Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/xNwSYwAbBI1je8GEBcLJwVabZvM.roa
File: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (raw, json)
Hash identifier: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=
Subject key identifier: C4:DC:12:63:00:1B:04:8D:63:7B:C1:84:05:C2:C9:C1:56:9B:66:F3
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019422FB15AD46B1B2403ABAE272666871CF
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/xNwSYwAbBI1je8GEBcLJwVabZvM.roa
Signing time: Wed 01 Jan 2025 17:47:47 +0000
ROA not before: Wed 01 Jan 2025 17:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199346
IP address blocks: 81.24.248.0/21 maxlen: 24
185.12.156.0/24 maxlen: 24
185.12.158.0/23 maxlen: 24
2a03:2240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:15:ad:46:b1:b2:40:3a:ba:e2:72:66:68:71:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4dc1263001b048d637bc18405c2c9c1569b66f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:06:28:3a:c7:59:ec:fe:77:37:0d:d5:e0:
57:26:db:4d:90:d8:67:9f:6d:66:ef:36:b9:77:b5:
19:95:6f:0c:0a:60:b3:12:c8:75:60:72:32:5c:f2:
43:b6:85:8f:03:41:25:1a:6a:26:85:44:00:95:d1:
ae:3c:6b:e3:55:fe:be:df:06:56:6e:e6:00:be:2a:
08:82:3b:8a:db:41:bd:99:67:b9:e2:46:fc:f0:58:
0b:26:13:7d:33:aa:00:86:40:02:a8:d5:de:d1:01:
a4:26:25:96:4b:db:68:ea:94:c7:84:f4:d9:35:08:
ad:ff:84:10:c1:22:52:9d:84:26:dc:cc:fd:2d:ea:
02:48:72:60:7b:8e:2c:1c:80:e9:07:be:ba:81:ab:
11:8f:c9:9c:5d:cf:46:98:5c:b6:af:9b:29:6f:1e:
ff:e8:eb:1b:ed:6a:79:7d:1a:51:f0:ca:c5:38:c4:
4d:09:14:ef:8f:0f:12:b3:df:e6:6a:39:f2:3f:b3:
24:21:c2:d0:d3:22:e4:f3:38:13:df:24:8f:39:a7:
fc:ab:67:32:2c:e0:b4:99:84:99:aa:e0:64:e0:1f:
83:8a:16:5d:4d:b8:38:25:5a:4c:ec:0b:82:82:36:
66:86:cf:f0:1e:df:e8:23:56:d1:d8:94:2f:1b:0a:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:12:63:00:1B:04:8D:63:7B:C1:84:05:C2:C9:C1:56:9B:66:F3
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/xNwSYwAbBI1je8GEBcLJwVabZvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.248.0/21
185.12.156.0/24
185.12.158.0/23
IPv6:
2a03:2240::/32
Signature Algorithm: sha256WithRSAEncryption
2e:0a:2e:5c:86:4a:f8:aa:78:c2:25:3a:e2:45:80:a8:f6:e6:
20:1e:14:e8:88:26:43:2e:89:38:d9:99:f9:68:42:76:d0:c8:
62:5c:9b:ee:24:10:15:13:78:df:25:26:36:2a:ad:7f:65:9c:
9b:23:70:54:10:6e:93:ba:7c:e6:be:ad:2c:39:56:a3:b5:22:
ef:82:61:8c:0d:60:3b:ee:84:97:5a:51:a7:b3:99:f6:8a:14:
1a:01:f7:84:55:6d:ff:72:aa:40:7c:fa:a5:1b:18:c5:fc:bc:
4a:69:d2:06:bb:17:4f:08:35:f7:9f:b5:ef:e4:05:1d:91:67:
1f:38:12:33:47:17:e6:59:88:7c:e0:07:a5:bd:da:24:3a:79:
12:19:5e:8e:c7:54:0e:48:78:79:e9:2e:fc:b4:54:0d:81:f9:
62:87:24:fc:8a:58:67:55:23:d4:23:32:4e:e3:d3:59:e8:13:
35:75:d9:79:e6:99:bd:94:1d:c9:7e:d4:99:fa:75:e7:b7:22:
5c:0a:5b:3a:c7:03:5c:7e:84:4f:f1:98:2a:14:ea:65:01:66:
2c:13:97:81:b2:03:0e:ba:cc:cc:33:d5:8a:9f:72:4c:ff:f0:
7f:65:72:ca:26:0e:39:96:97:91:0a:1b:41:41:04:7a:35:8a:
1a:6b:e9:a3
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQi+xWtRrGyQDq64nJmaHHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjUwMTAxMTc0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGRjMTI2MzAwMWIwNDhkNjM3YmMxODQwNWMyYzljMTU2OWI2NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtoGKDrHWez+dzcN1eBXJttNkNhn
n21m7za5d7UZlW8MCmCzEsh1YHIyXPJDtoWPA0ElGmomhUQAldGuPGvjVf6+3wZW
buYAvioIgjuK20G9mWe54kb88FgLJhN9M6oAhkACqNXe0QGkJiWWS9to6pTHhPTZ
NQit/4QQwSJSnYQm3Mz9LeoCSHJge44sHIDpB766gasRj8mcXc9GmFy2r5spbx7/
6Osb7Wp5fRpR8MrFOMRNCRTvjw8Ss9/majnyP7MkIcLQ0yLk8zgT3ySPOaf8q2cy
LOC0mYSZquBk4B+DihZdTbg4JVpM7AuCgjZmhs/wHt/oI1bR2JQvGwoVNwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMTcEmMAGwSNY3vBhAXCycFWm2bzMB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEveE53U1l3QWJCSTFqZThHRUJjTEp3VmFiWnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDURj4AwQA
uQycAwQBuQyeMA0EAgACMAcDBQAqAyJAMA0GCSqGSIb3DQEBCwUAA4IBAQAuCi5c
hkr4qnjCJTriRYCo9uYgHhToiCZDLok42Zn5aEJ20MhiXJvuJBAVE3jfJSY2Kq1/
ZZybI3BUEG6Tunzmvq0sOVajtSLvgmGMDWA77oSXWlGns5n2ihQaAfeEVW3/cqpA
fPqlGxjF/LxKadIGuxdPCDX3n7Xv5AUdkWcfOBIzRxfmWYh84AelvdokOnkSGV6O
x1QOSHh56S78tFQNgflihyT8ilhnVSPUIzJO49NZ6BM1ddl55pm9lB3JftSZ+nXn
tyJcCls6xwNcfoRP8ZgqFOplAWYsE5eBsgMOuszMM9WKn3JM//B/ZXLKJg45lpeR
ChtBQQR6NYoaa+mj
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:33:04 2025 by rpki-client