Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa
File: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (raw, json)
Hash identifier: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=
Subject key identifier: 5F:7A:CF:09:44:0E:0B:31:D1:5B:56:8E:07:52:4C:B1:74:FA:11:3C
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019420D630C9FAAB7BDB5A7B1B7093CE2C6F
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198169
IP address blocks: 78.109.224.0/24 maxlen: 24
78.109.233.0/24 maxlen: 24
78.109.234.0/24 maxlen: 24
78.109.235.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
185.52.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:30:c9:fa:ab:7b:db:5a:7b:1b:70:93:ce:2c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f7acf09440e0b31d15b568e07524cb174fa113c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:40:8c:e5:22:1d:09:10:8d:fe:3d:aa:31:
8c:17:82:f8:29:42:ef:51:ec:64:f3:f1:b4:a7:fc:
4a:86:1e:d8:0b:5c:60:9e:51:02:a4:e2:15:c9:58:
4c:a9:20:6c:c6:68:96:e5:57:7a:a2:7a:ee:75:90:
e6:38:3c:45:b5:40:b5:cb:eb:cd:1a:1d:0a:ac:60:
7b:6e:0b:90:4b:1e:39:3f:97:f6:03:08:10:9f:b2:
d5:de:66:14:a9:54:97:64:dc:2b:1b:65:bb:15:bb:
7b:33:c8:7a:b1:63:47:2b:6b:71:96:79:91:a1:78:
8b:2e:54:6b:a9:80:36:4e:35:8d:d0:9e:00:84:fc:
44:db:b1:b9:4f:d9:02:a1:33:c8:d0:4b:ad:dd:f6:
8d:04:19:64:d8:2c:5d:b7:87:ab:fd:f7:86:5d:c1:
e7:e1:93:8f:ad:ea:cf:04:10:41:dc:e6:4e:2a:62:
f7:2d:45:53:45:a1:e6:10:9a:11:6e:3a:e2:a6:cc:
8b:ad:87:51:71:4e:31:ad:0f:11:e9:21:f1:79:61:
08:70:9b:d7:ab:a0:66:28:56:72:4f:36:b0:b7:58:
c1:7a:9e:ef:e5:94:5b:f7:e7:86:85:16:94:5c:41:
19:f1:89:f8:fa:d5:d2:78:77:ea:82:97:2d:21:49:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7A:CF:09:44:0E:0B:31:D1:5B:56:8E:07:52:4C:B1:74:FA:11:3C
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.224.0/24
78.109.233.0-78.109.235.255
78.109.238.0/24
185.52.101.0-185.52.102.255
Signature Algorithm: sha256WithRSAEncryption
29:49:f1:12:ea:2a:04:5e:68:cc:c4:d3:7e:2a:61:06:80:21:
1e:70:15:f2:1f:eb:32:09:00:a3:5d:c0:da:58:86:6b:3c:b6:
10:0d:58:f3:47:71:03:80:b7:28:d6:de:29:a3:d9:53:68:d7:
c0:09:ae:6e:7e:39:6e:5a:fd:b2:cb:2f:8f:e6:a4:4d:a7:05:
37:2e:49:c3:52:1f:48:14:73:50:80:33:43:27:ce:5a:fb:2b:
21:78:ee:cc:e0:b6:0d:04:a5:de:5f:eb:f2:41:4b:86:f2:ab:
a7:76:15:74:44:bb:6e:4c:0e:03:90:d8:f9:51:4c:cd:d4:96:
e8:81:1e:9f:09:67:60:a1:32:28:29:31:b6:e3:85:70:11:18:
0a:b2:72:07:ec:eb:8e:17:13:6b:ef:13:6f:a1:dd:e0:ce:25:
70:b9:a2:7a:cc:d2:88:09:2d:e5:74:1f:22:2c:56:8b:ae:d2:
93:c0:83:b5:25:b8:99:3b:a9:f1:cc:29:f6:7c:9c:de:ed:a0:
fa:5c:9b:8a:7c:82:07:12:76:b7:e2:84:0b:c4:61:28:d1:1b:
94:0f:e5:49:ea:e4:d6:41:55:ce:87:45:81:91:b8:74:fe:6d:
aa:06:81:50:9d:86:85:5a:9f:56:35:f4:45:9b:28:c2:74:83:
23:9b:b9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:29:50 2025 by rpki-client