Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/XpHeTFY2mYYnagfXksXKRRYL9eo.roa
File: XpHeTFY2mYYnagfXksXKRRYL9eo.roa (raw, json)
Hash identifier: zfpzXDwMseOkymUIjByr6+zStQyrXd89cMIv7XGG4KA=
Subject key identifier: 5E:91:DE:4C:56:36:99:86:27:6A:07:D7:92:C5:CA:45:16:0B:F5:EA
Certificate issuer: /CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Certificate serial: 0195847C3187305FB6208A1DF1AC69040388
Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/XpHeTFY2mYYnagfXksXKRRYL9eo.roa
Signing time: Tue 11 Mar 2025 09:14:46 +0000
ROA not before: Tue 11 Mar 2025 09:14:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.77.98.0/24 maxlen: 24
185.77.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:7c:31:87:30:5f:b6:20:8a:1d:f1:ac:69:04:03:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Validity
Not Before: Mar 11 09:14:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e91de4c56369986276a07d792c5ca45160bf5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:7d:f2:93:6f:18:e0:71:2e:a4:d0:5b:f1:
42:79:d5:c2:74:73:55:c2:90:c3:06:5e:63:db:02:
3b:33:70:b4:96:71:01:dc:e8:42:32:3a:98:99:9c:
c1:bd:46:f6:2d:ac:62:f3:bd:73:17:ca:d5:4a:d8:
e3:34:85:1c:7b:ab:2a:36:ec:1b:3f:50:7d:7c:1a:
b5:ab:40:48:76:25:81:8f:26:77:29:c2:67:08:c1:
3f:1e:ac:d4:61:2d:2a:89:c7:2b:03:ca:7d:25:7f:
e2:64:08:f6:50:dc:65:37:07:9d:c6:23:db:4b:50:
da:7d:e4:20:76:97:04:3b:fc:aa:99:c2:50:78:37:
00:9c:aa:e9:71:ec:d2:04:4a:9e:73:f0:d2:8d:1f:
71:f2:6f:ff:18:a7:47:45:49:47:da:68:4d:90:d7:
87:96:d1:24:f9:0a:09:24:c0:ee:2a:d3:e9:3f:79:
00:45:b4:04:b3:67:f1:35:5d:b8:eb:d1:75:c5:cd:
2d:cb:b1:a0:f4:9b:c0:cc:a1:ea:fb:ed:b0:f3:68:
38:04:e0:96:3b:73:dc:77:44:4c:8a:5c:b8:e7:bb:
8c:29:4e:ef:2b:11:f9:f7:41:9a:69:c3:9a:46:ea:
85:49:e7:10:bc:1f:db:9e:57:cd:6b:94:79:3f:7b:
fd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:91:DE:4C:56:36:99:86:27:6A:07:D7:92:C5:CA:45:16:0B:F5:EA
X509v3 Authority Key Identifier:
keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/XpHeTFY2mYYnagfXksXKRRYL9eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.98.0/23
Signature Algorithm: sha256WithRSAEncryption
04:3e:81:47:20:86:25:a1:f1:2c:92:9a:0d:42:9c:21:98:22:
62:0d:26:36:44:15:07:fd:9e:83:18:37:66:f3:ec:d3:e9:ca:
d0:31:76:98:2d:ed:f9:2b:7d:b7:74:ce:06:28:5d:86:7f:b2:
c4:7a:55:cd:07:74:32:8b:f7:0f:24:e8:27:4a:f6:49:c4:91:
c0:da:d0:be:05:ca:07:ea:1a:88:06:0b:e5:23:fb:fa:bc:3c:
79:d7:6f:8a:08:1d:75:da:88:43:70:b6:76:89:f5:b4:49:0a:
2f:d8:63:2b:8f:2f:19:8f:4d:db:87:f8:e2:36:cc:8a:14:ae:
e2:3b:9b:63:93:42:b7:7f:ec:bc:db:a0:90:55:bb:55:60:0a:
12:26:36:ce:27:91:5e:99:21:ab:d1:de:26:96:d0:dd:0a:b6:
83:07:d7:ba:12:42:ad:2c:96:02:c4:c0:54:a0:7e:2a:7b:ca:
9a:0b:9b:12:88:89:40:31:c0:4a:15:25:c4:0f:83:df:39:d0:
5e:0c:4a:84:ce:a9:e8:5e:48:c5:87:74:0c:9a:06:55:64:c6:
5b:d3:fd:51:aa:75:f1:39:bd:aa:34:7f:21:a2:0f:90:4d:34:
6a:3c:c0:55:72:7b:1a:7f:e0:84:61:50:10:96:8c:8d:19:6e:
77:d0:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:53:22 2025 by rpki-client