Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/xandp5YxydZR7wlTUWsPRookRQc.roa
File: xandp5YxydZR7wlTUWsPRookRQc.roa (raw, json)
Hash identifier: TvsdUKw2eDJNV/EQUTSOnGCjImCSLoPXA7kEvQkSjo0=
Subject key identifier: C5:A9:DD:A7:96:31:C9:D6:51:EF:09:53:51:6B:0F:46:8A:24:45:07
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 019420D5E9F006C196DD7D95B7F2FE5DC4FD
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/xandp5YxydZR7wlTUWsPRookRQc.roa
Signing time: Wed 01 Jan 2025 07:47:57 +0000
ROA not before: Wed 01 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35760
IP address blocks: 87.101.16.0/20 maxlen: 21
87.101.16.0/21 maxlen: 21
87.101.24.0/21 maxlen: 21
91.196.12.0/23 maxlen: 24
91.196.12.0/24 maxlen: 24
91.196.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e9:f0:06:c1:96:dd:7d:95:b7:f2:fe:5d:c4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5a9dda79631c9d651ef0953516b0f468a244507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a1:e8:1a:07:7a:ab:8b:48:a7:9a:7d:e5:9c:
c7:3d:0a:50:31:a8:07:8c:f5:cf:0d:c9:26:3f:82:
c8:3d:9e:94:df:44:be:54:88:c3:84:f6:cb:80:44:
2e:38:07:51:6f:11:cb:71:c5:c7:4a:04:f4:85:3b:
7b:bb:f9:b8:d5:07:7f:64:f7:c2:97:fd:ac:8f:10:
0f:94:45:57:3c:69:9e:1b:b9:59:30:aa:50:69:7e:
14:22:cc:d3:6d:28:cf:a1:3c:b9:90:2a:eb:5e:c2:
db:8c:9b:78:39:33:d8:64:52:f4:db:46:f2:86:8f:
9a:9e:12:e6:87:55:24:60:28:d8:3a:84:1d:4a:9c:
fb:0b:7a:b6:62:c7:21:49:7f:ed:b4:bd:4b:88:50:
2d:9b:d3:1f:a4:dd:e8:d5:49:14:18:80:71:28:ac:
bf:1e:e6:65:ce:a0:7a:21:cf:7f:6c:c7:de:48:a5:
69:78:34:fd:44:b2:87:6e:52:df:fc:78:87:af:f6:
0e:ee:04:30:70:64:33:b4:26:e2:9c:a8:3f:1d:96:
bd:5d:77:54:56:d7:1e:bb:38:37:52:3d:16:78:6f:
28:ff:86:4d:d7:f7:5c:b2:25:c8:30:b9:6e:02:77:
05:b8:1d:e9:a3:d5:38:e4:d3:78:47:cf:2b:06:e7:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:DD:A7:96:31:C9:D6:51:EF:09:53:51:6B:0F:46:8A:24:45:07
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/xandp5YxydZR7wlTUWsPRookRQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.16.0/20
91.196.12.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:42:e8:56:eb:78:58:41:84:39:52:57:b4:37:19:b9:53:c8:
65:4d:ab:62:73:53:eb:0e:3c:61:36:eb:8c:4f:3a:b6:8f:7d:
e6:df:30:a5:7d:c0:f2:6e:f6:71:14:e0:71:52:0d:b8:93:3f:
c9:e9:a8:e8:2b:9d:3e:6e:ba:1f:ba:da:4a:46:b1:24:48:d9:
fd:bd:cc:17:c0:34:4e:6d:d1:9c:7d:25:a5:f9:13:ef:86:83:
1a:6b:4a:b2:c0:6c:d0:3b:65:eb:29:17:69:40:c9:17:f8:f1:
8e:b6:48:56:9b:78:dd:fc:01:cb:e8:1f:f9:a6:a8:48:2a:47:
5d:ca:15:8a:df:8c:8e:de:8a:b1:e9:de:3d:50:fb:e3:22:7e:
c0:0f:06:7c:20:aa:0f:f9:3b:b3:8d:60:fe:a1:42:7a:67:12:
1c:4f:c4:f2:dc:17:51:7a:b4:ce:26:e3:94:08:5b:2c:d0:a2:
24:7e:ff:7d:f0:d0:7a:26:de:49:86:17:0f:76:8c:5b:fb:c8:
f0:c1:b0:4b:50:f2:2b:63:7e:9c:7a:f3:68:af:c4:bf:31:ea:
30:8c:48:06:f5:fa:cd:fa:8f:95:56:f5:7e:3b:3b:73:40:54:
98:b0:cb:24:99:56:aa:48:4b:73:60:2b:35:b9:a9:c2:53:f7:
e2:d2:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:56:42 2025 by rpki-client