Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa
File: X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa (raw, json)
Hash identifier: 0wypLX2pYlj/wkC9RZ/dWCbs3OnpHFJIgo8rTP3dhfk=
Subject key identifier: 5F:45:FB:60:76:5D:C5:DF:85:9B:EB:D2:1F:68:24:A1:A3:4A:48:41
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019422FC32C0F80D07B04EB295436485B5B0
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48716
IP address blocks: 81.31.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:32:c0:f8:0d:07:b0:4e:b2:95:43:64:85:b5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f45fb60765dc5df859bebd21f6824a1a34a4841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:51:b4:c4:ab:5d:0b:a2:a9:a0:0f:52:81:
bc:61:5e:a2:83:b8:01:2e:f9:5f:7f:c8:73:2d:f0:
fc:87:9f:a4:89:c7:4e:5c:fc:8e:1f:a6:3a:b0:a0:
8e:21:29:8a:44:4b:d1:67:c3:5e:a5:16:a6:05:26:
97:30:bb:2b:0c:21:0f:18:ce:04:bf:9f:0d:09:91:
8f:3d:57:f4:44:e3:4b:c6:c6:40:02:ac:0e:8f:7e:
65:21:e0:91:75:b7:ee:4c:cb:ea:e7:90:06:e2:eb:
02:55:f4:7e:7f:5b:66:4b:01:78:c3:0b:f9:58:71:
13:bd:00:74:41:a1:87:c6:da:b8:29:d6:93:dc:9f:
56:3e:cb:ee:f3:9e:41:bd:81:0a:dc:8f:86:d1:50:
5f:b9:60:2f:5e:92:cf:41:3a:0b:35:92:5a:48:2d:
80:1a:bc:9c:64:8e:26:b8:66:23:84:07:ad:d8:9a:
74:c2:59:d7:51:f7:66:e6:6b:ec:41:19:c2:2b:a3:
a5:26:cf:8a:b6:e5:62:b9:26:09:c2:1b:11:57:60:
e8:11:3f:9e:b6:52:dc:b0:e1:57:1a:14:77:7c:b4:
29:31:17:f8:0a:c0:7b:44:70:21:02:53:76:7d:4b:
eb:20:82:35:48:e1:6a:8c:8b:e7:85:7f:66:28:2e:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:FB:60:76:5D:C5:DF:85:9B:EB:D2:1F:68:24:A1:A3:4A:48:41
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.246.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:b4:ee:22:f8:2f:61:0f:7e:d6:02:80:a3:f7:ef:40:73:c9:
3f:f5:8d:84:e1:e7:b9:be:f5:e7:da:99:a1:09:4e:42:5e:d0:
24:cc:06:53:c5:2a:70:8b:38:16:27:96:c2:05:c6:04:4e:bb:
0d:35:dc:f9:e5:a4:80:a2:ff:f2:99:7b:e7:c9:28:64:03:44:
be:9f:12:78:b3:d4:b4:60:b0:4f:c2:4e:62:2a:86:37:b3:5d:
f3:36:cf:2a:a4:1b:b6:99:fa:04:87:12:b1:84:c0:dd:a2:fa:
cf:19:33:f0:c1:9f:74:51:e3:bb:6a:a2:7c:34:45:b1:0f:46:
f3:41:e2:2c:43:28:48:bc:6f:d5:92:5a:48:56:23:7b:7e:4f:
3b:73:fe:2f:c1:29:7b:ea:1e:4a:9f:99:03:ec:3f:b0:0e:c1:
d5:95:63:10:1c:94:41:aa:29:0d:91:59:3f:cc:80:f9:75:2d:
74:09:d8:1c:1d:61:08:42:73:26:52:d2:3f:77:18:4a:50:d5:
4a:d1:34:06:18:4f:17:a5:9e:89:a5:ab:b8:0e:a7:92:20:87:
39:be:88:ac:fb:c5:40:64:4d:0d:2b:cc:1c:57:c5:41:f1:03:
da:60:de:36:78:68:30:dd:60:0c:d8:af:f2:e6:bc:dd:a9:66:
31:79:70:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/DLA+A0HsE6ylUNkhbWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjQ1ZmI2MDc2NWRjNWRmODU5YmViZDIxZjY4MjRhMWEzNGE0ODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZVRtMSrXQuiqaAPUoG8YV6ig7gB
Lvlff8hzLfD8h5+kicdOXPyOH6Y6sKCOISmKREvRZ8NepRamBSaXMLsrDCEPGM4E
v58NCZGPPVf0RONLxsZAAqwOj35lIeCRdbfuTMvq55AG4usCVfR+f1tmSwF4wwv5
WHETvQB0QaGHxtq4KdaT3J9WPsvu855BvYEK3I+G0VBfuWAvXpLPQToLNZJaSC2A
GrycZI4muGYjhAet2Jp0wlnXUfdm5mvsQRnCK6OlJs+KtuViuSYJwhsRV2DoET+e
tlLcsOFXGhR3fLQpMRf4CsB7RHAhAlN2fUvrIII1SOFqjIvnhX9mKC77LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF9F+2B2XcXfhZvr0h9oJKGjSkhBMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvWDBYN1lIWmR4ZC1GbS12U0gyZ2tvYU5LU0VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/2MA0G
CSqGSIb3DQEBCwUAA4IBAQDZtO4i+C9hD37WAoCj9+9Ac8k/9Y2E4ee5vvXn2pmh
CU5CXtAkzAZTxSpwizgWJ5bCBcYETrsNNdz55aSAov/ymXvnyShkA0S+nxJ4s9S0
YLBPwk5iKoY3s13zNs8qpBu2mfoEhxKxhMDdovrPGTPwwZ90UeO7aqJ8NEWxD0bz
QeIsQyhIvG/VklpIViN7fk87c/4vwSl76h5Kn5kD7D+wDsHVlWMQHJRBqikNkVk/
zID5dS10CdgcHWEIQnMmUtI/dxhKUNVK0TQGGE8XpZ6Jpau4DqeSIIc5vois+8VA
ZE0NK8wcV8VB8QPaYN42eGgw3WAM2K/y5rzdqWYxeXDh
-----END CERTIFICATE-----
Generated at Wed Feb 5 11:56:58 2025 by rpki-client