Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XCY_-VgOZJbYdHpZ2qYKchT5Op0.roa
File: XCY_-VgOZJbYdHpZ2qYKchT5Op0.roa (raw, json)
Hash identifier: t4W7MJtK1bCulSkqPY/gnEhHGImi8kYmxw3lUw/3lYY=
Subject key identifier: 5C:26:3F:F9:58:0E:64:96:D8:74:7A:59:DA:A6:0A:72:14:F9:3A:9D
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019566F2D17413AB4B3A761DBBA505810D39
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XCY_-VgOZJbYdHpZ2qYKchT5Op0.roa
Signing time: Wed 05 Mar 2025 15:35:44 +0000
ROA not before: Wed 05 Mar 2025 15:35:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 185.210.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:f2:d1:74:13:ab:4b:3a:76:1d:bb:a5:05:81:0d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Mar 5 15:35:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c263ff9580e6496d8747a59daa60a7214f93a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:7e:be:a7:f6:a8:94:0b:32:f8:51:e1:9d:
aa:18:13:bc:77:e9:c3:d4:15:81:f5:30:0a:17:65:
cc:92:fb:77:8f:47:0f:de:e1:0f:38:86:35:f4:cf:
8d:40:5f:f1:14:ab:e3:c0:5c:f9:0f:67:08:6a:bc:
b8:aa:61:3a:4f:dd:22:98:b8:b6:4c:e6:e8:2b:51:
8a:f1:ad:44:89:a5:df:99:02:78:d1:82:e3:75:a9:
0a:52:d7:81:c6:f4:4a:e1:49:c6:81:d6:4a:d7:90:
92:3e:f9:ee:84:5c:cc:0e:84:92:71:0b:8f:6b:4f:
50:67:db:78:8c:00:c5:01:00:05:83:52:27:b7:09:
a7:72:18:f2:e6:20:18:1e:13:b2:73:8c:20:f9:00:
72:33:c2:44:b8:0b:40:09:51:ca:24:cd:f4:13:f9:
14:83:f2:2e:3e:87:34:db:1f:94:91:7b:15:e1:fa:
bf:7c:4e:d7:d4:74:c2:60:6c:dc:87:1e:92:61:9a:
5d:a2:5a:ef:d9:b5:99:73:f4:63:67:f9:93:d7:06:
0d:f0:6a:d9:d9:79:47:fe:00:93:2c:90:5c:14:62:
6d:c0:7a:fb:79:71:d3:7f:fc:96:0a:e9:d4:5c:b3:
12:84:75:17:e9:df:ab:fb:f4:9c:be:dd:1a:d3:20:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:26:3F:F9:58:0E:64:96:D8:74:7A:59:DA:A6:0A:72:14:F9:3A:9D
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/XCY_-VgOZJbYdHpZ2qYKchT5Op0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8e:c0:91:b7:5a:94:f6:9e:b8:a9:71:1e:b3:5b:e8:17:6e:
95:79:75:f3:9b:00:40:db:4f:f9:98:6b:e2:06:54:f2:04:a4:
87:05:b9:6c:ec:26:45:58:a0:97:af:5b:4f:ea:90:7a:3e:29:
32:bb:b2:28:84:01:8f:68:95:bf:5c:a3:71:c1:89:2f:fb:f9:
3c:d3:43:84:92:c4:be:83:8e:fd:29:f9:34:d1:43:24:c3:ef:
b4:cf:0c:01:26:e5:97:b5:f8:84:7b:ad:b3:98:59:3c:7c:e1:
47:12:b3:50:19:21:da:8c:f9:b8:b4:c8:ae:71:8a:e8:96:5e:
ca:87:32:e2:7e:a0:ab:0c:c9:84:91:02:98:61:51:a9:e9:86:
97:27:47:98:a7:b0:f0:ab:aa:ef:bb:af:49:93:99:cb:48:9a:
b4:09:7c:ff:f4:25:ee:de:74:c2:e5:cf:95:75:b0:eb:dc:40:
4e:62:42:fa:d2:91:fd:c3:08:93:1d:b6:ab:e1:3e:2f:08:85:
46:39:01:7b:4b:dd:c1:83:27:86:ef:c5:db:4f:d7:79:a3:9c:
48:a7:9c:bf:ff:02:40:f4:65:11:41:2a:b0:ed:c8:71:f2:9e:
ff:dd:ac:a1:7b:68:d8:84:c4:67:2d:f6:80:ab:a7:99:9a:a6:
2b:92:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:30:17 2025 by rpki-client