Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa
File: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (raw, json)
Hash identifier: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=
Subject key identifier: 5C:EA:95:2F:84:25:81:DD:AA:8F:F4:76:A3:7E:6C:0C:D4:87:26:4C
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 01941FFA1F6DEA50FA2C239A926762568134
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 217.169.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1f:6d:ea:50:fa:2c:23:9a:92:67:62:56:81:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cea952f842581ddaa8ff476a37e6c0cd487264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:b9:dd:5e:49:70:42:86:9a:ce:9e:09:53:
61:f0:bd:90:c8:9b:c7:da:24:df:06:c8:5a:7f:6b:
a5:a1:07:23:af:a3:fb:42:b9:36:da:b7:ca:17:89:
47:b5:46:95:47:49:d2:1d:ae:a8:b8:dd:25:cf:8d:
f6:bc:05:67:d2:90:37:c7:a8:85:f9:90:ad:4a:0d:
8e:13:8e:3a:62:6f:a8:31:22:44:8f:2c:85:d0:24:
7c:fd:33:c4:fd:63:85:da:b3:cd:e4:60:10:a8:4a:
a3:85:f2:e1:5e:9d:b9:d0:d9:62:d3:e0:77:48:2d:
e6:cd:61:aa:fb:f8:7f:30:3f:06:5f:a1:70:87:e4:
4c:c0:4d:ec:7c:b6:e3:7a:80:bc:18:80:eb:ff:86:
01:fe:65:18:04:da:d8:0a:b4:65:84:74:03:62:29:
2d:eb:45:19:38:d0:75:70:d5:75:fc:47:af:fa:20:
d3:bc:bd:08:3e:e9:bd:a7:d8:e0:18:a3:07:cf:68:
a9:26:97:62:8d:57:70:a5:c6:85:76:17:dc:ac:7a:
3a:5a:72:04:7d:45:9c:7c:0a:e8:af:1b:3e:fc:3f:
19:10:91:61:ef:8e:e8:e4:cf:d7:cd:58:3f:80:27:
75:c4:4a:08:42:4b:fb:61:f8:de:dc:0e:b1:b3:f8:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:95:2F:84:25:81:DD:AA:8F:F4:76:A3:7E:6C:0C:D4:87:26:4C
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.118.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c1:3f:5c:0c:8a:23:36:24:a9:f4:3b:23:9c:97:1f:82:18:
32:af:05:cc:15:e8:5e:36:55:87:9b:58:7d:7b:45:28:80:93:
24:9c:a4:6e:90:02:1a:f1:99:3c:2f:60:c3:fe:c1:3b:5e:39:
71:b3:60:09:e1:ad:c4:30:5a:3a:91:a0:5d:86:24:f9:8c:d3:
58:9b:c3:bc:fa:01:87:6f:8f:c3:b9:77:88:c3:b8:6c:57:26:
50:3a:41:db:d6:b0:19:a4:d3:84:10:3b:d3:b3:9d:4a:ae:6d:
0b:20:a4:5f:b6:57:d9:94:b5:f0:b2:ef:46:29:6e:f2:3a:9d:
68:3a:ee:95:d0:b9:65:80:48:d2:b5:24:a5:6f:d3:a3:4b:bd:
c2:62:0a:ad:25:31:05:b1:92:d0:b0:bb:08:c6:72:a7:25:28:
e3:33:a4:8d:9a:51:66:ef:4a:6e:22:ac:b0:da:0c:08:1a:bf:
3d:6a:1b:df:4b:8c:6a:b1:93:94:3f:f5:0f:73:22:c0:10:8b:
9d:7b:2b:9f:cd:5b:c1:2e:69:ba:47:76:1e:40:78:ae:53:00:
c4:68:71:0b:88:dc:6c:7f:21:a8:12:7b:79:ad:ca:35:d7:9b:
a6:a3:4a:e0:6c:1f:98:24:0c:6b:ac:72:9f:72:f5:e2:77:3c:
9f:6c:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:09:20 2025 by rpki-client