Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/XDIQZzxZW5-uUuoXNVfYPGALZY8.roa
File: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (raw, json)
Hash identifier: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=
Subject key identifier: 5C:32:10:67:3C:59:5B:9F:AE:52:EA:17:35:57:D8:3C:60:0B:65:8F
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 019420D64B82F3B7C7691D4CD4F7EAB289A1
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/XDIQZzxZW5-uUuoXNVfYPGALZY8.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57997
IP address blocks: 176.110.116.0/23 maxlen: 23
2001:67c:1070::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4b:82:f3:b7:c7:69:1d:4c:d4:f7:ea:b2:89:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c3210673c595b9fae52ea173557d83c600b658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:2e:8a:e5:d5:ba:fd:4d:6a:c2:d1:3b:e6:
ef:42:27:cb:09:53:4a:13:cb:8f:f0:57:de:4d:d0:
55:b6:ee:72:dc:29:a3:53:3e:b0:24:80:31:51:72:
1a:3f:f3:db:b2:05:e6:c5:72:f4:3f:8f:80:e1:2d:
9e:0e:71:9f:02:57:7b:f6:cf:f8:ac:ed:dd:57:87:
40:f7:05:bf:cd:09:22:bf:51:d9:69:cd:5c:95:9e:
95:2c:96:70:c0:0d:49:8e:94:af:60:a0:8b:6a:cf:
c0:a9:67:fc:72:c5:3f:f3:aa:50:8d:92:81:f9:a9:
06:9a:0a:a2:d3:f3:76:88:20:aa:7f:f1:b5:75:62:
e3:9e:35:bc:c0:ae:0d:89:4f:33:f2:72:41:f8:ed:
b2:9b:73:19:75:ec:72:4d:2a:00:20:b8:f8:f4:29:
99:91:15:77:57:fa:a8:c3:b3:a8:e8:9f:61:ab:13:
a8:70:a9:14:88:11:00:40:38:fd:ad:14:aa:71:fc:
48:03:3a:dc:73:60:cc:51:6d:8b:27:39:4d:87:e3:
dc:48:df:1d:6a:a8:c7:97:a4:66:b1:32:84:ef:60:
d2:ac:b3:48:5d:05:48:4b:9c:3c:42:63:95:7b:cf:
31:12:ab:45:24:44:34:c3:a9:96:80:29:dd:94:ef:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:32:10:67:3C:59:5B:9F:AE:52:EA:17:35:57:D8:3C:60:0B:65:8F
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/XDIQZzxZW5-uUuoXNVfYPGALZY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.116.0/23
IPv6:
2001:67c:1070::/47
Signature Algorithm: sha256WithRSAEncryption
b0:84:db:73:56:d7:7f:f8:f4:74:23:5e:8c:e4:9f:70:f5:eb:
1d:4a:bd:40:30:bb:d7:7f:fb:03:91:67:67:fc:21:99:74:f0:
0f:2a:c5:ad:4a:12:6d:ca:45:e8:aa:62:31:97:f0:1c:47:47:
db:72:00:c7:d8:fb:ba:e8:78:1b:d5:aa:0d:6b:e9:ae:71:5f:
84:4d:b5:2a:6e:f6:74:b3:a5:c4:94:e6:5c:db:38:7a:d5:41:
05:4f:e0:aa:96:72:16:7a:58:56:3f:0d:ed:69:f7:b3:a1:08:
07:31:fe:b5:63:a1:34:49:b0:1f:1e:ec:27:ed:44:59:0f:6a:
28:f3:3e:a4:2f:4f:9e:55:c0:ff:d8:57:52:b0:21:1e:6e:d5:
6b:14:e8:73:f2:87:64:b6:08:ca:7c:2f:a7:f0:54:5a:7e:5c:
2e:c3:1b:18:4a:f2:11:6a:91:a8:4d:f9:b9:cd:de:b5:1a:bc:
c8:4d:b4:09:17:77:a5:af:16:47:59:24:68:95:09:c4:7d:29:
e9:84:9b:8e:37:41:d0:69:ec:63:cb:10:c3:a0:69:0e:3e:34:
c9:29:6e:48:45:74:be:ab:91:96:30:f2:1b:25:bf:e1:87:33:
27:e7:e6:cd:fc:b9:50:53:65:01:68:04:e1:64:6d:02:46:04:
a5:6b:07:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:29 2025 by rpki-client