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2d:26:5a:fe:f6:30:83:85:6b:c2:56:41:cf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13
Validity
Not Before: Jan 1 19:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e857d3748fa1fbf05e355b6cd8223da44a214fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:ac:25:a3:94:36:fd:53:f3:33:ad:0b:87:
62:b0:74:be:bb:6d:ac:95:90:da:58:9a:07:b0:d3:
ef:eb:10:c2:32:bd:8a:1a:10:95:8c:eb:75:ec:6c:
ef:65:26:c7:fd:f4:c4:86:83:0b:fd:c6:24:70:33:
8d:b5:0c:07:39:27:5c:18:50:c1:31:6b:ff:eb:1c:
30:ff:c8:bd:09:9e:ae:75:68:63:97:bc:39:2e:26:
63:09:72:72:46:41:b0:3b:73:5c:b7:29:a3:ed:77:
b5:33:31:17:2e:7c:5d:c2:11:91:b1:a3:15:0e:31:
59:c3:de:eb:99:68:c4:eb:ae:a4:b0:ea:38:05:60:
22:3b:26:e7:28:98:ac:29:02:99:9c:2f:27:20:0c:
11:76:3c:ab:d1:9d:2a:76:b2:d4:44:a3:ec:67:91:
f1:55:23:a6:e8:81:18:d6:08:df:67:fc:67:9f:d8:
be:9f:38:91:24:08:08:1c:85:04:d2:10:60:ac:8d:
00:73:51:2b:4b:9d:d1:58:a1:18:8e:06:90:fb:f2:
35:9e:a4:ca:6f:4c:04:96:5c:fb:d1:4a:55:e3:0d:
5c:e3:17:7d:eb:a3:3f:dc:a7:82:b6:77:63:59:06:
2b:73:bd:6b:0e:9d:67:8f:ad:5b:7b:b1:a0:10:30:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:7D:37:48:FA:1F:BF:05:E3:55:B6:CD:82:23:DA:44:A2:14:FE
X509v3 Authority Key Identifier:
keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/XoV9N0j6H78F41W2zYIj2kSiFP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.106.0/23
194.246.116.0/23
217.66.96.0/20
IPv6:
2a0f:c240::/29
Signature Algorithm: sha256WithRSAEncryption
ca:f5:65:3a:30:3a:c4:4d:58:34:57:27:d4:bf:de:7f:98:3d:
9a:bf:8e:b9:0a:c8:58:16:e6:0b:81:7a:a5:9f:29:45:ed:8d:
82:c6:15:cf:2c:e5:1b:3c:0a:66:f5:50:e1:bf:72:9e:df:a8:
e6:0b:ac:6f:22:ac:6a:de:da:dc:55:d3:3d:bf:6b:61:cd:a6:
f4:e6:36:3b:bd:5d:68:d9:84:80:c8:d7:21:b2:10:0c:bd:b2:
bc:47:58:8f:8a:38:33:ef:16:81:c0:c0:c4:b5:60:a5:67:93:
95:47:2c:de:9d:e2:26:bd:43:b8:43:6e:8d:ca:0a:86:b3:45:
fa:de:ae:d7:8e:2f:01:6c:a7:78:2b:32:a4:a1:05:80:c7:2c:
80:89:b2:60:1c:2f:90:62:e0:4d:0f:c5:6b:b0:6c:37:cc:e5:
2c:ce:e5:2d:0a:87:98:ef:a3:1f:3b:e9:29:ad:ea:bc:3e:1b:
c5:11:2d:d3:03:8d:5c:e3:f7:43:d6:79:be:b2:c2:37:af:c8:
a6:48:fb:da:b6:74:7f:65:45:47:f2:87:f3:65:47:9e:8f:d0:
d2:56:49:21:a8:fc:58:dc:d2:5d:56:38:c8:c6:93:50:13:61:
f1:7a:35:4b:28:8f:7b:ed:ac:aa:36:3a:4a:31:f0:26:70:68:
34:ce:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:38:53 2025 by rpki-client