Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa
File: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (raw, json)
Hash identifier: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=
Subject key identifier: 5C:D8:4B:39:50:BE:53:D3:CF:6C:BB:3A:26:CC:B3:96:78:A6:21:E4
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 019422FBFAEE4D891F87FA1651EAD977D6D6
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61358
IP address blocks: 176.113.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:fa:ee:4d:89:1f:87:fa:16:51:ea:d9:77:d6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cd84b3950be53d3cf6cbb3a26ccb39678a621e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:b9:88:2e:c3:cf:5e:64:2f:cd:0a:f9:e4:
4e:58:90:0e:1d:fd:41:d7:c2:55:a8:67:9a:98:75:
c7:0a:6f:32:87:d2:c2:20:4d:ad:47:60:ae:e7:9b:
54:d6:09:ff:4b:2d:64:f1:49:43:59:19:4e:9e:21:
4b:df:b6:a2:c4:f5:c1:77:f8:79:3f:8a:94:2b:1a:
98:cb:58:4b:e1:b4:e7:86:68:8d:9a:15:98:3b:3c:
5b:30:dd:5f:00:43:7f:d8:b5:9b:f2:a4:42:0f:cc:
23:f9:3b:b6:62:1e:54:4e:79:70:e8:39:c3:ff:0d:
df:8a:60:5e:58:45:3b:69:47:e2:1b:34:ac:df:39:
87:1e:e7:3c:d2:72:83:3c:72:d9:05:24:9f:52:cd:
ef:08:59:ef:b8:77:32:6c:9b:9b:e7:f9:da:b3:ba:
ee:9b:df:70:ca:86:5e:2e:6c:7e:4d:77:9b:57:a6:
d1:2c:0b:3c:65:04:1b:b0:72:85:0e:0d:4c:dd:ce:
94:33:13:cc:2c:dc:4d:5c:58:66:79:2a:55:61:e1:
56:ea:91:41:b5:77:35:2d:7b:28:c6:2b:f2:ec:00:
9e:32:ee:f0:6e:7d:95:1e:38:28:69:a6:bb:ae:e1:
ec:cd:2e:c5:c0:6c:0e:23:23:8c:1d:25:d5:ba:01:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:4B:39:50:BE:53:D3:CF:6C:BB:3A:26:CC:B3:96:78:A6:21:E4
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.117.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1b:20:8d:40:95:98:d8:84:13:31:95:ba:58:23:04:29:9b:
24:6c:47:3f:8c:8b:85:b5:20:72:60:56:59:2c:f9:31:97:09:
cf:9f:64:f1:ba:a6:f2:a8:76:e2:2b:5a:e3:9f:26:16:76:2e:
17:fe:c9:e2:81:e6:c8:f6:6b:0d:8c:19:1e:2e:75:52:57:55:
76:f3:96:c1:09:60:c2:66:21:f9:31:94:d5:67:b3:16:c4:a3:
4c:98:b3:25:63:e3:a9:5a:df:34:4d:a4:c9:af:f4:2a:a8:e3:
1c:6f:73:22:3f:96:9d:ce:0c:5c:8a:99:f3:d2:9b:bc:13:f7:
33:73:00:f4:9b:42:af:36:ec:fa:9a:a6:b7:75:00:f1:75:84:
d4:d4:28:9d:aa:a3:35:e4:1c:70:52:75:08:d5:fb:ec:3d:a3:
d3:d9:83:02:2d:6f:7a:33:1b:8d:7d:99:a9:b2:39:71:84:75:
a4:94:77:0a:49:bb:66:fd:c9:9a:e0:4e:05:24:fb:65:33:19:
1b:88:c6:11:da:8a:5f:f7:24:70:2f:70:c7:9e:da:1e:d2:5a:
94:bf:e6:9d:8a:8b:f6:d7:5a:28:fb:52:e9:29:f2:cd:89:62:
31:59:0e:7e:6b:65:db:3b:07:f3:54:93:40:ab:e3:d9:4d:8c:
f2:cb:6b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:45 2025 by rpki-client