Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Xv7AqptRs2yjghiVMQuHXk2dEXk.roa
File: Xv7AqptRs2yjghiVMQuHXk2dEXk.roa (raw, json)
Hash identifier: CyTpfR0q/ZnPHpa6cnb4IWmlnSDd1Td1fo4KhUU38zA=
Subject key identifier: 5E:FE:C0:AA:9B:51:B3:6C:A3:82:18:95:31:0B:87:5E:4D:9D:11:79
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA41E8360CA73604BD14D52B880790
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Xv7AqptRs2yjghiVMQuHXk2dEXk.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213240
IP address blocks: 188.215.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:e8:36:0c:a7:36:04:bd:14:d5:2b:88:07:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5efec0aa9b51b36ca3821895310b875e4d9d1179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:3a:bc:f7:90:b0:3f:6b:d9:06:17:37:c2:
16:6a:49:10:6d:21:f5:c3:cd:60:a2:08:87:d5:41:
f9:00:d3:5a:f5:e3:e0:41:05:3a:c6:65:01:21:c7:
37:e5:34:9a:05:01:74:5f:72:72:e7:d4:3e:1d:19:
fe:1c:68:3d:32:cf:02:bb:0a:01:ee:a8:f6:0f:47:
b7:b8:d5:09:d7:71:32:53:af:b9:f8:45:b8:82:c7:
f6:e4:5b:54:4e:6a:0e:5f:bd:95:19:2d:72:a4:73:
c4:5b:45:c0:88:bd:fb:3a:b7:d4:8b:ad:ae:71:41:
a1:87:b7:e1:5d:06:9b:f0:ad:eb:0c:7f:b2:a6:a5:
f0:fe:c3:69:39:55:ba:68:8c:ac:53:87:95:5b:5d:
0c:10:c9:0d:6d:87:0c:98:52:64:65:82:09:8a:6b:
a9:bc:e3:29:f7:36:c8:bd:fe:b0:f8:48:28:7c:0f:
65:5e:b4:8f:18:8b:31:01:b1:11:ae:0a:20:9a:70:
a5:42:51:19:2f:ae:57:89:79:fe:6c:a9:ca:08:7a:
87:46:7d:fb:43:31:30:fb:26:98:6e:07:ab:6a:1a:
59:c5:a3:8e:a5:ae:81:15:59:96:49:d4:ed:70:bc:
0a:d2:c1:fb:9b:9a:67:e2:34:7b:b0:d4:6b:09:89:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FE:C0:AA:9B:51:B3:6C:A3:82:18:95:31:0B:87:5E:4D:9D:11:79
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Xv7AqptRs2yjghiVMQuHXk2dEXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.246.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a0:c9:50:04:69:8b:20:83:8d:5f:b2:82:a3:f1:11:c8:9c:
69:c1:e2:33:08:a0:7c:88:49:e9:24:60:67:71:84:03:2b:ec:
43:8c:f3:dc:00:42:da:fd:fe:8e:28:d2:80:56:84:5b:7b:78:
85:07:62:6e:1f:41:f3:92:de:bb:1e:89:0a:d2:f2:33:5f:d4:
14:5f:61:38:82:cf:d1:c6:b5:04:4f:36:fe:1c:8d:8e:f3:d5:
65:e7:8e:1c:a1:0c:f7:84:46:06:fd:9d:7d:bf:a4:08:01:c0:
fb:4f:79:99:5d:54:2d:9f:a1:04:7c:0b:9a:85:c5:bd:12:ed:
4f:78:0c:90:a7:b9:cb:60:b1:f1:e2:0c:aa:dd:59:2f:e0:6b:
0a:61:45:33:4e:6f:86:9e:f5:84:dd:96:75:5e:4a:c4:a2:4a:
55:23:ab:79:60:2f:b3:d6:97:58:c1:e8:20:7e:a3:4f:f6:fe:
92:34:fa:39:bc:18:5a:e6:55:c6:ff:35:32:b5:56:3c:02:86:
03:88:d1:66:0d:2b:77:60:be:c5:18:2b:a6:a6:63:cc:26:f3:
2b:a1:24:df:09:c4:45:8f:10:ab:33:91:05:b8:13:60:86:0d:
da:3f:3f:4f:01:42:b2:58:c3:1b:b6:b8:30:d6:4b:f7:fc:8e:
f5:66:57:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:27:29 2025 by rpki-client