Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/XZYEs5JjEy47ONSwClZP7W_SpWQ.roa
File: XZYEs5JjEy47ONSwClZP7W_SpWQ.roa (raw, json)
Hash identifier: FFK41btTw97lEXuDbsw2v07NSZIiwQ180moESsZgfJA=
Subject key identifier: 5D:96:04:B3:92:63:13:2E:3B:38:D4:B0:0A:56:4F:ED:6F:D2:A5:64
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282816AA367A992B1888865204E5008A
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/XZYEs5JjEy47ONSwClZP7W_SpWQ.roa
Signing time: Thu 02 Jan 2025 17:55:03 +0000
ROA not before: Thu 02 Jan 2025 17:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43718
IP address blocks: 82.147.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:16:aa:36:7a:99:2b:18:88:86:52:04:e5:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d9604b39263132e3b38d4b00a564fed6fd2a564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:e0:d6:2a:1d:48:26:47:c3:e5:68:6b:e8:
3c:c1:a2:89:7e:9e:ab:0a:13:0c:43:32:ab:18:9a:
0b:c7:4d:cf:42:41:a3:f2:2a:a0:02:64:51:47:f1:
70:95:79:48:62:93:b5:96:ef:d3:41:11:b0:ec:9a:
ad:fd:d3:e3:82:7f:e2:bf:e5:28:b0:f1:b0:40:d3:
9f:57:49:84:4f:0a:f8:fc:00:1b:7f:04:7e:36:81:
60:c7:3a:ab:22:26:b4:41:58:39:8d:12:96:28:c3:
c7:4a:49:49:ec:cd:1e:29:aa:ef:32:a9:e5:84:99:
a2:59:dc:d2:ed:65:13:bb:82:92:d0:af:5d:24:2e:
61:1c:38:f9:44:63:25:51:8e:fc:9b:8e:03:0d:ed:
57:dc:66:38:92:10:20:86:f0:74:7a:45:b0:e2:39:
57:3d:5a:7b:93:b0:74:0f:51:d6:94:5f:06:f6:e8:
30:9e:a3:cb:71:b8:11:a4:b5:ed:b4:40:ce:10:f7:
a7:88:7c:30:22:3b:9e:f2:b2:c7:83:ef:13:6e:79:
b2:a7:59:1b:8d:59:35:91:9e:66:d3:b3:dc:cf:69:
1d:ea:95:ef:99:08:33:aa:1f:d3:a9:e0:08:0c:d5:
f9:40:59:1b:4a:e1:5c:32:50:e6:7b:a8:30:6d:3d:
21:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:04:B3:92:63:13:2E:3B:38:D4:B0:0A:56:4F:ED:6F:D2:A5:64
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/XZYEs5JjEy47ONSwClZP7W_SpWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.135.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1a:5a:71:52:5e:73:0d:78:b3:48:82:d4:d5:87:f2:be:97:
01:f5:03:5a:54:f6:00:63:46:fc:dc:cb:0e:16:3d:c2:fc:ae:
b6:e4:e7:59:0c:98:79:d2:ec:e4:c2:28:6f:e9:91:7a:3f:9f:
6c:31:93:3d:31:18:d6:d6:b0:06:13:2e:1a:93:a6:a1:b6:32:
d6:46:a5:c2:03:c9:09:fd:22:bd:5c:6d:7d:80:62:a7:b8:15:
8d:b8:a4:5b:f8:6d:cd:71:28:bc:d7:d3:03:dc:3a:9f:0c:22:
e6:49:53:c8:dc:00:88:7c:bb:05:3e:fa:2c:85:02:c6:8a:3c:
8e:16:67:ff:8e:79:58:5b:d0:9d:0b:f1:d4:3c:76:e7:20:a3:
74:41:da:66:e3:8f:43:7d:9a:8c:69:ba:d5:d0:72:e0:9e:e6:
6a:65:b2:5d:40:64:7b:4b:25:a6:ea:32:17:c2:ae:34:ab:aa:
27:47:81:3f:81:c7:1d:91:76:bf:27:5e:a6:0b:ff:4a:a3:e1:
72:59:e5:97:39:c3:be:0c:18:af:3b:4a:5f:4a:a1:e8:15:2a:
a9:9d:d6:a9:fa:74:3b:a3:f0:04:15:70:b6:ea:41:2e:f0:5f:
09:9b:a0:d4:97:12:92:66:19:ed:41:23:8d:31:bf:af:0a:9f:
4d:1b:69:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKBaqNnqZKxiIhlIE5QCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTAyMTc1NTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDk2MDRiMzkyNjMxMzJlM2IzOGQ0YjAwYTU2NGZlZDZmZDJhNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBzg1iodSCZHw+Voa+g8waKJfp6r
ChMMQzKrGJoLx03PQkGj8iqgAmRRR/FwlXlIYpO1lu/TQRGw7Jqt/dPjgn/iv+Uo
sPGwQNOfV0mETwr4/AAbfwR+NoFgxzqrIia0QVg5jRKWKMPHSklJ7M0eKarvMqnl
hJmiWdzS7WUTu4KS0K9dJC5hHDj5RGMlUY78m44DDe1X3GY4khAghvB0ekWw4jlX
PVp7k7B0D1HWlF8G9ugwnqPLcbgRpLXttEDOEPeniHwwIjue8rLHg+8Tbnmyp1kb
jVk1kZ5m07Pcz2kd6pXvmQgzqh/TqeAIDNX5QFkbSuFcMlDme6gwbT0hmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF2WBLOSYxMuOzjUsApWT+1v0qVkMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvWFpZRXM1SmpFeTQ3T05Td0NsWlA3V19TcFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpOHMA0G
CSqGSIb3DQEBCwUAA4IBAQBYGlpxUl5zDXizSILU1YfyvpcB9QNaVPYAY0b83MsO
Fj3C/K625OdZDJh50uzkwihv6ZF6P59sMZM9MRjW1rAGEy4ak6ahtjLWRqXCA8kJ
/SK9XG19gGKnuBWNuKRb+G3NcSi819MD3DqfDCLmSVPI3ACIfLsFPvoshQLGijyO
Fmf/jnlYW9CdC/HUPHbnIKN0Qdpm449DfZqMabrV0HLgnuZqZbJdQGR7SyWm6jIX
wq40q6onR4E/gccdkXa/J16mC/9Ko+FyWeWXOcO+DBivO0pfSqHoFSqpndap+nQ7
o/AEFXC26kEu8F8Jm6DUlxKSZhntQSONMb+vCp9NG2lb
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:51:04 2025 by rpki-client