Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/XwqfYEtRGpVmtxULo8IDWcyQXIY.roa
File: XwqfYEtRGpVmtxULo8IDWcyQXIY.roa (raw, json)
Hash identifier: Qx5i/G9uqQlJ2PX+MsevYGq69DXaRpp3PFojSyjEu/0=
Subject key identifier: 5F:0A:9F:60:4B:51:1A:95:66:B7:15:0B:A3:C2:03:59:CC:90:5C:86
Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928
Certificate serial: 019421B1C12C61C8FEF622927489E9F5AB6A
Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/XwqfYEtRGpVmtxULo8IDWcyQXIY.roa
Signing time: Wed 01 Jan 2025 11:48:04 +0000
ROA not before: Wed 01 Jan 2025 11:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15779
IP address blocks: 194.15.208.0/24 maxlen: 24
194.15.210.0/24 maxlen: 24
194.15.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c1:2c:61:c8:fe:f6:22:92:74:89:e9:f5:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f0a9f604b511a9566b7150ba3c20359cc905c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:03:ab:ba:8b:92:fb:25:8a:76:11:fc:60:
b2:37:29:26:34:5d:ea:47:1e:c7:7c:26:2a:6d:64:
d1:83:5c:d8:34:c5:bc:4c:b4:ac:c8:39:30:8c:70:
0c:a0:4d:16:aa:f7:ce:0e:de:c9:89:7d:02:2b:77:
5e:e8:0f:96:44:75:58:af:14:fe:87:21:bc:d9:6a:
84:65:33:8f:1c:09:c2:ff:2d:4a:5f:92:6b:44:9c:
85:86:2f:7e:9c:bf:0e:20:39:87:31:30:dd:c6:aa:
a4:14:37:59:45:a6:fd:5d:af:ea:f0:fa:0a:4d:33:
58:73:7d:7d:bb:c8:2b:66:95:38:b6:94:b9:67:8f:
12:75:8c:fb:48:a4:a3:5e:6e:5e:41:41:5a:f2:97:
c8:e8:51:05:c7:f6:e0:5a:ce:cc:f8:35:30:54:38:
bf:82:c9:df:64:8c:0e:b7:63:2b:77:72:18:db:ba:
67:7a:16:9c:76:71:d9:45:f2:11:6d:01:6d:9a:0a:
3b:6d:d6:6b:98:6f:af:75:f1:95:18:88:a1:0a:1d:
e8:7b:b0:98:af:8f:f5:6a:e1:cf:94:b8:4e:3f:9c:
65:da:00:e3:43:32:f4:71:f8:4d:99:95:b8:1c:76:
61:63:5f:b3:ce:e4:81:57:fd:84:15:66:49:39:63:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:9F:60:4B:51:1A:95:66:B7:15:0B:A3:C2:03:59:CC:90:5C:86
X509v3 Authority Key Identifier:
keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/XwqfYEtRGpVmtxULo8IDWcyQXIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.208.0/24
194.15.210.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:1d:de:a8:15:e0:41:da:84:3e:64:95:a3:0f:92:24:b3:60:
85:ec:70:ff:e2:d3:fd:39:70:11:c8:cc:1d:0c:ab:c0:93:64:
d3:09:31:43:c3:85:e4:43:43:fc:56:5f:3e:f2:d5:06:b6:47:
36:43:a6:17:0d:20:25:37:d3:81:63:dc:bb:c2:7e:8c:6b:9f:
0a:b7:41:f1:19:21:a3:49:c2:d6:90:e1:2b:82:bd:4c:c3:75:
b7:10:77:2e:82:9f:23:c1:1a:db:6e:c0:6b:64:76:55:83:9f:
47:d4:83:7a:5a:55:22:ec:5f:54:7b:61:2a:05:e1:10:14:1f:
68:54:d3:a0:47:b4:64:94:2e:d7:b9:db:40:d3:22:33:6d:6d:
01:57:2f:dd:fd:3f:10:f0:67:07:f9:b0:1b:3d:e2:17:03:c3:
92:e9:6b:07:a8:d4:4c:f6:e0:bd:b1:e7:3c:b3:10:ce:41:2f:
df:57:2b:1a:03:38:20:e9:f2:2d:80:2e:f0:ad:e1:9b:9d:87:
f8:e8:b0:85:07:71:15:bf:1c:d5:5d:a1:43:91:56:64:7d:17:
07:28:f0:f5:07:3b:f4:f7:9d:99:88:c0:0d:f5:d1:4b:bd:12:
07:62:bc:87:49:dd:9f:ae:ba:c9:70:68:74:dd:c8:57:70:09:
60:9e:84:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:47:45 2025 by rpki-client