Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/xXvr5N3cdjjVXwcVtqed053TqTM.roa
File: xXvr5N3cdjjVXwcVtqed053TqTM.roa (raw, json)
Hash identifier: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=
Subject key identifier: C5:7B:EB:E4:DD:DC:76:38:D5:5F:07:15:B6:A7:9D:D3:9D:D3:A9:33
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019420D5DFC1ACE05D210D24668C16D7B21E
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/xXvr5N3cdjjVXwcVtqed053TqTM.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202253
IP address blocks: 62.182.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:df:c1:ac:e0:5d:21:0d:24:66:8c:16:d7:b2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c57bebe4dddc7638d55f0715b6a79dd39dd3a933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:fd:76:68:d9:6e:d7:07:b6:82:22:9d:11:
5d:41:05:5f:cf:91:76:11:a3:5c:46:99:a0:7b:45:
4f:18:39:03:f8:40:95:a3:7c:4d:b8:1e:72:d8:0e:
47:06:ae:da:a9:c9:7b:09:9b:6e:9f:3b:c9:4d:59:
00:51:3e:f2:2e:89:ab:42:60:71:de:7e:4c:b4:01:
ce:0f:88:56:5d:a3:32:f2:5c:97:9d:90:5b:cf:3f:
25:4f:89:ed:6b:e1:a8:ec:69:98:cb:18:bb:18:ce:
da:98:d5:a7:b2:af:5f:8e:63:3a:2e:d2:c0:86:b4:
26:a3:36:ff:e2:5a:67:5c:65:dd:d2:db:05:99:86:
66:52:17:65:1c:48:19:43:a3:f1:54:27:13:49:88:
c6:51:41:06:e5:26:60:bc:b6:05:7f:b0:07:1d:3a:
8d:9a:a3:c2:6e:40:73:42:a2:0e:06:ea:a6:69:2f:
10:61:b6:95:2f:63:68:ca:05:7f:64:15:cb:d6:90:
9f:fd:38:83:ae:b0:7c:d6:07:cd:26:1d:7d:e4:b6:
f1:3f:6e:1f:80:3a:55:3f:97:0d:b3:16:31:64:43:
a8:90:15:5d:0f:7d:a8:a7:d0:2a:91:4e:69:a9:89:
a6:bb:1b:73:79:71:84:93:a6:86:d6:45:86:7b:e3:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7B:EB:E4:DD:DC:76:38:D5:5F:07:15:B6:A7:9D:D3:9D:D3:A9:33
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/xXvr5N3cdjjVXwcVtqed053TqTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:a7:3c:e2:15:ab:4c:0f:67:dd:53:60:d8:ad:c3:4a:53:6d:
c8:e0:6e:d9:50:16:09:29:bc:05:3b:39:15:98:01:bc:6e:b6:
e0:b8:66:10:8d:16:05:63:36:8a:85:38:dd:e2:5d:2d:f2:e2:
b4:34:40:8e:35:a5:7f:ef:09:67:d5:d3:24:2b:8b:16:d4:d9:
12:af:95:b5:4e:a2:84:fb:df:6e:96:61:70:f9:58:35:0b:91:
58:e9:13:31:e6:e1:7c:e2:43:26:a9:e5:3c:b6:07:7b:cf:e6:
29:c9:d9:e6:73:50:0a:a4:8d:ad:dc:fe:11:52:47:76:2b:5e:
e6:5f:25:58:bb:69:fd:2c:5d:3b:9d:3c:62:b1:e7:34:21:87:
f6:da:23:0b:45:bb:08:8c:15:52:6f:4f:7a:3c:e1:d0:8b:31:
16:67:2c:44:e6:f0:33:35:f2:52:bc:72:b5:68:ee:b7:2c:ae:
a0:00:42:86:28:04:35:5b:b0:25:e8:0d:78:9b:55:4e:36:4e:
47:c7:70:46:63:94:4c:94:1f:48:79:d0:90:00:52:a0:52:27:
af:28:2e:61:fa:22:30:13:8e:d4:7f:8b:a6:41:84:7e:a0:e7:
71:d2:6e:d3:eb:97:9e:ae:c9:85:72:15:2c:8b:7e:23:6b:ca:
87:87:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:46:48 2025 by rpki-client