Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/XoKGaT2Y4cimov2MwIZbMUFcNik.roa
File: XoKGaT2Y4cimov2MwIZbMUFcNik.roa (raw, json)
Hash identifier: nUamhX6MnewzR6j8dYV1oqge5T4xxq+U39rAZAcBMTU=
Subject key identifier: 5E:82:86:69:3D:98:E1:C8:A6:A2:FD:8C:C0:86:5B:31:41:5C:36:29
Certificate issuer: /CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Certificate serial: 019420D604B43167764F01BD07FDBF05631E
Authority key identifier: 4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/XoKGaT2Y4cimov2MwIZbMUFcNik.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20906
IP address blocks: 193.108.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:04:b4:31:67:76:4f:01:bd:07:fd:bf:05:63:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a97bc504f3075fb4f39236408c1c2d547b44c26
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e8286693d98e1c8a6a2fd8cc0865b31415c3629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:68:48:94:d3:a5:99:c8:1e:cc:2b:e9:27:
b1:b4:ad:58:25:24:13:74:1a:33:01:bb:b4:17:24:
38:1c:46:19:13:13:e8:9d:d0:bb:c8:ed:9f:a0:5d:
93:ab:f7:bc:cf:57:14:01:95:e0:32:9f:8b:85:30:
01:e0:5a:40:a1:d3:fa:c0:d0:03:4b:51:a4:35:58:
38:04:30:a0:64:d9:bc:8e:68:3c:4f:c1:c0:07:db:
36:2a:e2:a2:42:b8:5b:b9:69:88:cb:c5:aa:10:67:
b7:09:aa:1e:f7:b9:ff:fc:38:3d:67:e5:bb:d3:df:
f5:47:b0:66:cd:25:05:22:2a:19:62:bc:ad:6b:a4:
1a:ef:41:36:bd:09:b4:35:31:23:83:c9:3c:74:9b:
3f:49:80:1a:bd:f1:58:a3:af:e4:6a:c2:f5:bd:17:
44:4e:72:7f:9c:ab:86:fe:48:28:59:4f:36:aa:93:
da:e4:14:8b:d9:fb:08:c9:86:ae:6a:05:50:6a:66:
b0:1c:54:91:e2:45:98:f1:f3:47:0b:22:ba:4f:0f:
88:5b:fc:4a:67:2a:96:84:c1:55:39:3c:de:84:fc:
7e:b1:00:64:55:2e:05:23:af:37:84:ac:d3:73:2b:
31:35:40:fb:f8:ee:e1:3f:b6:8c:4a:b4:ca:82:77:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:82:86:69:3D:98:E1:C8:A6:A2:FD:8C:C0:86:5B:31:41:5C:36:29
X509v3 Authority Key Identifier:
keyid:4A:97:BC:50:4F:30:75:FB:4F:39:23:64:08:C1:C2:D5:47:B4:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Spe8UE8wdftPOSNkCMHC1Ue0TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/XoKGaT2Y4cimov2MwIZbMUFcNik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4501b-18ea-4280-85a4-9329f9179fda/1/Spe8UE8wdftPOSNkCMHC1Ue0TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.174.0/24
Signature Algorithm: sha256WithRSAEncryption
85:72:f4:c6:28:c3:29:5c:c5:3e:1e:92:f8:44:c1:53:37:60:
ff:8d:84:da:91:1a:34:47:70:9c:4a:8d:01:d3:79:f2:40:c2:
ed:5b:25:3b:70:56:94:50:30:60:58:6b:92:e4:ad:ed:19:eb:
67:c1:93:5f:d9:bb:b2:3e:19:13:61:bb:f3:10:b0:0d:11:08:
ed:d5:2f:e3:f4:61:cb:40:df:25:78:5f:64:f4:30:2d:99:19:
f4:20:2e:ec:fe:e4:64:ad:36:0b:05:40:4b:04:25:f9:30:8c:
95:52:17:28:6a:7f:4a:04:74:f3:8b:dd:41:bb:2a:53:82:b0:
e4:7e:26:41:bc:62:30:13:24:f5:be:af:d8:95:38:3e:7b:d2:
ee:0d:81:5e:58:54:bc:37:93:34:9b:28:ea:f5:df:e3:66:2f:
83:29:b6:da:36:d7:d6:f3:a9:b9:c4:3f:31:ef:a9:6d:bd:69:
6d:a0:c5:b2:f9:24:e5:27:67:23:c2:e5:17:b1:04:a5:7d:cb:
9a:4d:f1:76:0a:43:bb:48:f5:63:99:96:56:e3:88:a9:3b:5b:
86:94:15:0b:ce:bf:e1:14:5f:44:ed:41:7e:da:7d:be:53:98:
87:98:a5:c9:90:bf:a7:48:75:6f:ef:d3:9d:88:29:9f:c5:36:
1f:14:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:52 2025 by rpki-client