Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/XdkKjnd6LaveT1GpI62K4k3GES4.roa
File: XdkKjnd6LaveT1GpI62K4k3GES4.roa (raw, json)
Hash identifier: l121R1rfPQMMuCi+4Uvt0XCheHbjajXd15YiLDehmuU=
Subject key identifier: 5D:D9:0A:8E:77:7A:2D:AB:DE:4F:51:A9:23:AD:8A:E2:4D:C6:11:2E
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 0194258F72DB60EE901AE7875B95EE43A8FC
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/XdkKjnd6LaveT1GpI62K4k3GES4.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.64.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:72:db:60:ee:90:1a:e7:87:5b:95:ee:43:a8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dd90a8e777a2dabde4f51a923ad8ae24dc6112e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:1e:b1:d8:2d:b6:e8:d0:bc:d0:b0:fa:d5:
29:2a:28:69:b5:44:64:d3:cd:6d:19:49:37:32:ab:
2d:1c:e0:ba:74:11:e5:59:45:f5:ba:6b:89:b2:ea:
bd:fe:1e:f0:f6:e7:9d:f9:d4:79:1d:2c:74:ae:c5:
15:44:d3:93:73:ed:76:e6:b7:e4:9a:a3:eb:0d:a5:
3b:f8:c1:dc:68:21:eb:8e:e6:46:87:2a:c7:e8:3f:
e7:24:4c:af:8b:51:f5:22:33:5c:fe:ee:cf:3e:9e:
da:a4:81:7c:55:3c:dd:75:f5:38:9d:c9:dd:ce:3e:
91:4a:a4:f0:14:9b:39:1d:f7:16:0e:94:75:64:aa:
51:03:de:ac:c1:f7:41:cf:0b:1f:1c:d5:a5:9c:5a:
d7:be:2b:bb:aa:ed:a1:a9:48:a0:ec:a6:c8:70:21:
32:cb:fe:ff:14:16:9e:cb:12:3d:8d:a1:90:b3:ff:
cb:7b:c8:c4:0e:50:92:35:c5:e0:73:37:6e:c9:25:
57:85:3c:f2:41:53:5d:54:05:c1:b8:36:42:9d:46:
bf:63:60:c7:15:91:e6:74:94:82:aa:2a:d6:49:b9:
48:c5:b7:d7:c0:4a:5c:95:65:0b:65:c2:5f:18:e4:
ed:72:6c:cf:5f:61:c5:53:4e:5a:7b:7c:23:c8:3c:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:0A:8E:77:7A:2D:AB:DE:4F:51:A9:23:AD:8A:E2:4D:C6:11:2E
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/XdkKjnd6LaveT1GpI62K4k3GES4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.78.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1e:8d:fe:db:0c:9f:e1:a1:49:ef:fb:bc:7a:16:68:11:86:
ba:a7:1a:17:ae:4f:db:e6:07:09:a2:fb:d9:29:f8:a2:e2:56:
40:56:a2:69:ea:86:b6:bf:a9:a1:39:b5:58:99:58:c4:0d:0f:
98:78:24:f5:37:68:b7:5a:5c:0d:27:d1:3c:09:81:48:99:16:
95:51:6b:fd:0d:7f:17:b7:e5:80:ae:09:86:e3:c1:26:dd:49:
af:75:e8:70:49:8d:94:d8:fb:39:a4:ee:f8:7e:c2:65:66:4d:
48:60:5f:de:c9:36:2c:c9:93:af:d4:3e:42:b8:7a:1e:b5:79:
4c:ee:29:c5:fe:0d:d1:03:36:ed:e3:de:13:53:82:41:24:71:
88:c0:3b:e4:4f:f6:1b:b9:d3:c6:5d:7f:b9:83:d7:ec:6b:dc:
c5:0f:e6:19:f6:d3:b8:20:22:b3:36:50:7a:79:51:ce:24:b2:
4c:d4:b6:ab:55:84:24:04:4b:d4:d9:e0:69:e6:eb:e9:40:a2:
9e:e2:d3:18:be:a7:39:38:7f:22:88:27:28:0a:d2:86:44:c9:
ab:d2:b6:40:42:7d:21:a7:5b:46:a5:ab:7f:8f:e2:15:cb:10:
98:5a:6a:18:f9:c0:0b:de:3e:18:c7:31:38:a7:3d:d2:eb:1f:
82:90:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:37:11 2025 by rpki-client