Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/xYyPdq_NWrPVIF7nhYCz2QJxi9Q.roa
File: xYyPdq_NWrPVIF7nhYCz2QJxi9Q.roa (raw, json)
Hash identifier: 5y/3HC5f44BGBF0j+7MDDQGSG/LTVOFU521HEC1JPrQ=
Subject key identifier: C5:8C:8F:76:AF:CD:5A:B3:D5:20:5E:E7:85:80:B3:D9:02:71:8B:D4
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01949418955D108DEC6D50B6E181F612A4A8
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/xYyPdq_NWrPVIF7nhYCz2QJxi9Q.roa
Signing time: Thu 23 Jan 2025 16:57:06 +0000
ROA not before: Thu 23 Jan 2025 16:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213808
IP address blocks: 92.119.228.0/24 maxlen: 24
188.119.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:18:95:5d:10:8d:ec:6d:50:b6:e1:81:f6:12:a4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 23 16:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c58c8f76afcd5ab3d5205ee78580b3d902718bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:ec:14:63:26:38:34:07:e4:32:dd:f8:c2:
d0:42:d2:93:f9:f9:80:80:50:23:45:c8:4b:c4:66:
8c:62:81:21:6e:e2:68:28:13:75:87:57:6f:35:c3:
95:29:2a:e1:61:b9:32:b4:64:18:09:32:d7:6e:cd:
62:08:c9:ba:49:6b:4f:3b:52:c3:aa:7c:30:40:a1:
5c:02:a5:f6:2b:a2:15:b3:8c:26:58:2b:20:e5:5f:
fe:ec:5d:66:d4:fb:2c:cc:e1:10:40:c2:47:06:43:
42:ef:39:36:3e:ce:bb:98:c0:03:9a:4a:0a:96:a9:
ba:27:2a:50:95:04:54:21:0a:77:ba:1e:7e:90:63:
ed:6e:c0:43:3f:0f:ba:49:41:44:38:2b:1c:f7:4d:
4c:54:f8:50:fe:d8:1b:2a:3f:52:c9:a1:f0:dc:ee:
34:5e:13:cb:ab:d0:4b:60:ec:5a:7f:55:78:4c:16:
05:cc:2f:d5:64:78:7f:ec:5a:47:6b:a5:ef:37:65:
61:96:1c:6a:96:a2:9c:a8:5c:f9:d2:07:41:21:ce:
11:7a:e0:32:2f:c6:29:2c:33:a0:db:73:46:c0:2d:
50:61:81:82:f7:67:1e:6b:44:48:35:85:39:d8:c2:
4a:12:8e:38:07:b5:b2:7e:fc:ca:f9:f0:99:aa:57:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8C:8F:76:AF:CD:5A:B3:D5:20:5E:E7:85:80:B3:D9:02:71:8B:D4
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/xYyPdq_NWrPVIF7nhYCz2QJxi9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.228.0/24
188.119.66.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c2:3d:1a:50:5a:83:10:b3:52:de:1a:5f:a5:9b:70:ff:db:
bb:43:b8:06:6f:95:c1:53:a6:bb:79:35:1d:7f:31:a5:0c:be:
72:c3:1e:27:e0:f3:03:d9:9a:cc:6a:57:bb:a2:16:88:c7:64:
9d:70:e3:2a:32:40:6a:4b:b0:c6:48:da:ee:5d:30:bd:1d:82:
22:f8:02:ba:18:d2:15:dd:a7:65:77:9d:49:6a:7a:93:72:ba:
4b:bc:92:b1:f8:27:37:3d:8a:75:37:58:81:a1:3c:4b:78:f3:
f7:11:23:74:26:4f:47:c4:7b:f0:b9:62:ef:87:52:88:07:65:
85:59:17:2e:be:cf:f9:07:31:e3:07:c1:4c:15:bb:ca:0a:7c:
b2:69:93:e4:f6:96:a9:3d:4b:34:ad:7b:e3:de:53:ed:2e:6a:
1a:5d:e6:f3:66:b2:16:9b:65:e2:e6:76:c6:9f:64:0a:03:e7:
9d:29:05:5a:23:7d:ca:ad:1d:7d:d4:31:93:ad:2a:ea:e2:d3:
11:ff:2b:1a:72:d0:ad:5c:3c:21:a9:41:f5:f7:32:7c:b8:69:
ad:30:24:26:59:cc:28:89:6b:9e:d2:8e:ad:60:4b:77:38:5d:
11:1f:1e:05:71:95:5e:56:43:75:dc:c9:84:12:53:89:a7:57:
96:28:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:27 2025 by rpki-client