Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/XgCZLSw672Y4fHLKF3VdR-oVpqY.roa
File: XgCZLSw672Y4fHLKF3VdR-oVpqY.roa (raw, json)
Hash identifier: ZVPJim/tPagRJuy806SzJxw1pNpmAJ8WphC4x+fYVdY=
Subject key identifier: 5E:00:99:2D:2C:3A:EF:66:38:7C:72:CA:17:75:5D:47:EA:15:A6:A6
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 0194266A0F2C0ABEE258B149E651288CE1A6
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/XgCZLSw672Y4fHLKF3VdR-oVpqY.roa
Signing time: Thu 02 Jan 2025 09:47:52 +0000
ROA not before: Thu 02 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41528
IP address blocks: 109.235.174.0/23 maxlen: 23
109.235.174.0/24 maxlen: 24
109.235.175.0/24 maxlen: 24
185.71.158.0/24 maxlen: 24
2a00:1968::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:0f:2c:0a:be:e2:58:b1:49:e6:51:28:8c:e1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Jan 2 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e00992d2c3aef66387c72ca17755d47ea15a6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:15:a0:4d:c5:d1:07:22:1e:5d:9b:28:c7:
f6:84:47:5a:0a:ef:79:a5:6a:72:a8:db:9d:fe:80:
ba:8c:98:dc:26:40:81:1e:9d:06:4e:8c:48:4b:12:
7a:7a:6e:3a:25:d3:7b:8d:02:65:c0:10:29:87:de:
83:9e:64:80:5e:64:1b:9d:6f:32:2b:fc:e1:71:9f:
97:fc:87:b5:f7:5c:5e:d5:d0:78:02:16:26:85:f0:
24:0e:cf:b6:cd:17:b2:53:52:68:57:59:60:e3:0b:
7f:e7:40:00:5b:96:d9:05:68:9c:b0:e4:76:31:51:
62:56:47:0c:e8:d8:d2:22:03:d3:c4:94:5e:f2:93:
b7:63:b1:eb:ac:3a:9d:e5:21:29:60:46:08:30:98:
57:7e:2f:21:a9:7b:4a:2b:20:55:09:66:20:04:7c:
61:e8:ca:30:e5:83:0e:59:a2:8e:d0:48:a1:dd:76:
93:1c:a4:b7:dc:09:0a:9c:89:89:b5:2c:37:e7:79:
a1:2c:1c:44:62:d3:4c:75:fe:21:48:83:0a:a3:54:
d3:8e:a5:93:c1:0f:44:ee:40:97:3c:89:72:a3:87:
15:4e:43:f6:66:e6:bb:50:80:fd:c0:22:af:ed:22:
6b:87:0d:01:69:45:e8:d2:f9:b3:c5:7d:f0:37:d7:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:00:99:2D:2C:3A:EF:66:38:7C:72:CA:17:75:5D:47:EA:15:A6:A6
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/XgCZLSw672Y4fHLKF3VdR-oVpqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.174.0/23
185.71.158.0/24
IPv6:
2a00:1968::/48
Signature Algorithm: sha256WithRSAEncryption
63:bf:c1:97:f7:a3:df:37:4e:d1:e0:0f:3e:c4:e8:42:c4:32:
85:81:c0:e3:7a:de:a2:64:ca:c9:2d:3b:fb:4a:57:1d:73:f4:
73:5a:29:41:8d:b6:6c:8f:86:31:81:c2:86:ab:e3:43:37:9e:
b6:6c:82:02:dd:29:dd:81:d1:b5:ca:ca:03:6b:b0:74:f9:c7:
0d:2d:a3:72:9f:c5:30:c7:84:da:1d:86:f9:8f:11:e1:76:57:
6c:77:03:0c:ec:67:29:0d:a5:78:74:35:c8:00:f0:a1:36:d8:
e1:66:4a:4a:b7:4a:57:a5:67:9a:45:84:62:b5:19:1b:c0:32:
6a:aa:7f:a5:ef:2b:2a:25:00:53:d7:89:e5:21:c9:26:67:fe:
b5:3f:4b:0a:57:cf:df:e6:b8:4c:52:59:5a:1a:c9:c4:2e:7a:
fd:d4:9d:af:9a:32:85:aa:db:6f:28:dd:73:2d:81:94:3d:38:
38:8e:26:ff:ad:6a:56:64:03:23:1e:56:7f:59:a2:59:42:9d:
8d:a8:e4:b2:8f:bb:a8:32:69:b7:3e:bf:19:5c:25:55:b1:97:
c6:e8:69:fd:c1:94:d1:a1:84:2e:f6:ba:e0:8c:b0:85:81:4a:
26:8a:4a:13:7c:db:14:71:49:30:36:8a:17:45:b6:82:8f:53:
98:eb:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:27:37 2025 by rpki-client