Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/xMcgE5el8x0M_rTEbVyhY3X3x1c.roa
File: xMcgE5el8x0M_rTEbVyhY3X3x1c.roa (raw, json)
Hash identifier: PGLJrZJLBXcLan5LC1jzJXTcMWQ+drrbyWZOiA3GgNU=
Subject key identifier: C4:C7:20:13:97:A5:F3:1D:0C:FE:B4:C4:6D:5C:A1:63:75:F7:C7:57
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 01942825564A3764BF62883D90C347941BDC
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/xMcgE5el8x0M_rTEbVyhY3X3x1c.roa
Signing time: Thu 02 Jan 2025 17:52:03 +0000
ROA not before: Thu 02 Jan 2025 17:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3329
IP address blocks: 2a01:830::/32 maxlen: 48
2a01:831::/32 maxlen: 32
2a01:8c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:56:4a:37:64:bf:62:88:3d:90:c3:47:94:1b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 2 17:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4c7201397a5f31d0cfeb4c46d5ca16375f7c757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:a4:00:73:5f:5c:e1:56:98:e4:84:77:1c:
20:32:0f:da:4c:f2:6a:52:e1:67:cd:14:9a:c4:bc:
0c:1c:f7:03:be:19:ef:ae:b9:7b:e7:4f:40:55:43:
c3:71:0d:4c:61:7e:be:56:45:55:0a:76:08:4f:1b:
4d:ed:db:e8:cb:84:b6:65:d3:93:91:43:07:1c:de:
da:29:1b:21:d9:fe:f2:88:73:8e:b5:53:26:bf:d9:
4c:7e:94:58:a1:53:95:bb:25:5a:af:bc:c5:14:59:
c7:20:e3:72:d7:45:44:62:3c:ef:3a:a4:73:91:3b:
a2:8a:7a:57:c9:d8:5c:fa:3e:16:e2:91:01:9a:dc:
a0:b2:c4:29:e5:7c:02:32:62:7b:40:c6:d6:bd:0f:
fc:c7:87:54:14:82:9f:17:a1:f0:7f:c9:fb:5a:3d:
5c:3b:4f:ac:dd:9e:47:95:f2:f6:4e:8a:5c:f9:c5:
94:9c:9d:2b:41:f4:f8:77:b7:a5:46:1d:19:aa:a7:
7b:4f:75:a1:21:05:04:d5:ad:ad:d7:54:88:f4:8f:
07:f5:9b:e7:8c:e4:f4:f2:4f:71:b6:fa:6d:86:13:
ee:29:a6:23:74:21:40:04:73:60:a8:20:0c:54:a1:
4c:b7:30:3e:9c:d3:0f:50:8d:cc:79:b4:43:38:28:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C7:20:13:97:A5:F3:1D:0C:FE:B4:C4:6D:5C:A1:63:75:F7:C7:57
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/xMcgE5el8x0M_rTEbVyhY3X3x1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:830::/31
2a01:8c8::/32
Signature Algorithm: sha256WithRSAEncryption
58:d5:4b:ad:b9:76:86:59:ca:8c:d4:a2:60:f9:72:be:fc:3d:
66:16:25:44:89:a2:d2:c5:61:5d:06:d2:73:f4:75:fd:b7:03:
17:5e:07:b2:06:35:25:76:84:50:02:a5:30:e8:6f:6c:5a:45:
c3:e7:43:e9:b7:1b:32:2e:f9:34:74:39:c5:93:42:28:14:03:
00:f5:56:0c:f8:79:07:6e:e2:69:6f:dd:59:3a:fe:7a:8b:90:
ab:e9:b6:94:53:f2:72:b5:e8:98:b8:87:e4:0a:69:8d:95:ed:
b8:e0:94:09:2e:6a:d6:7f:c9:1a:a5:86:44:5c:dd:04:88:35:
02:29:c2:91:a7:ca:a2:ce:d2:4a:64:ec:53:2c:6c:cf:6b:2b:
40:e9:cf:ce:a3:a8:33:83:58:75:9e:5e:85:1e:fc:e0:2f:37:
1b:a1:9c:99:79:80:d1:2a:06:5a:33:c9:e4:bb:b3:e4:de:cb:
4a:69:5e:76:14:df:d6:33:ca:89:6e:07:a7:e7:02:a3:70:5f:
fb:38:f7:8b:97:ed:8a:23:62:a2:17:b4:b8:f0:83:52:7b:86:
28:90:71:71:c9:de:e2:2f:f2:7c:4b:90:de:00:0f:e2:e8:a2:
36:ad:5f:d2:6f:b3:23:91:db:d1:f3:62:c3:f7:f5:6f:9b:90:
2c:1c:0b:58
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQoJVZKN2S/Yog9kMNHlBvcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3
NTE1ZDIwHhcNMjUwMTAyMTc1MjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGM3MjAxMzk3YTVmMzFkMGNmZWI0YzQ2ZDVjYTE2Mzc1ZjdjNzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K2kAHNfXOFWmOSEdxwgMg/aTPJq
UuFnzRSaxLwMHPcDvhnvrrl7509AVUPDcQ1MYX6+VkVVCnYITxtN7dvoy4S2ZdOT
kUMHHN7aKRsh2f7yiHOOtVMmv9lMfpRYoVOVuyVar7zFFFnHIONy10VEYjzvOqRz
kTuiinpXydhc+j4W4pEBmtygssQp5XwCMmJ7QMbWvQ/8x4dUFIKfF6Hwf8n7Wj1c
O0+s3Z5HlfL2Topc+cWUnJ0rQfT4d7elRh0Zqqd7T3WhIQUE1a2t11SI9I8H9Zvn
jOT08k9xtvpthhPuKaYjdCFABHNgqCAMVKFMtzA+nNMPUI3MebRDOCgqgQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMTHIBOXpfMdDP60xG1coWN198dXMB8GA1UdIwQY
MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt
ZWVjNWQ1MGVmYTk0LzEveE1jZ0U1ZWw4eDBNX3JURWJWeWhZM1gzeDFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0
LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUBKgEIMAMF
ACoBCMgwDQYJKoZIhvcNAQELBQADggEBAFjVS625doZZyozUomD5cr78PWYWJUSJ
otLFYV0G0nP0df23AxdeB7IGNSV2hFACpTDob2xaRcPnQ+m3GzIu+TR0OcWTQigU
AwD1Vgz4eQdu4mlv3Vk6/nqLkKvptpRT8nK16Ji4h+QKaY2V7bjglAkuatZ/yRql
hkRc3QSINQIpwpGnyqLO0kpk7FMsbM9rK0Dpz86jqDODWHWeXoUe/OAvNxuhnJl5
gNEqBlozyeS7s+Tey0ppXnYU39YzyoluB6fnAqNwX/s494uX7YojYqIXtLjwg1J7
hiiQcXHJ3uIv8nxLkN4AD+LoojatX9JvsyOR29HzYsP39W+bkCwcC1g=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:22:08 2025 by rpki-client