Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/XYTPsqrRjFt2AcvYCap2e2yz93s.roa
File: XYTPsqrRjFt2AcvYCap2e2yz93s.roa (raw, json)
Hash identifier: Kn1lsHWRvXKbCBaB+H+cKPNwO5N2Gs/SXNbPpw2oiTI=
Subject key identifier: 5D:84:CF:B2:AA:D1:8C:5B:76:01:CB:D8:09:AA:76:7B:6C:B3:F7:7B
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 01941F8C5008E8F29AB4D353B49C2B09D526
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/XYTPsqrRjFt2AcvYCap2e2yz93s.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 91.223.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:50:08:e8:f2:9a:b4:d3:53:b4:9c:2b:09:d5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d84cfb2aad18c5b7601cbd809aa767b6cb3f77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:d5:d7:02:8f:ed:ec:67:ff:bf:b7:8a:23:
d7:96:7b:71:b0:36:8b:63:1e:fb:c6:d0:16:15:ee:
35:4d:fe:32:2f:2c:0f:4d:71:db:06:c4:77:59:e1:
67:77:77:a3:04:5e:c7:64:6d:be:a2:0c:55:e8:9c:
68:71:e9:4e:04:92:fc:26:4c:2b:36:10:4c:2a:44:
d4:04:3d:0e:ff:38:fc:ac:b2:be:83:74:ff:58:95:
65:90:f5:2f:0a:c2:04:75:f5:a5:a7:2b:14:75:25:
5a:12:cd:ea:dd:b6:ba:c9:a0:30:86:c3:bf:25:95:
e6:2c:63:67:05:c3:9b:41:6a:4c:d4:d7:00:8c:19:
b1:d7:52:30:c2:b5:7f:a7:8e:25:ff:cc:8f:28:93:
96:8c:f9:b1:4e:f8:77:60:55:41:af:e2:80:60:6b:
25:31:c5:16:71:f8:9a:b1:2f:15:40:50:e0:2d:fc:
25:98:d0:71:57:ef:bc:e6:a4:dd:9f:11:7c:c4:02:
29:cb:7d:7a:f9:d3:15:09:0f:2d:cf:c9:6b:f0:83:
73:47:f4:80:c7:a6:a6:d6:e4:ea:68:95:cd:79:7c:
50:a3:e6:8f:6d:a5:23:80:73:03:f5:4d:c2:19:84:
9e:31:4e:cb:bc:12:44:d1:32:a0:d6:b4:1b:7d:a1:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:84:CF:B2:AA:D1:8C:5B:76:01:CB:D8:09:AA:76:7B:6C:B3:F7:7B
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/XYTPsqrRjFt2AcvYCap2e2yz93s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.35.0/24
Signature Algorithm: sha256WithRSAEncryption
47:db:8c:04:d8:39:0d:d6:f9:83:b4:44:60:9c:6c:a6:54:a0:
80:f4:7b:dc:4c:a2:41:46:d5:fb:2a:79:29:70:27:c4:2b:d9:
a4:28:7d:46:f1:67:b4:2a:eb:71:34:94:54:8a:4d:80:2a:8e:
05:f2:14:8a:4d:09:3c:be:fd:a6:40:33:43:96:f1:23:41:af:
78:6d:bb:92:67:25:e8:9f:ac:99:ba:67:4f:b1:2e:21:d7:0e:
98:ee:12:2c:b8:3d:39:4d:d4:ee:5a:87:0a:b4:25:6a:02:95:
a3:6e:59:f8:25:10:00:bd:f0:22:15:ac:f0:b4:87:b4:35:32:
c2:46:d0:21:a1:ac:0c:d1:c2:de:9b:e1:7d:dc:3f:8b:60:cb:
16:f3:83:f2:41:79:a5:6f:dd:db:05:76:f5:78:bc:44:9e:c6:
ca:74:bb:60:4f:25:8c:e9:f2:75:1a:e7:28:cc:ce:48:64:40:
5c:2e:a6:db:5a:d4:e0:bf:f0:d2:6f:87:bf:3d:ac:b9:13:8e:
76:a2:1f:d1:86:25:19:39:c0:b1:b9:41:a8:8c:90:ee:6c:b1:
13:c5:9b:20:47:60:8d:f4:7a:67:0a:7d:8f:f0:f1:28:a1:4d:
8b:15:07:91:57:1e:1e:dd:1e:cf:31:c7:c8:ae:3d:7f:39:7d:
32:6a:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:20:28 2025 by rpki-client