Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/XeXaIv0GnCQWCewZa3XGZvVcOuU.roa
File: XeXaIv0GnCQWCewZa3XGZvVcOuU.roa (raw, json)
Hash identifier: IlSm1MC8XpLI7JpFnpnOEj3N8KdmO1O/PRbAlZC1Yqs=
Subject key identifier: 5D:E5:DA:22:FD:06:9C:24:16:09:EC:19:6B:75:C6:66:F5:5C:3A:E5
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 01941FFA7ACA578232F54580CDC6CF9A1AA9
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/XeXaIv0GnCQWCewZa3XGZvVcOuU.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2001:678:934::/48 maxlen: 48
2001:67c:bf0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7a:ca:57:82:32:f5:45:80:cd:c6:cf:9a:1a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5de5da22fd069c241609ec196b75c666f55c3ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:e7:13:61:4d:5d:44:86:1f:7a:b3:82:0c:
76:85:90:13:1e:eb:7b:93:48:1a:5a:25:6c:b3:a7:
8b:0a:9b:bf:ba:d1:21:41:be:12:c2:79:ec:6e:18:
64:10:ef:5a:e7:65:67:33:e8:78:3f:b5:0b:77:87:
1f:4f:8c:3d:7b:a6:27:e7:dc:aa:3a:92:be:79:78:
7c:b9:76:61:a2:64:f0:70:fc:d2:e7:14:b9:0d:09:
ac:95:9e:5b:d3:83:74:5b:e3:3b:25:b0:b5:bf:57:
b5:5a:55:fe:a9:9a:ab:4e:e8:2c:a2:81:c2:f4:ac:
29:87:44:79:db:6f:65:f4:d9:61:5c:98:d5:b3:2e:
8a:38:da:be:9a:77:cc:ea:fb:27:26:78:f3:57:b8:
b5:2b:a1:bd:48:52:95:10:72:a5:04:ee:b1:49:2a:
0b:09:e2:c8:9d:ca:85:0f:65:6b:ac:66:ab:4e:59:
7e:f1:6d:27:05:b1:5f:2b:77:f8:97:72:29:3e:05:
43:57:15:6d:b6:34:41:eb:82:7f:de:06:ac:a9:25:
4e:d1:f2:d5:79:fe:c1:ba:96:7e:7e:c5:d7:71:5c:
32:51:ae:65:d0:6c:65:86:1e:35:ff:8f:45:68:1b:
1e:19:e4:b4:17:27:7e:04:ef:19:1e:0b:22:10:de:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E5:DA:22:FD:06:9C:24:16:09:EC:19:6B:75:C6:66:F5:5C:3A:E5
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/XeXaIv0GnCQWCewZa3XGZvVcOuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:934::/48
2001:67c:bf0::/48
Signature Algorithm: sha256WithRSAEncryption
0a:c1:81:13:81:76:46:47:ad:fe:59:ac:a6:67:a0:85:2a:0f:
c3:be:9d:bc:72:67:e5:70:de:58:8c:4a:e4:ca:52:e8:8f:0f:
9e:f5:80:ec:c3:b2:02:46:de:0a:b7:60:21:79:36:5b:a1:6a:
40:17:83:90:62:a9:12:53:06:59:97:76:b6:18:79:89:71:b4:
a2:88:63:dd:cb:23:35:03:80:7a:8c:8b:de:a1:3d:1a:0a:ee:
c4:92:f6:61:05:91:2d:79:2c:47:e7:9e:6d:4b:b1:7e:77:0b:
ed:64:a1:4f:0b:50:0d:1b:fd:00:ca:12:cb:23:03:89:8e:6f:
76:88:c5:c6:79:3a:07:12:1f:d0:65:f6:ff:17:b2:10:61:12:
d3:76:ab:7b:95:6d:71:4b:96:24:fb:95:cd:2c:c8:be:dc:bf:
13:0f:a9:96:bd:b5:3f:92:97:9c:b4:18:0f:53:c8:ca:88:39:
05:25:1a:67:59:57:93:7f:c4:56:72:67:0e:9f:df:d2:d5:18:
23:f9:55:02:94:73:eb:2d:c5:25:d9:ae:1d:be:38:11:7c:21:
bc:43:58:2c:7d:e9:fb:45:86:87:8c:6c:20:f8:f1:22:18:e1:
f5:d2:7a:32:c9:5c:4c:a9:db:4f:8a:27:4c:55:9c:fa:c5:f2:
39:c0:3b:87
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQf+nrKV4Iy9UWAzcbPmhqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlM2Y3NGYyYjZlNGUyOGU5ZmY2Y2EzY2NhM2E1ZDc4Y2Ey
Y2FkNmEwHhcNMjUwMTAxMDM0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGU1ZGEyMmZkMDY5YzI0MTYwOWVjMTk2Yjc1YzY2NmY1NWMzYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv93nE2FNXUSGH3qzggx2hZATHut7
k0gaWiVss6eLCpu/utEhQb4SwnnsbhhkEO9a52VnM+h4P7ULd4cfT4w9e6Yn59yq
OpK+eXh8uXZhomTwcPzS5xS5DQmslZ5b04N0W+M7JbC1v1e1WlX+qZqrTugsooHC
9Kwph0R5229l9NlhXJjVsy6KONq+mnfM6vsnJnjzV7i1K6G9SFKVEHKlBO6xSSoL
CeLIncqFD2VrrGarTll+8W0nBbFfK3f4l3IpPgVDVxVttjRB64J/3gasqSVO0fLV
ef7BupZ+fsXXcVwyUa5l0Gxlhh41/49FaBseGeS0Fyd+BO8ZHgsiEN5VfQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFF3l2iL9BpwkFgnsGWt1xmb1XDrlMB8GA1UdIwQY
MBaAFL4/dPK25OKOn/bKPMo6XXjKLK1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzIt
ZDA5OTYxN2JlYjU2LzEvWGVYYUl2MEduQ1FXQ2V3WmEzWEdadlZjT3VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzItZDA5OTYxN2JlYjU2
LzEvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAk0
AwcAIAEGfAvwMA0GCSqGSIb3DQEBCwUAA4IBAQAKwYETgXZGR63+WaymZ6CFKg/D
vp28cmflcN5YjErkylLojw+e9YDsw7ICRt4Kt2AheTZboWpAF4OQYqkSUwZZl3a2
GHmJcbSiiGPdyyM1A4B6jIveoT0aCu7EkvZhBZEteSxH555tS7F+dwvtZKFPC1AN
G/0AyhLLIwOJjm92iMXGeToHEh/QZfb/F7IQYRLTdqt7lW1xS5Yk+5XNLMi+3L8T
D6mWvbU/kpectBgPU8jKiDkFJRpnWVeTf8RWcmcOn9/S1Rgj+VUClHPrLcUl2a4d
vjgRfCG8Q1gsfen7RYaHjGwg+PEiGOH10noyyVxMqdtPiidMVZz6xfI5wDuH
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:34 2025 by rpki-client