Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/XHMaLFAePq5JA6OnHRNtHIpFVio.roa
File: XHMaLFAePq5JA6OnHRNtHIpFVio.roa (raw, json)
Hash identifier: D2PLJ8qBf8PPcZXfN8bgCyLTx+3FXCbn/4NCY4tEha8=
Subject key identifier: 5C:73:1A:2C:50:1E:3E:AE:49:03:A3:A7:1D:13:6D:1C:8A:45:56:2A
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 01942521FFAE84424A9E0519DF20D4DA6F31
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/XHMaLFAePq5JA6OnHRNtHIpFVio.roa
Signing time: Thu 02 Jan 2025 03:49:32 +0000
ROA not before: Thu 02 Jan 2025 03:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38195
IP address blocks: 91.142.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ff:ae:84:42:4a:9e:05:19:df:20:d4:da:6f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Jan 2 03:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c731a2c501e3eae4903a3a71d136d1c8a45562a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:24:f0:57:53:7e:b8:47:66:02:4b:6f:5c:9e:
ea:35:55:36:2a:79:d1:a2:98:b4:ad:bc:f0:d6:d8:
cc:11:c2:c8:ca:ef:5c:44:26:43:98:a0:e1:c2:a3:
81:08:24:f1:ea:cf:fe:64:56:15:b6:39:af:aa:cb:
e6:40:43:78:87:de:d6:f9:05:89:c3:ce:a0:25:08:
82:2d:33:b4:30:12:41:76:15:34:31:3c:05:f6:7b:
6e:26:ef:85:4a:2b:cc:2a:f8:45:a2:44:2e:48:ae:
c0:b8:8f:c2:76:32:93:02:84:68:06:ff:79:91:4b:
1f:a5:6a:d7:06:b2:77:8a:9f:e8:4c:81:5d:b1:85:
97:3f:72:ca:ba:cf:ed:e1:44:81:92:d4:86:63:ec:
67:98:2f:62:d9:b0:43:ac:7a:46:8a:d4:86:fd:14:
1b:e2:17:d7:6b:81:08:7a:fb:f5:8b:9d:7f:f0:a2:
e9:55:3a:1e:99:57:1c:5e:d3:56:fd:c5:c9:c1:07:
ca:79:83:fb:c0:31:39:13:49:f8:b0:3a:a8:21:a6:
5a:2e:6c:dc:34:93:f7:0a:9a:54:0c:64:51:95:22:
68:fa:55:38:c3:98:2d:55:57:07:d6:85:03:c6:4b:
48:5f:c3:74:e1:7a:92:4a:31:a9:74:e0:2e:b8:88:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:1A:2C:50:1E:3E:AE:49:03:A3:A7:1D:13:6D:1C:8A:45:56:2A
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/XHMaLFAePq5JA6OnHRNtHIpFVio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.140.0/24
Signature Algorithm: sha256WithRSAEncryption
59:65:29:aa:b0:3f:58:77:3d:c0:1b:8d:9c:bd:5b:40:0c:59:
a5:27:b4:2c:69:4d:18:48:88:83:d5:3b:dd:25:11:cf:12:bb:
92:b2:a1:33:51:9a:0a:2a:45:e9:e3:95:c9:9d:c1:93:7a:de:
c1:e8:d0:9d:df:4c:86:a7:60:67:18:dc:cb:39:cc:76:1d:6a:
93:d4:29:74:75:96:c8:2b:85:9a:76:e1:c5:91:63:5a:a6:bc:
59:aa:45:2e:2d:d6:5b:35:96:22:08:b6:d3:c8:fa:dc:30:84:
9a:f5:1d:b4:23:b7:15:ee:1f:13:79:f1:d4:ba:d4:da:36:09:
98:c9:35:f3:1c:36:31:3f:bb:cf:26:32:4c:2d:36:cf:1f:4a:
81:85:d8:10:5c:b8:72:0f:5a:b0:59:7e:91:29:49:f0:94:17:
ee:7b:9f:90:58:f0:5e:27:d9:2f:74:3d:19:11:2c:a2:be:a7:
b7:ba:cc:cf:3e:df:09:d1:55:c3:2d:01:01:f1:b3:78:c6:1e:
78:2e:bf:6f:80:2c:71:55:a7:92:40:3b:c3:a6:98:67:db:8a:
74:13:f7:3f:4f:58:db:95:2f:73:8d:8c:51:e1:54:0e:d4:df:
89:30:8f:da:75:ee:78:40:08:11:91:f6:04:9c:f5:07:b8:12:
78:68:e9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:09 2025 by rpki-client