Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xOyDXDSjlESISzzf5hUO9Zxj8rA.roa
File: xOyDXDSjlESISzzf5hUO9Zxj8rA.roa (raw, json)
Hash identifier: CFmR+zkfzBWyhYtIYt+hp8mhkI6GySeOyqTa7/nfcIs=
Subject key identifier: C4:EC:83:5C:34:A3:94:44:88:4B:3C:DF:E6:15:0E:F5:9C:63:F2:B0
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D72FFEA9A7D41AEB22ABAF810FD14C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xOyDXDSjlESISzzf5hUO9Zxj8rA.roa
Signing time: Wed 01 Jan 2025 21:48:12 +0000
ROA not before: Wed 01 Jan 2025 21:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215584
IP address blocks: 92.118.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2f:fe:a9:a7:d4:1a:eb:22:ab:af:81:0f:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ec835c34a39444884b3cdfe6150ef59c63f2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:a8:2b:18:cb:9c:04:69:fe:fb:b0:bd:95:
ce:fa:38:db:b9:67:e3:91:a6:3a:5d:f7:54:5e:0d:
fb:a8:41:4b:7f:a8:89:4c:1a:de:73:de:e2:4e:1c:
ac:73:a4:a6:3c:ff:49:f8:7f:8d:96:80:51:ae:0e:
0d:16:60:fe:00:d4:ff:4d:d5:ff:81:09:b3:fb:f6:
da:1f:98:ca:dc:42:bb:bb:99:a3:c0:c7:79:46:58:
31:a1:2e:f9:b6:98:64:d7:c0:ab:62:ae:64:64:c0:
7e:63:5c:73:d3:91:27:0e:76:12:d3:11:e7:33:34:
cc:c0:d9:f3:f7:ea:6b:ea:fb:a3:7f:bb:62:1d:86:
1d:3c:9d:f4:ee:fb:dd:af:e7:5c:92:cd:43:3a:db:
65:73:f9:f8:fb:a4:ed:fe:71:29:ac:9f:60:ca:02:
b2:9a:fd:84:19:66:eb:cf:82:cf:c8:d4:65:f2:43:
e5:eb:d8:26:b6:e1:82:25:0a:fb:4d:ff:37:1e:ee:
9d:00:e4:63:db:7f:49:80:54:2d:5c:10:e1:10:0e:
0e:d9:5e:a4:e2:73:07:8d:7f:f6:ed:5e:94:95:e8:
10:ac:c0:00:fb:ed:8d:f0:15:71:84:87:f2:20:92:
27:c2:69:b1:d4:67:cd:cf:1b:50:7d:a0:1e:26:b2:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EC:83:5C:34:A3:94:44:88:4B:3C:DF:E6:15:0E:F5:9C:63:F2:B0
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xOyDXDSjlESISzzf5hUO9Zxj8rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.11.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:64:9a:99:3e:72:39:2d:73:28:83:24:a9:ca:87:7e:97:84:
f9:d7:c8:13:b6:80:74:2b:45:30:8e:f7:62:37:cb:61:96:e4:
95:c2:58:7f:99:77:42:6a:a6:b1:63:55:fb:e0:c3:97:f4:26:
8f:bf:47:f7:c9:6a:d6:a7:a9:bb:e7:ea:ae:a0:72:97:e4:9b:
54:08:6c:f0:b7:c9:98:66:5b:dd:32:cf:43:6a:eb:a5:d5:ea:
8f:9f:b9:4b:78:a5:80:de:ef:57:91:d7:12:69:33:f9:05:94:
da:ba:e3:de:e4:ca:eb:9d:24:95:27:20:54:4d:a2:4a:f9:5a:
11:8b:be:9a:d5:ab:a5:4d:7b:66:bc:b0:b5:10:87:e8:2f:5c:
3c:4a:d3:13:9d:d6:bc:c3:c2:9d:c8:81:49:5d:6d:b2:f3:1d:
e1:5a:65:05:ef:ae:6b:b7:5e:3f:bc:af:71:03:17:d7:49:fc:
a9:c0:a9:92:71:15:77:26:06:58:df:0e:ad:ff:b3:3a:72:27:
e2:47:6a:b4:1c:e6:4e:e0:92:37:83:92:96:54:20:32:cc:fa:
31:41:30:c2:fa:78:6c:58:1a:56:4c:e8:1a:c1:d6:98:d5:29:
2a:20:ad:27:3b:35:93:7c:b3:a8:0d:0a:b2:ad:a9:ad:00:47:
0c:c3:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:39 2025 by rpki-client