Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XpNQgPZppyOvaVC0YGr-xbezBfo.roa
File: XpNQgPZppyOvaVC0YGr-xbezBfo.roa (raw, json)
Hash identifier: uPdXN3uIv16ksePJXKlYEqlER/vkuqj+glA6iK0ySbs=
Subject key identifier: 5E:93:50:80:F6:69:A7:23:AF:69:50:B4:60:6A:FE:C5:B7:B3:05:FA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485D6A0F110DD7ABAFC0CB0987C477
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XpNQgPZppyOvaVC0YGr-xbezBfo.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49862
IP address blocks: 194.103.21.0/24 maxlen: 24
2a01:280:3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5d:6a:0f:11:0d:d7:ab:af:c0:cb:09:87:c4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e935080f669a723af6950b4606afec5b7b305fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:f6:db:af:0c:ee:c5:db:32:16:3b:34:94:
6f:09:05:5d:ad:34:2b:e3:05:f2:b7:7e:0f:3f:5b:
4b:14:e6:65:55:bd:df:ad:47:fc:29:09:4d:39:c8:
9d:c0:b4:13:2f:bd:ed:18:bc:69:86:03:74:32:a6:
97:85:e1:8f:3c:a8:7f:c9:f7:df:92:ef:e2:99:e9:
82:ea:af:e7:11:d9:3d:d8:aa:23:58:4b:da:9d:cf:
15:8d:e4:d4:18:82:14:f3:1f:e3:8e:11:e3:02:a0:
ab:bf:da:a4:e5:e8:77:54:7a:72:f4:4d:a9:98:15:
35:00:e1:f1:28:95:d0:34:9a:3d:a0:6a:bb:93:78:
b9:c8:8a:ec:c7:9b:ce:b0:c5:be:3f:63:b9:05:e5:
3a:ed:ad:57:49:ea:3e:a4:34:c9:a4:9d:ec:8d:44:
8d:c8:ba:f7:f9:97:5f:90:ef:38:2a:02:1f:7e:11:
98:48:e8:0f:91:27:d4:28:37:8f:38:c9:3e:7b:a5:
46:40:83:56:0d:05:ce:c3:96:5f:e3:9a:09:ed:30:
cc:4d:0f:a7:ba:87:8b:d5:ea:ac:fe:27:7f:74:57:
f6:cb:24:ba:92:df:26:0b:ed:07:b3:8b:f5:d4:25:
e2:6e:f7:c0:3f:cd:42:c7:03:57:72:b3:11:77:a0:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:93:50:80:F6:69:A7:23:AF:69:50:B4:60:6A:FE:C5:B7:B3:05:FA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XpNQgPZppyOvaVC0YGr-xbezBfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.21.0/24
IPv6:
2a01:280:3c0::/48
Signature Algorithm: sha256WithRSAEncryption
64:31:c8:5f:b4:2a:ff:c3:69:b1:53:77:2e:1c:b9:9c:49:a4:
c6:91:ef:1c:45:8f:94:c6:70:d7:98:03:d3:36:8a:05:9b:a5:
84:2c:75:17:8a:52:6d:0b:d7:61:1f:99:73:cd:66:8c:d9:78:
60:40:c9:d6:b4:b0:f1:ae:dc:5c:25:46:4c:4c:f7:f0:38:8a:
ff:39:cd:01:88:17:69:22:53:84:06:b4:44:95:e3:97:e2:f1:
e1:20:50:3c:c2:84:2a:a4:2f:3e:ed:3c:1f:03:08:90:42:a6:
f6:7d:f7:da:19:55:bb:c5:3d:9f:eb:98:c5:4a:03:f5:86:96:
37:3d:5d:bb:e1:3a:6b:01:d9:e7:ba:98:40:51:8b:18:3a:62:
b9:92:c0:66:90:8a:e4:97:e1:77:f5:e5:74:2c:f8:38:26:ed:
d9:93:88:ce:c2:7f:6f:72:06:77:1f:46:f5:e1:28:25:75:79:
69:a1:35:37:98:2c:91:a0:e3:50:cd:1f:18:91:a4:da:96:b1:
ef:f4:bb:d1:14:74:fd:46:6e:e7:fc:14:d2:b2:79:9e:79:1f:
4f:cd:77:38:3d:f4:fc:e7:40:bd:1e:31:d6:32:6e:47:35:f3:
2a:31:22:30:7e:c0:56:15:39:66:63:a6:b6:94:74:c7:16:2a:
1f:ca:63:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:29 2025 by rpki-client