Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/XP9c9FnVM83t2BcVhUGYjki34JA.roa
File: XP9c9FnVM83t2BcVhUGYjki34JA.roa (raw, json)
Hash identifier: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=
Subject key identifier: 5C:FF:5C:F4:59:D5:33:CD:ED:D8:17:15:85:41:98:8E:48:B7:E0:90
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019423D71FF4F06708871440AC89B1A0AEB8
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/XP9c9FnVM83t2BcVhUGYjki34JA.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400039
IP address blocks: 194.50.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1f:f4:f0:67:08:87:14:40:ac:89:b1:a0:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cff5cf459d533cdedd817158541988e48b7e090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:b1:1d:f2:fa:3b:c7:5a:20:0b:87:17:e2:
ea:72:e4:81:02:c5:84:2b:4b:18:73:c3:17:07:3d:
e3:5c:db:60:b2:79:1e:b0:57:cc:99:51:de:7f:68:
d2:cc:bc:9e:e4:9b:5b:06:79:68:cd:50:ea:6b:4e:
5f:39:2d:e5:4c:58:e8:37:50:cc:6a:78:f9:d0:5c:
7f:cc:8f:fe:95:e6:a6:0f:92:07:64:04:ee:d3:1b:
9b:ba:e3:8a:6e:e7:a0:e3:86:02:ae:a3:c9:87:6d:
79:13:33:97:b7:ad:c8:45:1b:be:1d:34:93:0e:be:
b7:4f:5e:30:6c:24:62:dc:3c:0f:a1:45:28:90:e0:
88:db:df:e0:56:b8:11:ed:ff:05:18:21:93:ff:fa:
e2:49:df:fd:3e:12:34:50:5a:98:d7:72:e2:95:bb:
a1:44:a7:1e:c6:38:90:6b:24:86:73:f7:85:cd:ae:
fd:17:af:f4:56:98:13:6a:3e:d7:8b:95:67:db:74:
33:a8:6f:6e:35:d4:09:54:16:fc:51:be:0e:10:55:
f0:78:16:cf:12:21:20:40:57:43:75:8a:7e:7b:ee:
f1:c4:c5:6a:c8:93:c9:8a:bb:18:d0:77:ef:b2:24:
ff:56:08:08:aa:ab:2e:53:6d:6e:17:ce:f8:8f:0a:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FF:5C:F4:59:D5:33:CD:ED:D8:17:15:85:41:98:8E:48:B7:E0:90
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/XP9c9FnVM83t2BcVhUGYjki34JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5c:ce:d8:c6:bf:68:be:76:5c:da:8a:66:8c:2e:6b:f0:cd:
5e:f6:4d:c6:61:bb:66:ac:13:3a:68:7e:f3:58:ab:a6:a0:b1:
50:27:92:19:f9:97:78:b9:6b:39:05:3c:8e:3c:13:ff:f0:78:
cc:de:3c:a5:41:aa:a5:44:e7:34:f9:b5:3d:01:41:59:95:3a:
85:89:b5:fb:d8:13:6f:81:78:44:1d:38:68:2e:f7:73:d0:19:
c8:d7:67:a5:ee:3c:10:16:91:e9:32:5a:b9:88:d3:1e:22:23:
3c:22:39:03:95:27:74:2f:a2:c8:e9:97:c9:98:cf:be:a3:e7:
16:79:df:6c:2e:ee:dc:35:50:d3:71:43:7a:e4:07:3d:d3:9f:
c5:88:0f:3e:e1:1d:c1:67:2f:95:a8:ff:29:45:a8:02:62:68:
23:c6:18:fa:1e:dc:cf:21:10:2c:1f:8d:34:74:f2:d4:5f:9c:
d6:e3:be:07:ea:01:50:c7:46:b4:ff:ab:91:34:d8:18:2a:9c:
1e:c4:d3:01:e1:04:fc:b9:f5:0b:18:cc:aa:bc:94:30:5f:f9:
8f:a1:c9:7f:39:d4:48:fd:10:ab:d0:5c:6c:ba:7a:2c:74:ee:
5a:b2:75:00:c4:73:71:8b:fd:ff:e6:3c:38:3b:94:97:35:d6:
61:ff:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:08 2025 by rpki-client