Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/n-X3Z5tjymSZosi8PkD2dWkDd0o.roa
File: n-X3Z5tjymSZosi8PkD2dWkDd0o.roa (raw, json)
Hash identifier: penD/11/md+01a8Z49mS+PC7bwT0iLkK12FdxJMfI9w=
Subject key identifier: 9F:E5:F7:67:9B:63:CA:64:99:A2:C8:BC:3E:40:F6:75:69:03:77:4A
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C7A940C3FAA810DDF0F5C69F77314
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/n-X3Z5tjymSZosi8PkD2dWkDd0o.roa
Signing time: Thu 02 Jan 2025 09:50:30 +0000
ROA not before: Thu 02 Jan 2025 09:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43132
IP address blocks: 62.183.80.0/21 maxlen: 21
85.172.174.0/23 maxlen: 23
85.173.96.0/19 maxlen: 19
178.34.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:7a:94:0c:3f:aa:81:0d:df:0f:5c:69:f7:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fe5f7679b63ca6499a2c8bc3e40f6756903774a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:55:0f:1a:64:80:d7:c7:12:12:13:3d:44:
7e:ff:aa:46:20:f0:2b:b9:09:41:cf:c5:55:ae:f9:
99:82:42:11:46:d4:50:32:3f:e8:53:cb:40:e2:8e:
5d:00:55:0d:28:02:b6:46:8f:7a:4f:45:1c:7b:3e:
f9:f0:31:b0:d4:d0:d4:53:51:25:02:85:15:1f:d8:
18:fa:e9:ad:cc:74:60:24:6d:cf:f7:b9:0b:8d:74:
8b:30:14:1b:4d:1e:da:c6:f3:eb:91:3a:f3:41:7d:
31:bc:89:3f:77:ed:1c:59:fb:a3:d4:87:d4:ad:3a:
81:c2:90:7b:34:1f:b2:ac:b7:d2:1c:8b:0d:1c:be:
38:31:c3:ee:fc:20:2c:78:ee:ef:42:1c:bd:18:0e:
37:05:44:2d:0a:e5:c5:2f:35:f4:4e:76:e3:5d:77:
94:2a:58:16:43:ef:27:11:f5:7d:cd:a3:d8:62:fe:
55:4d:12:b5:a1:8c:5a:a5:c7:b2:8f:18:1a:74:54:
6a:bc:4f:92:32:f9:9b:7e:26:c9:04:2c:f7:82:54:
8c:6b:d8:66:cd:b3:6a:fb:09:c5:95:d7:93:cf:5b:
08:ed:12:fd:5e:81:e2:64:72:f7:95:89:de:12:ec:
b4:c5:58:1a:8e:a4:cc:a3:44:94:6e:c8:d2:3e:2d:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:F7:67:9B:63:CA:64:99:A2:C8:BC:3E:40:F6:75:69:03:77:4A
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/n-X3Z5tjymSZosi8PkD2dWkDd0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.183.80.0/21
85.172.174.0/23
85.173.96.0/19
178.34.208.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:d5:c5:2b:79:aa:a1:68:aa:99:92:ff:0e:7a:f2:c2:6b:ba:
76:9e:a9:d0:c4:33:45:69:af:50:14:f8:95:19:dc:13:9a:56:
9f:27:8d:db:9b:48:79:41:ad:29:aa:63:09:90:2b:74:ef:9d:
1e:09:42:06:3f:bc:02:b8:09:2b:8f:ac:39:58:c9:f5:3e:4d:
2e:fb:b5:3e:04:8f:18:82:fc:02:e2:05:5f:1b:33:d9:3c:a7:
46:8d:c6:ce:d9:35:a9:ae:a0:de:f2:fa:08:01:6f:aa:81:de:
16:16:a9:ab:86:a4:8f:8c:76:74:e8:01:fe:2c:82:fd:dc:dd:
34:4e:71:02:59:5f:05:ef:50:fc:92:7a:20:a7:52:c4:20:9f:
d8:be:9a:66:2b:16:ad:b6:fa:67:b7:7f:79:61:cf:53:33:44:
8d:39:cc:94:52:08:c4:bd:93:de:8f:50:1a:94:ff:20:06:69:
f2:87:34:76:dd:10:c7:82:9c:c2:a6:f6:14:68:d8:69:7d:f9:
32:78:f1:e4:2f:77:f7:2f:05:2c:a2:ba:8b:02:b8:97:b5:f3:
38:93:73:4e:09:17:b8:24:1d:7d:b3:73:14:a1:b6:63:a8:72:
51:b0:35:dd:ec:2a:1a:80:e8:03:ef:c9:99:ec:b4:03:8d:db:
34:b0:ec:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:45:53 2025 by rpki-client