Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/xKJMBlinbdfn34LVJF69A7qgGkk.roa
File: xKJMBlinbdfn34LVJF69A7qgGkk.roa (raw, json)
Hash identifier: ghKwNM3pv6/CjqUkOttxn9jN7TiH2L3Yp/7tBiGxOUM=
Subject key identifier: C4:A2:4C:06:58:A7:6D:D7:E7:DF:82:D5:24:5E:BD:03:BA:A0:1A:49
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 01941FFA66FF574A75C069E0C85ADD9A6C6D
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/xKJMBlinbdfn34LVJF69A7qgGkk.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 185.133.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:66:ff:57:4a:75:c0:69:e0:c8:5a:dd:9a:6c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4a24c0658a76dd7e7df82d5245ebd03baa01a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:80:90:83:05:fb:59:6a:c0:a9:a1:ba:35:
eb:e7:f5:72:c1:f0:49:e2:ab:68:19:11:b6:ab:6e:
d1:43:fd:52:6a:e4:31:04:ec:f7:ef:62:d7:30:a9:
17:0a:27:1d:af:6c:fe:86:60:1f:b1:c3:b7:cb:49:
1d:57:97:f2:d7:fe:23:cb:f9:26:b9:d3:c3:b6:18:
30:42:89:4b:05:df:b0:05:2a:e0:d5:43:33:d8:ee:
56:95:42:04:4a:2b:ea:9e:e2:f1:2c:6b:1b:08:48:
e0:7e:ba:3c:87:41:39:c6:fc:0f:49:5b:84:6c:95:
00:0d:39:a8:bf:08:c6:2c:0d:f2:2f:c2:c2:d9:da:
54:0d:c4:b8:f1:9c:4c:32:68:11:de:ab:13:74:a6:
cc:a2:4d:2f:9c:7e:87:c5:6b:8f:5e:e9:01:90:82:
29:16:a3:22:1f:3d:3f:5e:39:0b:8b:59:f3:f1:a2:
d9:d2:d1:e7:2b:c8:c1:7a:37:9a:5b:eb:30:fb:19:
0b:a0:85:51:83:61:bd:d3:52:91:f8:5e:66:ea:30:
fb:69:5c:ae:3b:f2:b8:97:2f:32:49:6d:90:bd:44:
2f:91:0f:8c:59:e9:34:c8:b8:9d:1f:ce:49:99:6a:
64:ed:4b:9b:c7:d4:5c:f5:c5:30:b7:76:de:c1:4b:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:4C:06:58:A7:6D:D7:E7:DF:82:D5:24:5E:BD:03:BA:A0:1A:49
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/xKJMBlinbdfn34LVJF69A7qgGkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.242.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2e:6d:28:bd:a0:74:66:4e:65:d8:62:50:9f:b5:aa:f3:79:
ef:fd:d9:6c:f4:c9:9e:44:65:78:b1:28:c1:ef:96:4d:a3:d0:
9b:75:1a:8b:3f:07:13:a3:89:9d:c4:04:a3:65:db:fb:f4:78:
64:33:11:a0:bb:4b:95:81:cc:46:45:d6:e6:52:71:14:55:d8:
5a:82:f3:59:d4:4a:91:40:c1:fd:fa:a7:77:13:1c:91:92:f7:
ce:17:ba:fe:31:c2:76:0d:20:4a:ea:5a:06:98:94:62:15:7a:
f0:b8:59:d4:a0:78:89:b4:31:e9:35:a7:07:21:e9:30:a3:80:
10:84:82:4f:3e:ad:60:a1:b2:78:6f:ed:85:33:ff:c8:22:35:
cf:72:a1:98:d3:c0:6e:fa:ed:52:35:f7:2e:68:74:b3:ec:9b:
cb:df:e1:c9:eb:5b:d4:92:55:18:1d:e7:0c:af:54:c3:cd:d8:
bd:98:9b:a2:b0:53:35:5f:c9:6a:15:09:51:8e:f9:39:f0:4f:
9d:32:e9:c0:cc:b5:85:47:57:19:18:cb:67:10:c2:d9:c9:10:
2a:d9:b2:25:37:e3:54:7c:8f:f1:06:c7:95:b5:3c:d8:73:12:
cd:d0:0d:d7:e7:59:ba:8c:44:76:7f:8e:29:5f:48:df:94:5d:
1c:2b:69:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mb/V0p1wGngyFrdmmxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2
MGVjNDIwHhcNMjUwMTAxMDM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGEyNGMwNjU4YTc2ZGQ3ZTdkZjgyZDUyNDVlYmQwM2JhYTAxYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDiAkIMF+1lqwKmhujXr5/VywfBJ
4qtoGRG2q27RQ/1SauQxBOz372LXMKkXCicdr2z+hmAfscO3y0kdV5fy1/4jy/km
udPDthgwQolLBd+wBSrg1UMz2O5WlUIESivqnuLxLGsbCEjgfro8h0E5xvwPSVuE
bJUADTmovwjGLA3yL8LC2dpUDcS48ZxMMmgR3qsTdKbMok0vnH6HxWuPXukBkIIp
FqMiHz0/XjkLi1nz8aLZ0tHnK8jBejeaW+sw+xkLoIVRg2G901KR+F5m6jD7aVyu
O/K4ly8ySW2QvUQvkQ+MWek0yLidH85JmWpk7Uubx9Rc9cUwt3bewUtNVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMSiTAZYp23X59+C1SRevQO6oBpJMB8GA1UdIwQY
MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt
MTQ0ZDc0NzNlYTU5LzEveEtKTUJsaW5iZGZuMzRMVkpGNjlBN3FnR2trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5
LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYXyMA0G
CSqGSIb3DQEBCwUAA4IBAQBQLm0ovaB0Zk5l2GJQn7Wq83nv/dls9MmeRGV4sSjB
75ZNo9CbdRqLPwcTo4mdxASjZdv79HhkMxGgu0uVgcxGRdbmUnEUVdhagvNZ1EqR
QMH9+qd3ExyRkvfOF7r+McJ2DSBK6loGmJRiFXrwuFnUoHiJtDHpNacHIekwo4AQ
hIJPPq1gobJ4b+2FM//IIjXPcqGY08Bu+u1SNfcuaHSz7JvL3+HJ61vUklUYHecM
r1TDzdi9mJuisFM1X8lqFQlRjvk58E+dMunAzLWFR1cZGMtnEMLZyRAq2bIlN+NU
fI/xBseVtTzYcxLN0A3X51m6jER2f44pX0jflF0cK2mh
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:51 2025 by rpki-client