Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa
File: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (raw, json)
Hash identifier: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=
Subject key identifier: 5C:4E:7A:B2:0E:23:F8:AC:21:1F:23:0E:B1:FE:4E:75:0D:B2:3D:F4
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01942747067FF12D6657E5744C538ACE77B0
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa
Signing time: Thu 02 Jan 2025 13:49:13 +0000
ROA not before: Thu 02 Jan 2025 13:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 45.158.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:06:7f:f1:2d:66:57:e5:74:4c:53:8a:ce:77:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c4e7ab20e23f8ac211f230eb1fe4e750db23df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:15:7f:a8:99:5a:35:86:53:d4:88:a0:1b:
11:a9:d2:de:1f:24:70:50:ab:f1:2c:58:c7:64:15:
ee:02:73:c6:3b:bd:2d:42:1e:3f:c0:6b:40:c8:d1:
53:7f:27:a4:ef:3e:cc:6a:25:f3:4b:af:70:72:81:
4a:ba:a1:8a:ae:4f:88:9c:d5:dd:0c:ce:70:db:c5:
05:c4:5a:cd:b5:ba:ee:bc:20:ac:4e:e7:b8:e4:37:
62:9e:34:d1:b9:6f:65:27:7f:58:30:e5:f3:9d:04:
f9:a9:4a:f4:a5:5d:84:fe:99:fe:51:87:e8:29:e8:
20:eb:23:c2:85:d0:e5:03:5a:ca:23:48:1b:17:37:
2d:a9:ee:4b:e7:d5:3b:71:b9:86:07:d1:18:91:85:
70:fb:7c:3f:e7:2c:76:dc:36:7b:7d:26:7d:a0:08:
bb:6e:20:c6:db:ce:f3:16:18:5d:1d:25:3f:97:12:
9a:07:09:4a:f5:91:9d:96:27:5e:31:01:b8:c7:ad:
0e:1f:9d:3f:bb:a8:52:ab:27:0d:fc:67:51:cd:a1:
e1:e0:48:42:67:4a:35:95:15:b0:4d:15:5f:50:14:
05:4c:62:13:98:d7:95:13:74:6f:62:0e:de:67:b6:
32:ec:a8:5b:e8:12:55:af:91:81:74:cf:63:1a:6b:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4E:7A:B2:0E:23:F8:AC:21:1F:23:0E:B1:FE:4E:75:0D:B2:3D:F4
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:18:ec:d8:34:8e:d7:47:46:5b:84:d5:d2:7b:d1:4e:ed:a3:
97:97:6d:67:89:79:fd:9a:8d:13:8c:ec:55:89:bf:d3:f1:0f:
cd:94:ee:43:7f:c9:13:29:60:42:cb:5b:d9:f6:27:46:6b:8e:
24:18:b2:78:94:d3:9b:c9:96:d5:3e:08:a6:b4:a5:98:c2:0a:
6e:3b:cd:ef:ec:18:5d:6c:ba:f5:55:14:cb:24:50:85:be:0e:
97:ed:d2:a6:5a:97:13:21:54:bd:d3:4c:03:22:4d:dc:07:74:
01:5a:90:a9:0e:ae:1e:21:3c:90:7c:0e:f9:3c:21:95:a6:e1:
2c:2c:5b:a0:6b:ee:60:aa:5b:44:cf:a6:3c:69:7a:1c:31:d8:
80:80:e2:8e:03:61:87:c6:bc:01:8b:b6:98:0d:ce:31:a4:ef:
af:b9:c8:11:1b:07:d0:a4:b3:e7:67:93:c6:4a:d4:9f:a7:a8:
27:94:df:cd:ac:9e:f4:e1:5b:7c:84:9b:0f:16:ec:22:7d:4f:
21:f5:37:ac:3f:40:d3:c6:37:a8:6f:c7:6b:1b:ba:df:d1:24:
32:b9:d2:3f:55:1f:5f:b2:d9:23:8e:f9:60:d7:a0:58:40:27:
ad:e7:fe:43:68:a8:e0:80:02:dd:23:25:71:8a:9c:b6:94:4d:
82:1f:b0:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRwZ/8S1mV+V0TFOKznewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjUwMTAyMTM0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzRlN2FiMjBlMjNmOGFjMjExZjIzMGViMWZlNGU3NTBkYjIzZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3AVf6iZWjWGU9SIoBsRqdLeHyRw
UKvxLFjHZBXuAnPGO70tQh4/wGtAyNFTfyek7z7MaiXzS69wcoFKuqGKrk+InNXd
DM5w28UFxFrNtbruvCCsTue45DdinjTRuW9lJ39YMOXznQT5qUr0pV2E/pn+UYfo
Kegg6yPChdDlA1rKI0gbFzctqe5L59U7cbmGB9EYkYVw+3w/5yx23DZ7fSZ9oAi7
biDG287zFhhdHSU/lxKaBwlK9ZGdlideMQG4x60OH50/u6hSqycN/GdRzaHh4EhC
Z0o1lRWwTRVfUBQFTGITmNeVE3RvYg7eZ7Yy7Khb6BJVr5GBdM9jGmsFPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFxOerIOI/isIR8jDrH+TnUNsj30MB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEvWEU1NnNnNGotS3doSHlNT3NmNU9kUTJ5UGZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4MMA0G
CSqGSIb3DQEBCwUAA4IBAQBtGOzYNI7XR0ZbhNXSe9FO7aOXl21niXn9mo0TjOxV
ib/T8Q/NlO5Df8kTKWBCy1vZ9idGa44kGLJ4lNObyZbVPgimtKWYwgpuO83v7Bhd
bLr1VRTLJFCFvg6X7dKmWpcTIVS900wDIk3cB3QBWpCpDq4eITyQfA75PCGVpuEs
LFuga+5gqltEz6Y8aXocMdiAgOKOA2GHxrwBi7aYDc4xpO+vucgRGwfQpLPnZ5PG
StSfp6gnlN/NrJ704Vt8hJsPFuwifU8h9TesP0DTxjeob8drG7rf0SQyudI/VR9f
stkjjvlg16BYQCet5/5DaKjggALdIyVxipy2lE2CH7BX
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:39 2025 by rpki-client