Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/XJGd09AEEzsFIIfYDpNGSfAbhTA.roa
File: XJGd09AEEzsFIIfYDpNGSfAbhTA.roa (raw, json)
Hash identifier: SsnSMVtUQ+oIoqX7ckVqdgKbPcggygUf/qAmLg/UAmY=
Subject key identifier: 5C:91:9D:D3:D0:04:13:3B:05:20:87:D8:0E:93:46:49:F0:1B:85:30
Certificate issuer: /CN=98728e8a27d30c83aee5f496240985ee40cb378b
Certificate serial: 01942369D886A99D55CB61A5E67A9D10A454
Authority key identifier: 98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/XJGd09AEEzsFIIfYDpNGSfAbhTA.roa
Signing time: Wed 01 Jan 2025 19:48:46 +0000
ROA not before: Wed 01 Jan 2025 19:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8873
IP address blocks: 45.154.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d8:86:a9:9d:55:cb:61:a5:e6:7a:9d:10:a4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98728e8a27d30c83aee5f496240985ee40cb378b
Validity
Not Before: Jan 1 19:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c919dd3d004133b052087d80e934649f01b8530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1c:d6:ef:75:b7:d1:f2:40:af:de:5a:73:af:
d1:10:a5:11:b5:84:df:0d:91:5f:8f:30:ee:56:2d:
dc:0e:d8:55:39:97:f7:4b:e4:5f:dd:2c:1e:4c:77:
b3:42:76:c3:17:b1:28:98:5c:6e:3a:e4:b8:5e:37:
46:93:c4:fe:af:10:96:18:45:2b:94:a1:bb:40:3b:
f6:bd:1c:31:bd:9e:21:9c:8a:9a:28:1c:ed:37:29:
38:c6:0b:00:c7:79:67:5a:1e:d2:22:cb:43:c8:ab:
a9:af:b0:0a:3c:0b:0d:f1:d5:9e:82:f1:38:02:a5:
a3:4f:c8:dc:9b:0f:d1:91:0f:2b:62:f8:ec:f1:ff:
3f:fc:e6:9f:bd:79:84:70:49:4d:67:0a:31:de:b6:
35:fa:1a:3b:03:02:a6:ad:c1:56:d7:df:81:57:f5:
fb:41:81:6d:14:8b:90:3f:49:1a:bc:23:fe:c2:64:
ae:4e:cb:22:dd:f7:16:ca:83:01:6d:0e:2e:84:a5:
d2:7f:23:78:62:c7:cd:40:db:24:b1:e2:02:b6:ff:
7c:c3:8b:c8:31:eb:ea:e8:4d:b1:05:3b:8a:0d:52:
e9:54:24:61:5b:eb:0c:35:44:5d:12:19:fd:cd:70:
3a:13:fd:7e:e2:21:7f:43:37:4d:8a:bc:6f:1b:79:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:91:9D:D3:D0:04:13:3B:05:20:87:D8:0E:93:46:49:F0:1B:85:30
X509v3 Authority Key Identifier:
keyid:98:72:8E:8A:27:D3:0C:83:AE:E5:F4:96:24:09:85:EE:40:CB:37:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHKOiifTDIOu5fSWJAmF7kDLN4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/XJGd09AEEzsFIIfYDpNGSfAbhTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/03ca23-a143-4df0-afb9-a24e3a0a31ef/1/mHKOiifTDIOu5fSWJAmF7kDLN4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.28.0/22
Signature Algorithm: sha256WithRSAEncryption
73:d9:86:86:ee:1d:35:06:aa:7a:23:07:55:bb:c1:e5:df:40:
bd:90:f1:91:67:8a:e6:59:9b:74:89:c0:ec:25:92:54:a6:33:
fc:f5:e7:eb:b6:df:16:de:d9:62:b5:ba:b0:0b:e1:cf:64:d6:
b7:21:e0:27:fb:db:3d:51:7e:a5:f1:70:7a:6c:b9:8a:e0:ba:
4c:29:c4:34:fa:25:32:dd:b4:79:62:b2:09:cd:55:3c:ef:ea:
52:9f:e3:f8:76:cd:2d:9c:9c:5b:d4:0a:f7:23:70:2d:7c:17:
40:4c:b0:b9:de:4d:65:a7:32:35:0d:87:04:80:1d:a5:33:c4:
0a:fb:06:f8:03:b0:f5:50:50:62:f5:9a:c5:11:5b:c0:b3:0b:
81:5e:76:d2:55:f3:af:80:cc:e9:92:fa:15:1b:fb:3d:e2:0a:
f1:6d:bc:28:dd:9d:73:3e:05:84:ae:4e:f9:7c:e5:bd:29:75:
b2:32:0b:9d:18:68:8e:f9:ec:c0:d9:4c:d8:28:35:43:f3:c3:
b2:3e:c7:8d:b3:87:97:13:5e:70:56:47:e0:ed:9c:8e:4c:31:
95:fe:0c:66:1e:87:d1:67:3a:84:e5:5e:8f:dd:d6:6e:ed:d1:
ac:73:ab:11:e0:d5:8b:34:f3:3d:f2:e6:7d:e9:f4:de:ac:86:
21:c8:15:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:03:49 2025 by rpki-client