Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa
File: XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa (raw, json)
Hash identifier: TxqV86SQTi0t4BbX6SVLNGYD/xhHt70JrJfSx9PYDmA=
Subject key identifier: 5D:D0:4A:77:0B:FA:71:37:FE:42:72:A5:74:E7:99:BC:6B:78:0F:F6
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01942747A16962246CB0D6B2C950111FA604
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa
Signing time: Thu 02 Jan 2025 13:49:53 +0000
ROA not before: Thu 02 Jan 2025 13:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205771
IP address blocks: 89.21.65.0/24 maxlen: 24
128.127.149.0/24 maxlen: 24
128.127.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a1:69:62:24:6c:b0:d6:b2:c9:50:11:1f:a6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dd04a770bfa7137fe4272a574e799bc6b780ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:0a:e9:de:ed:67:7f:48:b2:89:57:e0:8f:
4c:8b:c9:d5:44:c2:be:ee:f1:ba:2f:c7:34:f0:2e:
31:89:ff:30:9d:49:a6:5f:36:63:8a:b4:bd:79:41:
86:5c:db:a0:1d:c2:c1:b8:dc:d7:b9:f2:33:e4:ee:
7d:97:3a:59:9e:25:c9:9d:f6:46:dd:82:cd:19:b7:
7e:c4:84:bd:1f:1a:33:cd:94:80:8f:ec:de:00:ab:
f7:22:08:96:5c:dc:fc:43:a2:d8:2d:2c:b3:76:05:
93:4c:cb:8e:4b:8a:a2:97:6a:37:17:72:c2:09:cd:
64:0c:5f:8f:aa:78:a4:11:5e:6f:2f:cb:7a:9d:99:
6c:2b:f3:b6:1c:ee:7d:9e:ce:af:5c:b4:f9:89:15:
6a:50:5c:ee:e1:53:ad:91:95:24:25:dd:38:33:87:
5b:bf:cb:6e:67:b1:ab:2c:62:13:29:ba:dd:6d:91:
a0:57:6b:2e:3e:11:62:97:24:e7:d5:5d:56:49:d1:
8c:c1:a8:d0:70:5b:bb:76:96:ef:8c:a3:7f:79:2e:
35:a5:84:d8:74:0d:31:29:a2:42:1b:9c:d2:6e:1b:
10:c8:5c:01:a2:35:30:da:be:d0:41:dd:2e:70:6c:
19:a0:99:41:e5:d6:3c:8c:a4:5e:e2:c5:17:d1:81:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D0:4A:77:0B:FA:71:37:FE:42:72:A5:74:E7:99:BC:6B:78:0F:F6
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/XdBKdwv6cTf-QnKldOeZvGt4D_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.65.0/24
128.127.149.0-128.127.150.255
Signature Algorithm: sha256WithRSAEncryption
ec:63:51:1a:bf:99:64:7a:2b:86:6f:2c:bb:c0:e0:5e:c0:7e:
c3:51:a9:c7:35:43:63:fc:2f:9c:77:da:3f:b6:bf:17:a0:ca:
62:30:eb:26:41:65:a7:3e:d2:e5:b2:39:bb:2c:7d:e2:7a:04:
75:3b:d9:59:40:5a:49:f5:b4:4a:10:fb:43:8f:d8:93:97:d0:
6a:b3:65:da:d8:ea:0c:90:bf:b0:d9:83:b6:79:0f:5a:21:ee:
de:86:64:62:04:ac:fe:7c:38:b6:22:f2:bb:cb:72:b6:8a:17:
f6:b7:3c:83:e7:c3:f3:d6:45:64:e2:b3:ce:0b:5a:1b:39:a7:
a2:f2:2b:ac:14:3e:76:81:01:eb:94:30:ab:51:0e:87:cd:22:
ee:aa:8d:6e:72:f1:8c:60:55:92:f3:00:8e:f9:de:4d:d8:77:
4b:78:16:4e:64:92:f7:f5:e1:9d:62:49:c2:b5:96:91:a6:bd:
1e:85:0b:25:e1:f1:4a:0e:c5:ef:a2:9d:c0:89:47:ce:9e:22:
e7:1b:38:e5:3a:6d:ce:dd:a9:c3:31:d2:75:cc:3a:d6:ca:c8:
9b:65:cc:5a:4e:85:70:ad:01:71:93:e6:1e:cc:d3:b2:85:88:
9d:37:24:32:28:f5:e4:19:af:80:3e:97:07:03:39:29:df:85:
8d:92:fd:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:09 2025 by rpki-client