Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/XUHwJb1I3gkKMlf7v2dTxFe6360.roa
File: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (raw, json)
Hash identifier: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=
Subject key identifier: 5D:41:F0:25:BD:48:DE:09:0A:32:57:FB:BF:67:53:C4:57:BA:DF:AD
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 019423D6E45CEBE3D3EE81A32DF4538BBCD1
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/XUHwJb1I3gkKMlf7v2dTxFe6360.roa
Signing time: Wed 01 Jan 2025 21:47:53 +0000
ROA not before: Wed 01 Jan 2025 21:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15375
IP address blocks: 193.108.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e4:5c:eb:e3:d3:ee:81:a3:2d:f4:53:8b:bc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d41f025bd48de090a3257fbbf6753c457badfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:dc:5d:d2:70:76:22:29:b6:e8:ee:f2:2d:
16:8b:3c:9c:0c:ed:ab:01:70:47:00:70:92:0c:de:
25:1c:a7:d7:49:a5:de:73:f1:bf:6f:16:4a:68:5c:
73:13:c7:29:1f:48:3b:73:ca:6b:27:ba:d8:c6:e5:
3e:9d:37:69:ea:66:8a:12:cb:7e:12:3d:d0:79:3c:
cc:7b:b8:d5:cc:b6:81:aa:83:0f:bf:ca:9a:22:a3:
62:a0:82:54:db:a0:14:b2:74:0b:87:ff:7c:39:99:
25:4a:8e:24:1e:ed:cf:4a:c9:3f:9c:77:e3:53:33:
18:8f:48:15:f4:d9:d0:bd:bd:b1:f8:e4:17:00:f1:
cc:44:bb:77:76:3b:49:45:a1:85:0e:d2:d5:1a:ad:
b6:49:7a:c8:95:c0:ff:af:6f:01:d3:58:f4:0b:00:
ed:74:e4:ce:3e:37:dd:85:33:f5:5c:eb:8e:93:f6:
d3:d8:89:17:a2:b7:df:de:4f:e2:53:3f:06:77:4c:
3c:83:d8:5c:a2:d3:8e:7a:43:74:9a:ce:fa:67:f0:
80:84:98:04:d5:76:bb:08:74:46:07:d6:f2:32:f9:
2f:90:0f:9a:c8:62:f7:b9:ef:84:cb:8e:e6:7e:d3:
34:de:79:94:f4:23:0a:06:34:08:5c:d6:08:78:75:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:F0:25:BD:48:DE:09:0A:32:57:FB:BF:67:53:C4:57:BA:DF:AD
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/XUHwJb1I3gkKMlf7v2dTxFe6360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c2:a5:63:d8:e9:85:6c:91:11:5b:4b:be:40:e8:f8:3d:4e:
f7:0d:b6:9e:dd:e2:9d:b9:f5:17:3f:4a:f2:1c:3c:97:68:df:
a2:71:7c:11:c3:7c:1e:00:80:8e:42:9e:f9:73:eb:4f:39:07:
68:4f:ea:eb:b6:07:a1:3f:76:0f:29:6d:90:66:a9:f5:08:3c:
37:a3:3b:28:fe:32:5c:ba:68:68:ec:ac:c1:01:3b:88:5d:21:
f6:7e:b9:2c:71:0c:9f:c2:77:f4:07:2c:db:81:9f:4b:17:1c:
fe:b9:ba:ac:43:c7:ff:dd:a5:c1:73:a4:12:ff:40:94:2a:b7:
5a:98:7b:bf:3a:a0:f6:06:5d:f5:00:25:f9:52:a1:55:04:71:
6b:87:3c:c2:81:63:58:da:5c:b4:3c:1f:30:f1:dc:a1:68:26:
fc:76:5a:3c:db:eb:d5:59:1e:c6:42:42:18:15:9b:4f:3e:cb:
1c:bb:75:df:b5:67:2b:60:21:d0:cf:21:eb:51:55:f6:9f:e1:
8d:db:65:5a:dc:f3:01:5f:c9:90:cd:49:74:49:d7:d1:07:15:
6a:1b:16:9e:85:23:7c:6d:cd:e7:ef:15:67:77:07:e4:43:cb:
94:e9:fa:4b:cb:02:bf:bf:22:0f:75:6d:48:6e:7b:c2:9d:a5:
b7:5b:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:46:43 2025 by rpki-client