Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/xBgAFkKx8Hk3olxaNjWis5mQn98.roa
File: xBgAFkKx8Hk3olxaNjWis5mQn98.roa (raw, json)
Hash identifier: P1KCvzISYpUAfpvA/Q/kzEUy3tIPC4wJ6UjU3FGpTJc=
Subject key identifier: C4:18:00:16:42:B1:F0:79:37:A2:5C:5A:36:35:A2:B3:99:90:9F:DF
Certificate issuer: /CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Certificate serial: 019420D60CBB52446CADD43DAB10620B2600
Authority key identifier: 52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/xBgAFkKx8Hk3olxaNjWis5mQn98.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31726
IP address blocks: 185.90.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0c:bb:52:44:6c:ad:d4:3d:ab:10:62:0b:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522f9879ccfadee5d04a9a9973f5b27952971bfb
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c418001642b1f07937a25c5a3635a2b399909fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:f0:61:ac:f1:74:cd:00:7e:b3:a1:a7:5c:
e7:4d:10:3e:1e:9c:26:3f:fd:4a:fe:27:a6:9f:53:
e6:bd:48:1a:a5:01:52:85:de:38:ca:10:8f:9c:36:
b6:38:c3:c3:ca:84:4c:a2:7b:ca:23:0a:f3:6e:00:
79:86:80:08:e3:d9:92:2a:8e:a4:50:fd:2b:71:ff:
3d:f8:dd:a4:94:8b:18:0a:a1:f0:6e:dc:fc:29:73:
79:95:36:3c:af:fa:af:31:8b:85:97:b7:7f:0c:1d:
cf:b7:5a:0d:e7:00:b5:7b:ea:a9:b8:46:42:37:e0:
72:e8:32:96:fe:06:0a:60:49:a7:74:8e:59:98:6f:
76:59:8f:60:77:0b:ad:eb:18:90:80:4e:6f:15:e4:
b8:6f:49:fe:f5:99:be:b5:f8:5f:6e:c9:7d:c5:31:
0e:e9:cb:6e:4d:d3:73:bf:8d:e4:f1:ba:ad:05:13:
4f:f8:1d:26:e7:bf:8d:0e:71:16:a5:68:19:9b:93:
ad:22:3f:d2:a3:ca:e1:a3:b4:32:a1:ed:a1:2d:ed:
a6:e7:f7:3b:8c:e8:9e:ef:a2:e4:d5:29:f0:23:31:
ae:a1:c0:9a:6a:b2:5c:6e:4e:f5:b1:de:2c:3b:5a:
9c:c8:ab:71:b5:53:f1:40:af:ea:f8:00:9a:c6:eb:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:18:00:16:42:B1:F0:79:37:A2:5C:5A:36:35:A2:B3:99:90:9F:DF
X509v3 Authority Key Identifier:
keyid:52:2F:98:79:CC:FA:DE:E5:D0:4A:9A:99:73:F5:B2:79:52:97:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ui-Yecz63uXQSpqZc_WyeVKXG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/xBgAFkKx8Hk3olxaNjWis5mQn98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/fad4f1-91f0-47e1-b370-ee509fbd80e1/1/Ui-Yecz63uXQSpqZc_WyeVKXG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.180.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:d3:fe:90:f8:e5:ff:34:eb:ed:87:a5:f7:2c:4e:4e:7b:db:
b1:73:19:61:11:e3:81:5c:6c:ce:c0:ab:76:78:84:a2:3d:2e:
33:85:9e:d1:1a:cb:7f:1e:61:a3:63:40:c6:6a:82:3d:cd:a0:
ca:55:fa:b4:fb:36:a8:63:27:a1:12:aa:06:3d:53:33:d4:d2:
24:41:60:7a:b1:f6:5f:19:df:af:6c:ce:96:b9:58:e4:ef:af:
49:d2:99:55:c5:52:9e:50:92:28:31:22:1b:96:97:c2:a3:85:
bd:59:50:ac:39:e3:a5:0e:d9:5f:eb:dc:51:e2:ec:61:a9:bb:
77:8c:b0:d8:55:32:fa:d4:52:a2:28:dc:84:8c:5e:d7:1f:5d:
f7:a8:11:51:1b:17:cd:9c:00:64:b8:3e:ae:df:46:47:c8:73:
79:29:a3:63:d8:ec:f1:77:a4:74:72:d8:19:d2:1f:24:8a:2c:
da:af:99:ce:7a:f2:d1:87:fd:54:69:d5:f0:9d:7b:37:e3:0b:
73:e6:66:73:60:b8:56:55:e7:f4:dd:ce:b1:34:c0:01:e6:5d:
83:8c:38:74:d5:1c:97:45:8f:1b:d0:4b:72:47:37:11:a6:44:
50:1d:66:2d:99:a6:bc:b4:56:93:2f:65:a2:d8:99:82:94:9f:
e9:38:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:00 2025 by rpki-client