Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/xBQTk2ZxCBFn4FURSkNsGR6gqDY.roa
File: xBQTk2ZxCBFn4FURSkNsGR6gqDY.roa (raw, json)
Hash identifier: EO1qDaVw2Z56lcgP4dAp/mI7K5jvo2KyuTQr7BTr3q8=
Subject key identifier: C4:14:13:93:66:71:08:11:67:E0:55:11:4A:43:6C:19:1E:A0:A8:36
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F0AEAD8C546E2F458BB7109162B5
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/xBQTk2ZxCBFn4FURSkNsGR6gqDY.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49330
IP address blocks: 94.236.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f0:ae:ad:8c:54:6e:2f:45:8b:b7:10:91:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c41413936671081167e055114a436c191ea0a836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:05:a1:77:2a:9d:0e:38:b9:88:6e:19:eb:
eb:0d:c2:0b:c7:26:40:20:11:ff:d7:41:25:60:4b:
7b:2b:43:8d:1e:a2:67:70:d2:21:ef:4e:d1:fc:f1:
07:25:f7:bb:00:7b:3c:f0:c7:c3:c4:f6:24:37:12:
64:94:ec:89:10:b3:60:05:c5:63:75:17:8c:ee:86:
00:e7:61:f8:5b:29:46:5a:f0:d7:1f:b6:eb:f8:99:
7b:ff:f9:9b:fc:58:a4:18:9c:e5:98:b8:0d:05:04:
45:02:bb:a4:84:c6:98:9a:1e:dc:b3:a9:37:f1:4f:
35:aa:c1:af:9d:92:a7:22:b5:cf:2e:17:95:e0:15:
c8:60:a1:42:64:aa:34:6f:98:cc:0a:69:34:66:7c:
1c:7c:9c:63:4c:b7:8d:d3:8f:6a:db:2d:42:a1:3c:
70:6b:09:1a:1d:ee:97:02:93:48:12:ac:37:84:2a:
98:5a:7c:b6:51:60:00:d3:32:14:7f:11:63:4a:ae:
e7:30:44:3f:a3:23:c6:a0:0d:dd:0b:1c:f8:d1:c2:
2b:5d:c6:6f:8e:c0:76:88:63:40:db:9d:b7:17:1a:
a3:00:97:47:88:ce:e3:2b:90:71:f3:a3:79:33:56:
ce:8e:21:e2:be:53:ef:86:ef:43:10:26:bf:1e:dc:
76:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:13:93:66:71:08:11:67:E0:55:11:4A:43:6C:19:1E:A0:A8:36
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/xBQTk2ZxCBFn4FURSkNsGR6gqDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.236.162.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0c:e9:2f:46:fe:9f:ee:c9:f5:cf:fe:d1:8e:99:80:90:0f:
b7:c8:c6:77:d1:f0:eb:52:c9:8d:05:69:37:ca:69:39:84:97:
e7:4f:2f:c3:26:d6:01:08:43:7d:e8:0e:5c:82:a8:32:6f:76:
03:09:dc:48:3a:68:ed:c9:21:6a:3a:66:80:b4:ae:cf:ea:ce:
ac:29:b1:4c:16:f4:0e:be:40:9d:dc:b5:e8:e7:36:33:02:37:
f3:81:8f:e8:ca:97:d3:28:48:b3:1e:2d:fc:eb:52:1c:0b:ee:
e8:a3:d2:84:68:dc:e5:f0:fb:f6:d5:1a:34:3c:98:ab:48:20:
c2:c0:60:ae:c0:b9:36:ae:bf:f1:c0:fd:3a:99:a8:a8:d4:1b:
37:88:15:7c:31:0d:68:d9:8f:44:f8:64:04:7f:df:2a:f2:ef:
6d:be:5a:9e:0e:7a:71:f6:3d:9d:0a:f6:95:47:ef:16:e8:70:
0a:50:c7:42:ec:dc:43:f4:3b:0f:78:bc:3f:e5:11:c6:5b:c2:
79:e4:1a:c2:47:82:cc:fc:7d:12:40:c8:06:95:e3:05:de:09:
08:73:c8:c4:f4:85:dc:09:60:27:d4:57:51:5c:d7:4a:70:00:
ec:a2:0b:1f:34:d9:32:f1:c6:3f:98:ff:39:2d:b9:93:25:ee:
46:26:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:41:11 2025 by rpki-client