Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/_xnxxHKAgAtoAfNmU4jwXs_zUGA.roa
File: _xnxxHKAgAtoAfNmU4jwXs_zUGA.roa (raw, json)
Hash identifier: ORHrwvQ2+bbrBaXoyzq7X675dJWI5QfiNUn7tTnzrNA=
Subject key identifier: FF:19:F1:C4:72:80:80:0B:68:01:F3:66:53:88:F0:5E:CF:F3:50:60
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01967CA06C66D0E6055615F7F0DBA1662B16
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/_xnxxHKAgAtoAfNmU4jwXs_zUGA.roa
Signing time: Mon 28 Apr 2025 13:40:10 +0000
ROA not before: Mon 28 Apr 2025 13:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 185.143.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:a0:6c:66:d0:e6:05:56:15:f7:f0:db:a1:66:2b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 28 13:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff19f1c47280800b6801f3665388f05ecff35060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:89:f1:e5:49:4c:11:3c:ac:68:3d:d7:f0:
ee:fc:cc:5b:70:8a:da:64:19:50:bd:53:b7:16:0b:
40:87:5a:5d:a8:a5:89:22:d5:aa:1e:7a:dd:7b:78:
7e:cb:32:06:88:7b:db:23:56:b7:9f:d0:10:53:a2:
7e:ed:43:fd:1d:bb:5a:a2:fd:ff:48:37:b6:a5:6f:
44:bd:b9:6e:72:c7:7a:e5:51:b8:18:76:02:e3:92:
17:08:87:d3:9d:78:0e:c4:fa:03:58:28:12:6d:7c:
c4:08:55:b0:e0:e5:d8:62:c6:43:b7:eb:3b:71:8b:
07:a8:77:88:c1:15:1b:af:09:15:3c:45:b6:5c:1d:
39:1e:5a:16:00:31:ba:79:fb:17:71:ab:c4:af:ec:
83:e1:f2:ad:bd:a6:cd:9f:ac:80:f5:54:e3:62:60:
a0:83:c0:ce:06:9d:02:06:22:cf:6a:f6:c2:38:29:
60:54:b1:6e:0f:a6:e1:4f:a3:7e:db:1b:5e:22:53:
53:83:48:86:f4:9c:d4:f9:36:09:6d:d5:36:39:2c:
fc:d7:78:cf:61:9e:39:ae:20:59:6b:70:37:7b:a9:
e3:d5:8a:97:90:97:5a:5e:56:14:13:69:f0:cb:f4:
95:a2:fa:fb:2e:a3:2c:56:78:cc:50:55:16:01:76:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:19:F1:C4:72:80:80:0B:68:01:F3:66:53:88:F0:5E:CF:F3:50:60
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/_xnxxHKAgAtoAfNmU4jwXs_zUGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:e7:b9:17:a3:69:15:06:93:c4:1f:57:ad:2d:30:b2:52:d3:
d7:8a:fb:0b:59:bd:b3:dd:58:c4:bb:a6:86:7d:d3:0b:5d:4a:
08:42:0a:48:9f:f2:e1:9b:99:e8:30:85:3c:eb:3a:b4:44:4c:
55:a2:a6:b3:86:bb:e5:43:73:7a:7d:21:93:54:e5:a9:98:93:
47:a5:6a:79:12:b9:e2:60:33:a2:8b:43:9b:21:61:d0:95:a5:
6b:d3:a0:de:14:11:15:74:65:f8:9a:14:ae:43:d1:74:2c:12:
e7:c8:aa:43:53:f3:53:c8:d1:68:bb:59:a9:ff:16:21:b5:26:
41:8f:45:1c:bf:66:76:1d:c1:7a:a3:01:ff:61:ee:b1:ea:ee:
c1:d7:6e:46:1a:bf:7b:b1:76:8f:82:04:8f:3e:5b:48:da:e7:
c2:c0:e8:a2:5a:a5:3c:db:08:0d:ee:8a:90:bc:10:e6:6f:55:
55:9a:74:aa:e4:c8:fd:24:0f:13:07:97:af:04:71:2d:16:b5:
50:b8:fd:59:df:83:26:00:67:0c:b3:88:99:ed:c1:0d:7d:28:
63:23:b8:a0:78:12:f3:5d:fb:90:6c:3f:49:c7:17:14:27:64:
d8:84:a4:28:ae:fd:06:04:78:85:e1:2d:07:84:b9:b4:61:ed:
e6:73:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:23:36 2025 by rpki-client