Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/xV2TYyNPjWPupKmb43ad00Tt3n8.roa
File: xV2TYyNPjWPupKmb43ad00Tt3n8.roa (raw, json)
Hash identifier: +ey9CZvGJrxa71wfksSgu55Jb8r1NMsse9tFxoel7Ig=
Subject key identifier: C5:5D:93:63:23:4F:8D:63:EE:A4:A9:9B:E3:76:9D:D3:44:ED:DE:7F
Certificate issuer: /CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Certificate serial: 019423D70CEAEDBBF288D3D553B77C641A8B
Authority key identifier: 9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/xV2TYyNPjWPupKmb43ad00Tt3n8.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201607
IP address blocks: 185.64.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:ea:ed:bb:f2:88:d3:d5:53:b7:7c:64:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a03525f68eb6b235f1de22b60b1baed2fc7ff83
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c55d9363234f8d63eea4a99be3769dd344edde7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:b0:b1:f2:c6:da:66:bf:57:dd:85:ec:9c:
69:bd:0b:3b:03:1e:af:2b:2b:0d:73:03:da:ab:92:
b7:13:74:7e:57:ac:63:bb:57:38:94:58:a6:a8:ff:
53:f9:6b:06:51:88:f6:b2:a8:08:f1:97:62:18:6d:
2d:3b:5a:6c:ba:50:82:80:83:c7:f7:80:29:82:20:
54:61:d9:9e:f2:bc:5a:bd:e7:a2:c1:5f:25:33:1f:
bc:95:1b:24:64:31:5b:4b:fd:5e:5f:92:15:74:e9:
5c:98:2e:5b:ed:38:d0:74:09:5d:14:07:95:8a:5a:
d0:1d:c4:bb:b1:c1:09:2a:94:c4:c5:a6:65:49:83:
ce:6e:d5:ef:9c:bc:b6:5d:e2:69:b1:1e:99:89:d5:
8b:eb:60:72:12:aa:e9:69:51:fe:f6:1b:b7:24:c7:
67:c8:bb:5e:d3:fa:2e:41:f0:18:53:19:30:7c:b9:
9d:82:67:98:c7:13:ff:46:e9:74:22:ce:76:eb:2b:
75:20:e6:0c:7b:0b:cb:b6:58:9f:fa:76:c4:1f:4e:
56:de:ab:6b:4b:f6:3b:f9:ad:2f:c8:cf:08:d1:a8:
f7:1f:6e:a1:a5:9a:75:7a:42:a7:95:f3:91:8a:4f:
a5:6f:d1:6f:19:4d:e2:4f:95:10:d5:7a:d2:b6:d1:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:93:63:23:4F:8D:63:EE:A4:A9:9B:E3:76:9D:D3:44:ED:DE:7F
X509v3 Authority Key Identifier:
keyid:9A:03:52:5F:68:EB:6B:23:5F:1D:E2:2B:60:B1:BA:ED:2F:C7:FF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgNSX2jrayNfHeIrYLG67S_H_4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/xV2TYyNPjWPupKmb43ad00Tt3n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5a7e46-ce1b-4955-9f39-4b311326c230/1/mgNSX2jrayNfHeIrYLG67S_H_4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:3e:72:3d:02:59:b2:00:b8:60:ee:8a:b9:f3:4c:ef:3c:c7:
05:82:4b:df:31:ae:50:5c:43:5a:c6:87:d2:6f:41:9b:07:2b:
a3:0c:31:1c:cb:97:7e:50:a3:2f:8f:34:5b:a6:a0:19:54:a1:
6b:4d:e8:38:26:22:e8:e2:20:b8:71:b4:68:f7:52:b4:34:0b:
49:31:db:51:47:f4:d4:0a:e9:e7:da:52:77:94:f0:b8:d1:0b:
6a:ae:ad:43:ac:5f:a3:cc:f3:c7:67:82:c8:6d:e4:92:d4:38:
b3:92:c5:8c:ee:d7:3f:dc:a4:ea:20:d0:d5:52:fb:91:4d:75:
2a:a1:8d:76:63:18:8d:1a:65:41:17:cd:90:fc:b5:91:4f:6e:
96:96:68:8c:bc:11:80:e8:f7:24:ac:a1:8f:2e:4e:ed:6f:e4:
85:6e:ad:40:5e:c9:66:b0:79:e9:45:95:b5:45:75:3b:34:4a:
dc:7f:86:c9:53:2f:27:5c:e1:18:82:0a:4a:29:75:c4:27:50:
92:2b:b2:3a:aa:ca:67:8d:d8:64:59:59:5b:e0:6e:76:b0:49:
96:90:7c:c6:0d:a7:c0:a4:25:b0:54:89:90:65:c9:23:00:9a:
b7:2d:92:06:fa:a1:13:18:8c:45:c9:94:68:7f:51:d5:d7:5c:
56:50:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:26 2025 by rpki-client