Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/xXBeI29eya94rPehpseNSugXOrU.roa
File: xXBeI29eya94rPehpseNSugXOrU.roa (raw, json)
Hash identifier: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=
Subject key identifier: C5:70:5E:23:6F:5E:C9:AF:78:AC:F7:A1:A6:C7:8D:4A:E8:17:3A:B5
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 0194221F900BC1AAAC39D9E41E70BC0307C3
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/xXBeI29eya94rPehpseNSugXOrU.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50321
IP address blocks: 91.238.104.0/23 maxlen: 23
91.238.105.0/24 maxlen: 24
2001:67c:1528::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:90:0b:c1:aa:ac:39:d9:e4:1e:70:bc:03:07:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5705e236f5ec9af78acf7a1a6c78d4ae8173ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:75:3d:05:fd:55:e9:79:23:1e:3e:c6:a2:
86:87:49:af:21:73:00:2a:9e:21:4b:f8:4c:d1:00:
20:4e:d0:f4:b8:c9:79:6b:7e:52:3d:6f:e4:85:b6:
58:a4:72:5d:2e:a1:3f:f7:33:73:e0:80:ed:7f:90:
d3:ff:3f:51:38:e5:5c:9f:a9:5e:18:76:c5:99:e7:
70:11:71:7f:bc:ae:4c:af:69:62:74:b4:fc:57:72:
e5:29:b9:13:ec:ef:28:b1:52:aa:c7:fd:89:99:16:
48:dd:e2:75:35:2c:f0:79:c5:53:c8:07:9b:33:d6:
b6:a9:d0:57:62:70:14:b2:a6:39:68:4e:dc:27:ee:
9e:53:69:1d:3c:35:cc:5f:fb:07:91:3f:96:fd:79:
7c:87:6a:df:c9:14:ad:ee:a7:15:67:fb:ee:a9:93:
82:f0:9c:5c:4d:e5:a9:67:9d:4c:b4:6f:d7:19:9a:
26:b3:4e:39:af:64:fe:dd:72:87:d2:ed:b8:e0:82:
07:5e:30:ba:14:c4:fc:e2:c6:a8:75:e1:35:55:cb:
61:65:b4:18:29:a5:09:2f:0a:5a:9c:0f:65:2d:0a:
9b:f6:39:93:59:19:fe:bc:ea:4a:79:4f:95:93:86:
94:07:39:a6:cf:67:5f:0a:b4:d6:7c:b1:9b:df:3b:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:70:5E:23:6F:5E:C9:AF:78:AC:F7:A1:A6:C7:8D:4A:E8:17:3A:B5
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/xXBeI29eya94rPehpseNSugXOrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.104.0/23
IPv6:
2001:67c:1528::/48
Signature Algorithm: sha256WithRSAEncryption
a3:4d:e7:fe:f6:82:e4:cd:fd:49:4e:9b:cf:9d:4a:39:c1:86:
82:63:22:87:32:04:14:55:6b:09:86:dd:0f:e2:b5:c0:a4:8d:
f1:60:11:ec:df:04:84:24:a3:85:c0:f3:b7:72:f2:ea:24:3d:
ed:76:e4:b1:85:1e:f7:44:0d:6a:34:f0:a2:80:92:ae:ae:61:
01:48:ff:90:15:5c:76:1c:66:ae:20:b2:ff:91:f1:be:b6:28:
1e:98:81:5e:bc:a9:be:f0:b3:a5:1e:09:95:7f:72:a4:49:a3:
72:1a:6f:33:8f:70:32:2f:2f:36:66:4c:c0:31:df:0e:9f:5f:
72:72:22:4f:07:b3:f6:17:88:a8:81:04:ae:ee:b4:fd:44:29:
6b:0e:bc:94:8f:93:6b:98:99:b8:12:82:1a:ee:09:4e:13:d8:
ad:a3:1b:e5:46:d9:d9:f3:ee:04:a2:d7:b6:33:90:26:8f:1e:
55:76:36:99:60:e3:8c:65:7a:f6:a7:aa:82:43:e9:a8:42:97:
4d:f9:74:f8:a0:b5:1f:eb:36:99:c7:37:c2:c1:03:76:78:09:
ca:90:16:bf:d0:bf:45:c8:5c:7a:9e:1f:05:a8:dd:32:40:12:
57:51:40:ab:ff:4d:17:e4:c0:d3:19:88:39:53:d6:53:b5:49:
73:96:bc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:17:05 2025 by rpki-client