Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/x3yWHa9AzsC2UFxDtfl_kHydbac.roa
File: x3yWHa9AzsC2UFxDtfl_kHydbac.roa (raw, json)
Hash identifier: eGBY10Pf9rHtNTde9UgakTcgFuxq2EiEljgaM95RTXQ=
Subject key identifier: C7:7C:96:1D:AF:40:CE:C0:B6:50:5C:43:B5:F9:7F:90:7C:9D:6D:A7
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EDA9FE40251DF1B6EFC8371E16F59
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/x3yWHa9AzsC2UFxDtfl_kHydbac.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208577
IP address blocks: 2a0e:aa07:e03c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:da:9f:e4:02:51:df:1b:6e:fc:83:71:e1:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c77c961daf40cec0b6505c43b5f97f907c9d6da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:81:68:14:c2:0d:12:bf:9d:e7:51:a8:21:
d7:3d:9b:c6:5b:6c:26:63:00:61:c1:6b:85:5f:1e:
23:9d:7e:c6:24:ff:20:34:e8:b0:1c:5d:c8:76:9f:
47:fe:93:ac:cc:d3:9c:5e:a4:fb:de:b9:4a:56:59:
45:01:2a:30:c4:92:d4:10:e1:8a:b8:e5:43:f3:fd:
a3:38:fc:97:a3:84:03:ee:7d:81:50:26:cf:bc:d6:
63:e8:29:80:06:af:71:9d:4c:a6:71:1d:b2:b8:6c:
59:e5:d4:a2:4f:e6:b7:9c:be:e4:65:e3:73:c2:06:
54:9b:54:7b:00:70:16:d9:b4:38:0f:26:c5:1c:7f:
18:db:87:da:00:94:b3:45:b9:9f:88:44:e1:b8:cf:
25:ce:3e:dc:b9:0b:d1:8d:bd:3f:53:18:03:7a:8a:
c9:12:b1:fb:4b:c2:05:e0:1b:08:0b:ef:e6:64:b8:
d9:e0:9c:c3:9c:89:7c:a9:5f:cc:76:ef:ee:88:3e:
3c:e7:5a:8c:bb:78:e4:10:42:96:bd:7c:5b:eb:88:
fe:11:42:b4:db:a0:09:3d:df:a2:8f:e5:54:38:43:
91:4e:79:a5:a7:88:ae:11:53:c5:ab:6a:92:8b:8c:
bd:23:9a:52:b7:3b:94:dc:a4:90:d5:c0:91:98:6e:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7C:96:1D:AF:40:CE:C0:B6:50:5C:43:B5:F9:7F:90:7C:9D:6D:A7
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/x3yWHa9AzsC2UFxDtfl_kHydbac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e03c::/48
Signature Algorithm: sha256WithRSAEncryption
bc:62:13:1e:57:31:43:59:f0:63:ee:fa:2e:aa:2f:c9:e3:a6:
0f:c9:5a:d4:8b:7d:c5:f6:e6:7a:20:58:ee:bc:41:31:39:a1:
d1:40:af:c3:38:3e:f2:b5:c4:a7:f4:66:bf:1b:d1:a9:57:83:
32:94:f1:91:bf:eb:78:dd:11:09:ec:73:33:be:83:fd:30:77:
86:27:d0:0f:13:19:e6:47:78:dc:55:d6:f4:95:2f:74:a7:50:
0a:d4:8c:18:5e:55:d3:01:b4:a9:66:18:26:29:a7:ca:1c:46:
cc:cd:76:b3:17:45:24:6e:cb:6c:68:c3:fb:c6:4b:41:1a:a0:
49:1e:02:e0:2d:de:01:d5:7b:e0:17:57:2c:cc:39:fe:f0:d0:
e0:fa:4f:6d:ba:59:07:07:2d:66:89:90:d4:3c:c1:d6:85:2e:
1d:31:8a:a0:bc:c1:20:9a:dc:1d:5d:fe:0d:bb:ae:69:5a:96:
ec:a1:0a:c7:3a:53:f7:da:d9:7e:d8:2d:9a:4a:e6:5d:19:2f:
6f:6a:b5:18:c5:93:b7:d6:38:4f:c6:0b:83:1d:70:2e:6c:56:
c4:b8:53:c8:62:42:12:35:3a:69:63:9a:2a:e4:94:e2:a4:cd:
7c:6b:f6:fc:b5:66:4b:8e:2c:a3:73:ca:2c:91:8a:80:b2:c0:
99:e6:a5:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljtqf5AJR3xtu/INx4W9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzdjOTYxZGFmNDBjZWMwYjY1MDVjNDNiNWY5N2Y5MDdjOWQ2ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjqBaBTCDRK/nedRqCHXPZvGW2wm
YwBhwWuFXx4jnX7GJP8gNOiwHF3Idp9H/pOszNOcXqT73rlKVllFASowxJLUEOGK
uOVD8/2jOPyXo4QD7n2BUCbPvNZj6CmABq9xnUymcR2yuGxZ5dSiT+a3nL7kZeNz
wgZUm1R7AHAW2bQ4DybFHH8Y24faAJSzRbmfiEThuM8lzj7cuQvRjb0/UxgDeorJ
ErH7S8IF4BsIC+/mZLjZ4JzDnIl8qV/Mdu/uiD4851qMu3jkEEKWvXxb64j+EUK0
26AJPd+ij+VUOEORTnmlp4iuEVPFq2qSi4y9I5pStzuU3KSQ1cCRmG5p3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMd8lh2vQM7AtlBcQ7X5f5B8nW2nMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEveDN5V0hhOUF6c0MyVUZ4RHRmbF9rSHlkYmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+A8
MA0GCSqGSIb3DQEBCwUAA4IBAQC8YhMeVzFDWfBj7vouqi/J46YPyVrUi33F9uZ6
IFjuvEExOaHRQK/DOD7ytcSn9Ga/G9GpV4MylPGRv+t43REJ7HMzvoP9MHeGJ9AP
ExnmR3jcVdb0lS90p1AK1IwYXlXTAbSpZhgmKafKHEbMzXazF0UkbstsaMP7xktB
GqBJHgLgLd4B1XvgF1cszDn+8NDg+k9tulkHBy1miZDUPMHWhS4dMYqgvMEgmtwd
Xf4Nu65pWpbsoQrHOlP32tl+2C2aSuZdGS9varUYxZO31jhPxguDHXAubFbEuFPI
YkISNTppY5oq5JTipM18a/b8tWZLjiyjc8oskYqAssCZ5qUM
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:19 2025 by rpki-client