Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/XPLXJ92Us5J-qBm5E6NHAQ2543s.roa
File: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (raw, json)
Hash identifier: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=
Subject key identifier: 5C:F2:D7:27:DD:94:B3:92:7E:A8:19:B9:13:A3:47:01:0D:B9:E3:7B
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 01942067E6A7D5447C11D01A7CC0210E101F
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/XPLXJ92Us5J-qBm5E6NHAQ2543s.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197848
IP address blocks: 185.6.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e6:a7:d5:44:7c:11:d0:1a:7c:c0:21:0e:10:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cf2d727dd94b3927ea819b913a347010db9e37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:39:0d:78:89:a1:0e:e9:36:33:12:d2:6c:
cd:98:68:6b:0e:f9:a1:39:3a:c0:4c:41:91:09:6d:
7d:ad:86:c8:0c:21:c8:67:a7:e5:c3:b5:46:c0:a6:
2c:7d:ce:6f:0d:a1:f7:31:9a:53:86:df:c4:72:4c:
7b:4c:da:15:17:41:21:2b:9c:ea:66:81:56:57:15:
08:01:5b:ef:79:03:0d:ed:a2:61:c7:0c:96:9a:ad:
a4:5d:c7:04:46:be:75:ef:32:fa:d5:94:92:cb:a7:
15:5d:34:00:a9:90:65:27:47:c5:70:70:40:6e:24:
a7:02:e9:12:eb:63:86:96:56:c5:30:d4:13:cc:c6:
18:fe:bd:a0:0d:7d:48:24:f6:46:1f:66:6f:20:aa:
ed:b1:0a:d2:b0:ca:9c:74:7c:5c:3e:17:23:c6:68:
a9:6c:38:d3:03:dc:19:18:5b:a0:e5:b4:eb:a0:e8:
77:9c:7d:2a:54:7c:8b:82:d6:3e:6e:34:3b:4c:91:
f7:f9:b0:19:e4:9b:dc:76:3c:ff:40:3b:35:e2:19:
ba:30:a4:99:77:52:db:4a:81:ee:62:f6:21:d0:98:
64:de:07:e4:63:2d:37:26:37:1a:e2:d1:ca:fe:2c:
3a:d1:29:f7:a4:40:3c:34:a2:f3:00:b2:45:66:0a:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F2:D7:27:DD:94:B3:92:7E:A8:19:B9:13:A3:47:01:0D:B9:E3:7B
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/XPLXJ92Us5J-qBm5E6NHAQ2543s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.30.0/24
Signature Algorithm: sha256WithRSAEncryption
74:61:5a:20:4d:63:ad:c5:db:25:4d:2e:1e:73:96:f4:86:c0:
56:2e:e2:2b:4b:b7:59:11:a5:46:18:fc:5b:b2:ca:a9:ea:54:
d4:b7:fa:77:3c:e6:28:21:c3:b3:e2:a8:a5:e4:6c:fe:23:c3:
8e:3b:89:da:8b:67:53:cb:23:1d:c5:0c:7e:6f:99:51:eb:af:
e8:b7:1a:15:8e:83:1b:62:54:fa:dd:93:1f:19:94:2d:dc:9d:
bf:30:50:cc:77:cc:2a:d5:5b:de:5b:dc:b7:83:68:08:9c:80:
5c:55:6a:26:6e:ea:57:9d:35:6e:40:50:b4:19:e7:77:a8:54:
8d:8f:ba:e4:d3:3d:ea:61:c2:a6:9c:05:c9:74:12:86:78:36:
01:55:ec:8b:7f:9e:5a:2e:59:f2:b5:59:ea:ec:56:b5:75:6f:
00:73:17:bb:17:06:16:cd:06:e9:a2:68:a7:81:1b:dc:1a:d2:
f7:ce:b2:39:e0:47:eb:61:aa:8d:fe:d6:94:bf:87:38:fb:37:
77:bd:2d:0d:10:0f:fc:02:8b:50:7f:79:5f:da:d9:e8:1e:28:
84:5e:95:91:c3:cd:fe:a5:a8:00:ef:b0:61:c7:ab:d0:f5:2d:
d9:26:fb:05:27:c5:94:94:e4:c6:a1:f5:ab:e0:28:00:82:f2:
81:79:58:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:10 2025 by rpki-client