Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/Xw_JxFKBt0xay86EnT10Cffhb2o.roa
File: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (raw, json)
Hash identifier: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=
Subject key identifier: 5F:0F:C9:C4:52:81:B7:4C:5A:CB:CE:84:9D:3D:74:09:F7:E1:6F:6A
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 0194258F90A0C5A4A29C1410DD0411415050
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/Xw_JxFKBt0xay86EnT10Cffhb2o.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41847
IP address blocks: 193.34.170.0/23 maxlen: 24
2001:67c:2f1c::/48 maxlen: 120
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:90:a0:c5:a4:a2:9c:14:10:dd:04:11:41:50:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f0fc9c45281b74c5acbce849d3d7409f7e16f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:3e:68:db:6e:8f:ef:84:65:19:94:bf:40:
52:62:58:07:5d:07:64:a0:76:78:18:23:7e:c1:7a:
52:86:0c:4d:42:f7:0c:fc:b8:8f:d8:46:6b:26:7b:
c6:f0:a1:9e:d7:d6:a8:60:bb:cd:1e:0c:56:0f:e2:
54:da:fe:4a:40:dd:79:6e:95:a3:d6:d6:66:01:67:
7d:81:2e:77:a6:35:ed:82:4f:b4:7c:b8:21:c8:40:
11:0c:38:9a:32:fe:36:2d:7c:27:68:1b:8a:43:62:
49:e1:d5:2e:4f:31:fb:b9:67:22:fe:a3:91:10:a4:
68:0b:62:9d:c8:2e:a8:21:c3:0d:f6:ab:f4:c5:c5:
7f:98:50:ed:7e:98:60:f2:ba:b2:fd:5f:78:b9:d0:
e3:30:7b:62:40:23:2f:39:92:df:70:6e:31:80:6b:
ff:5b:8e:f8:0d:f8:d3:0e:5c:84:59:e5:62:cc:8d:
8d:63:94:47:df:fc:6b:f1:1c:6d:dc:88:6d:af:1a:
30:9d:b0:e5:2d:66:a6:6f:7e:43:a6:0e:b2:21:b2:
aa:5a:6f:88:9a:4f:f6:2d:6f:f0:9d:a5:29:ed:66:
86:e6:19:ba:ad:81:6e:e2:03:2b:06:2b:1c:bd:2e:
13:5d:fb:b2:d9:d4:ac:e8:67:d4:41:39:ff:ff:e9:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:C9:C4:52:81:B7:4C:5A:CB:CE:84:9D:3D:74:09:F7:E1:6F:6A
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/Xw_JxFKBt0xay86EnT10Cffhb2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.170.0/23
IPv6:
2001:67c:2f1c::/48
Signature Algorithm: sha256WithRSAEncryption
a1:bb:14:5e:a9:cf:a0:a5:93:31:f8:42:bf:3d:ae:43:62:19:
96:38:12:ab:ef:ea:ec:58:1a:13:67:64:8c:d1:d3:63:85:7a:
e1:a2:af:d4:f1:de:f7:56:39:09:07:8f:a7:4a:be:2b:72:1d:
62:18:88:b9:44:44:0f:2d:ab:f0:fb:c0:5d:d2:b3:81:bb:78:
4f:48:23:2f:0e:9d:dd:47:2f:57:ad:f7:70:54:37:88:5a:e1:
ce:f3:2e:80:76:c4:ef:c9:6b:41:01:b5:96:ef:0f:aa:06:f9:
0a:79:ad:f4:8b:5c:c4:f3:43:6e:93:5d:7e:aa:26:a0:68:6d:
e5:05:3e:6f:80:8a:af:11:b2:55:32:b1:65:bf:a9:03:b7:88:
48:07:86:23:38:67:5f:bb:07:03:69:76:f0:ad:5b:15:2a:f6:
57:26:7d:47:c3:52:7d:40:84:43:3e:b3:a1:ac:6e:81:8a:64:
cb:41:9a:e8:c4:80:e4:5f:87:25:a2:3f:2c:7a:aa:80:1e:bc:
69:9c:ed:70:55:fc:0f:ab:4d:3c:4c:b6:5d:ce:ce:e8:2f:02:
72:5a:ac:56:0e:01:54:ed:1a:e4:42:90:de:9d:87:f3:c5:3b:
f4:e3:bc:77:ef:fc:4a:4c:db:78:34:d7:67:f0:9d:53:cc:7f:
5c:e8:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:36 2025 by rpki-client