Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/XWD-zi0UJlO0eJTs8SOHiua0h5g.roa
File: XWD-zi0UJlO0eJTs8SOHiua0h5g.roa (raw, json)
Hash identifier: 3swVSLKR9W1axBASs3yWAbtds/Upc6xrF38EziNOYWg=
Subject key identifier: 5D:60:FE:CE:2D:14:26:53:B4:78:94:EC:F1:23:87:8A:E6:B4:87:98
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D718FFCC0CBC61D730901103731556
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/XWD-zi0UJlO0eJTs8SOHiua0h5g.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199726
IP address blocks: 45.95.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:18:ff:cc:0c:bc:61:d7:30:90:11:03:73:15:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d60fece2d142653b47894ecf123878ae6b48798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:50:7d:23:2c:f8:ea:0b:78:cd:cb:05:ea:
50:b0:f3:e8:5c:f6:15:10:00:f0:bd:83:52:f4:5e:
e9:4f:eb:0d:d7:fa:c2:32:cb:6f:35:19:46:f6:f6:
2d:12:89:57:27:b7:3c:7d:85:0a:cf:98:6d:f1:00:
20:b1:f1:8f:1f:f8:d5:29:c8:f4:ea:b4:fe:fa:c0:
ef:26:3c:3e:e3:67:b3:1a:0b:c1:a1:9b:9a:63:70:
b2:6b:46:b0:d1:16:d3:bd:67:47:65:9d:2e:aa:74:
55:b5:00:b1:83:0f:d3:b6:96:98:0f:7a:f9:5f:92:
1d:b6:b8:d4:db:8f:a7:fd:07:64:b8:44:a7:e2:97:
1c:c8:ea:a3:ba:1e:07:ad:32:36:15:be:0b:db:d3:
3d:f2:28:63:4d:bb:91:19:6e:67:ea:7e:65:b1:ef:
7b:6d:2c:e2:f4:6e:4d:e9:40:ce:d7:e4:e1:7e:86:
a1:ab:6e:db:49:19:a4:81:39:f8:57:94:7c:94:7d:
e4:e7:50:d1:17:c2:3e:83:7e:d4:84:dc:87:6a:1e:
8f:e6:70:e2:00:53:37:1d:fe:78:1d:76:70:bc:54:
02:ee:a3:e5:98:3e:17:0d:36:7a:a7:f5:25:97:a2:
d1:b4:d4:cb:c1:4e:e7:5b:b6:2b:3a:71:81:5f:d5:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:FE:CE:2D:14:26:53:B4:78:94:EC:F1:23:87:8A:E6:B4:87:98
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/XWD-zi0UJlO0eJTs8SOHiua0h5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.200.0/24
Signature Algorithm: sha256WithRSAEncryption
53:45:09:c9:89:42:d3:f9:43:d0:00:2e:f4:51:3a:21:63:2f:
7e:bc:c5:ef:f1:66:97:fe:91:4a:dc:7e:c6:24:45:83:af:40:
cd:db:c2:77:7d:20:2e:4f:94:44:40:97:b3:5f:39:41:2d:6c:
e7:3d:c4:bd:ff:9b:4a:58:04:24:38:d0:af:21:00:41:47:45:
44:c1:52:3e:db:ad:c3:7e:9f:66:1f:86:27:67:15:a1:22:6c:
92:96:a1:36:5e:6b:44:60:61:be:68:f4:71:26:6e:7d:79:75:
45:86:4e:8c:31:8f:ca:4b:35:5f:cb:78:91:41:b8:1a:18:b6:
09:19:e6:f5:f4:fb:f5:36:9f:35:f4:f9:e8:c7:e1:7e:39:38:
35:bf:3a:e5:41:92:a6:e8:c3:d0:ce:6f:6a:e2:f2:c1:8f:fd:
e6:ee:10:50:be:26:97:b6:7c:f0:1b:b5:a2:f6:70:5b:d6:08:
58:a3:15:c4:23:6f:4b:18:d8:90:eb:b7:fe:14:7f:de:6b:94:
67:c1:a3:bc:9f:03:01:dd:16:7a:3c:ff:40:c5:b1:f4:0b:79:
5e:c6:02:78:57:a8:f8:d7:61:04:37:02:f1:2d:2d:e2:65:fa:
76:4a:0e:ec:55:5f:05:bd:2f:03:f2:35:5d:9c:44:5f:a7:02:
ed:44:8e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:47 2025 by rpki-client