Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa
File: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (raw, json)
Hash identifier: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=
Subject key identifier: 5E:21:30:02:15:D2:99:BD:A4:29:07:27:2C:50:8A:6C:52:6B:96:B1
Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial: 01943D0004DC31227A830EF459B446D9C48E
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa
Signing time: Mon 06 Jan 2025 19:03:18 +0000
ROA not before: Mon 06 Jan 2025 19:03:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 91.207.236.0/24 maxlen: 24
91.223.95.0/24 maxlen: 24
2a0a:64c0::/32 maxlen: 32
2a0e:9640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3d:00:04:dc:31:22:7a:83:0e:f4:59:b4:46:d9:c4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Validity
Not Before: Jan 6 19:03:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e21300215d299bda42907272c508a6c526b96b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:6e:cd:97:05:b4:da:90:9e:7c:4b:0a:91:
ff:da:7e:3a:dd:b0:08:d5:6d:10:42:bb:e3:c8:34:
a0:54:a6:7e:b1:5a:80:18:67:3c:5b:88:59:9b:f8:
2f:5a:46:d8:92:dd:07:1d:28:34:d6:66:e2:46:ed:
69:f5:25:2d:90:9a:7f:07:28:c4:06:0c:96:4f:3e:
51:7a:dd:76:27:87:82:27:79:82:ef:ab:76:93:37:
bf:d7:fa:49:c5:cf:e0:1f:37:81:42:f8:f9:42:d9:
ef:d9:4f:e1:3d:c5:df:d5:e5:c5:f4:64:47:a1:50:
2c:09:56:30:e4:7b:ca:b3:bb:b5:23:4c:69:2f:23:
cb:88:d2:79:b2:31:74:dd:ef:e7:bc:3f:58:92:c6:
e5:bf:1b:ca:0b:c9:ad:a4:13:57:31:e6:ba:e7:78:
96:fa:0d:43:60:e2:ff:df:bf:f1:a7:ae:11:f8:6b:
06:8a:96:7e:a6:f5:7d:96:37:6b:ae:2c:84:dd:dd:
f4:76:99:41:9a:74:09:af:39:fa:b7:2e:b1:49:71:
4f:94:d7:67:06:02:a3:bc:ed:27:f2:f1:f2:e9:9d:
5f:f8:46:8a:09:d5:d6:06:98:38:ca:19:7e:0f:4b:
b5:05:07:55:0b:87:dc:81:93:fb:d9:8b:4e:65:8b:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:30:02:15:D2:99:BD:A4:29:07:27:2C:50:8A:6C:52:6B:96:B1
X509v3 Authority Key Identifier:
keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.236.0/24
91.223.95.0/24
IPv6:
2a0a:64c0::/32
2a0e:9640::/29
Signature Algorithm: sha256WithRSAEncryption
7e:d1:42:41:16:7b:9e:35:56:65:90:f3:16:d9:21:fe:2b:9a:
1f:8b:de:19:43:89:4a:8f:73:2f:d6:09:5f:5d:68:a8:db:27:
67:1f:26:dd:14:fb:dd:47:4c:bb:98:35:e1:17:30:bf:80:09:
78:cd:17:05:9c:1c:c5:cf:e6:93:33:fa:d7:7f:de:db:74:48:
05:36:1c:6b:50:92:d8:e2:76:8e:72:5e:28:79:5d:b0:6b:f5:
67:4a:d6:c7:dc:a5:4c:b8:2e:10:b9:c7:db:49:34:7e:b2:13:
d6:a2:b0:76:80:6b:a1:43:b7:cf:52:23:6e:74:95:fb:eb:fa:
51:32:1f:b1:c4:39:b9:98:f0:24:e0:6d:c9:1b:dd:4e:f8:7b:
40:15:51:67:8d:3f:d1:e8:6a:de:76:e0:ed:2a:fc:88:8a:8a:
0f:0e:6f:aa:c6:98:45:7d:04:7a:af:a1:15:4e:3c:85:c4:8c:
a4:24:4d:bd:ec:23:ba:a8:a2:00:73:63:1f:04:bd:9c:ec:cb:
0e:7f:d2:06:16:2e:ed:aa:3d:68:3f:64:f1:49:28:5f:6d:6a:
50:5e:d0:cd:c9:cd:aa:09:52:fa:a3:32:d7:c4:4c:e5:11:e9:
00:21:90:99:63:f6:7e:2b:ac:cf:f9:15:f6:c1:7e:62:23:a8:
b7:25:aa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:11 2025 by rpki-client