Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/XjL71-3PajMZad_HdbA15Bplq0U.roa
File: XjL71-3PajMZad_HdbA15Bplq0U.roa (raw, json)
Hash identifier: rOXfegfYmcofws7uWR774DTH8oSqBu8bnZFURql4c4Y=
Subject key identifier: 5E:32:FB:D7:ED:CF:6A:33:19:69:DF:C7:75:B0:35:E4:1A:65:AB:45
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 018CC86F2E8F9CB0632EC9A1205144BCB0C5
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/XjL71-3PajMZad_HdbA15Bplq0U.roa
Signing time: Tue 02 Jan 2024 04:29:38 +0000
ROA not before: Tue 02 Jan 2024 04:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212435
IP address blocks: 193.163.76.0/24 maxlen: 24
2a12:4b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:2e:8f:9c:b0:63:2e:c9:a1:20:51:44:bc:b0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Jan 2 04:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e32fbd7edcf6a331969dfc775b035e41a65ab45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:92:40:ea:b4:0d:92:c4:6c:d4:87:91:d7:
4d:d1:4f:22:9f:04:14:0d:7d:3e:4d:95:39:f1:cf:
fd:cd:13:d6:82:db:6f:28:8f:00:8c:65:fd:48:8b:
ef:b1:d3:ee:d1:02:73:c3:41:a4:55:a5:89:57:84:
82:7c:7f:9a:27:c1:32:83:f3:04:dc:fa:ca:2c:46:
26:49:7f:31:b1:7f:f5:80:e6:4e:7d:b9:3a:60:4a:
80:dd:eb:8a:1c:29:13:c3:1a:ce:61:f0:e6:42:96:
ec:c0:2f:f9:f5:de:0a:1c:7e:61:69:23:03:dc:fc:
de:93:42:0f:bf:0d:76:18:ca:84:3f:40:61:7e:69:
e8:07:cb:64:82:31:21:6a:60:06:d6:36:d2:58:33:
d1:59:4b:c2:6f:71:d4:82:1b:be:1e:3a:a2:da:72:
36:bc:0d:2c:1b:8b:7a:1b:10:9d:f1:27:2f:b6:b6:
23:96:49:de:d5:73:8a:32:1f:75:51:43:85:17:85:
c2:66:7d:6c:fe:fc:b9:e8:21:e4:58:a5:6c:72:76:
0c:2c:6d:94:e3:91:7d:e1:f5:9d:27:27:f6:a8:e7:
c2:55:4f:2a:8e:29:a3:94:68:cc:5c:62:7c:f7:b6:
d4:94:71:2b:f2:70:0d:b6:bd:e5:71:27:f6:18:0d:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:32:FB:D7:ED:CF:6A:33:19:69:DF:C7:75:B0:35:E4:1A:65:AB:45
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/XjL71-3PajMZad_HdbA15Bplq0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.76.0/24
IPv6:
2a12:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
4a:02:9d:8a:c9:b0:d4:cd:e2:d2:ce:c0:04:32:fe:47:a0:51:
0b:27:6e:25:f3:0b:11:23:8c:f3:9c:c4:be:72:84:cb:2b:f9:
54:2a:16:5b:ed:31:00:25:c4:71:58:9f:76:ab:d0:bd:9b:57:
4e:2a:29:f3:51:1c:2d:82:cc:83:c6:f7:e6:85:7d:3f:df:41:
1e:de:31:eb:81:b8:a9:97:21:1a:0b:a5:9c:0a:13:08:05:b5:
dc:67:d1:a5:eb:91:85:10:37:9a:16:7f:0e:4f:e6:a8:b4:ce:
05:ba:8e:33:54:e6:61:70:18:dd:7d:9f:f0:71:a7:55:0e:3e:
45:b0:3e:fe:a6:36:1d:83:53:73:cf:71:c6:25:6d:f0:2e:a0:
76:33:a3:49:09:ae:45:af:6c:0a:dc:a7:68:6b:0c:31:cc:06:
9d:4e:a3:50:10:88:58:a1:f4:2a:fb:e0:3b:e9:1a:b2:e7:3c:
dc:3f:1a:74:eb:7b:08:a0:97:85:9e:28:39:46:3c:e8:9a:44:
2f:fc:16:1f:0d:3e:25:7f:23:7a:34:ca:1a:1a:a4:3e:9e:31:
15:0f:96:6b:34:7d:38:89:e2:37:0a:52:4a:9b:ce:07:e2:b1:
8b:87:81:0f:c7:5e:af:ad:6d:80:1b:d7:4a:ad:58:4d:56:56:
2b:71:ed:aa
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIby6PnLBjLsmhIFFEvLDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDY5YjRlYzA0N2M2YzJkODBhNDk5MmU0MjI4YjMxN2Nj
OGIyMGMwHhcNMjQwMTAyMDQyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTMyZmJkN2VkY2Y2YTMzMTk2OWRmYzc3NWIwMzVlNDFhNjVhYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1aSQOq0DZLEbNSHkddN0U8inwQU
DX0+TZU58c/9zRPWgttvKI8AjGX9SIvvsdPu0QJzw0GkVaWJV4SCfH+aJ8Eyg/ME
3PrKLEYmSX8xsX/1gOZOfbk6YEqA3euKHCkTwxrOYfDmQpbswC/59d4KHH5haSMD
3Pzek0IPvw12GMqEP0BhfmnoB8tkgjEhamAG1jbSWDPRWUvCb3HUghu+Hjqi2nI2
vA0sG4t6GxCd8ScvtrYjlkne1XOKMh91UUOFF4XCZn1s/vy56CHkWKVscnYMLG2U
45F94fWdJyf2qOfCVU8qjimjlGjMXGJ897bUlHEr8nANtr3lcSf2GA1MzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFF4y+9ftz2ozGWnfx3WwNeQaZatFMB8GA1UdIwQY
MBaAFCgGm07AR8bC2ApJkuQiizF8yLIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODct
ZGY3YjQ1YmU0NmM3LzEvWGpMNzEtM1Bhak1aYWRfSGRiQTE1QnBscTBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMjQ1NTQtN2FhNi00YzlmLWE0ODctZGY3YjQ1YmU0NmM3
LzEvS0FhYlRzQkh4c0xZQ2ttUzVDS0xNWHpJc2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaNMMA0E
AgACMAcDBQMqEkuAMA0GCSqGSIb3DQEBCwUAA4IBAQBKAp2KybDUzeLSzsAEMv5H
oFELJ24l8wsRI4zznMS+coTLK/lUKhZb7TEAJcRxWJ92q9C9m1dOKinzURwtgsyD
xvfmhX0/30Ee3jHrgbiplyEaC6WcChMIBbXcZ9Gl65GFEDeaFn8OT+aotM4Fuo4z
VOZhcBjdfZ/wcadVDj5FsD7+pjYdg1Nzz3HGJW3wLqB2M6NJCa5Fr2wK3Kdoawwx
zAadTqNQEIhYofQq++A76Rqy5zzcPxp063sIoJeFnig5RjzomkQv/BYfDT4lfyN6
NMoaGqQ+njEVD5ZrNH04ieI3ClJKm84H4rGLh4EPx16vrW2AG9dKrVhNVlYrce2q
-----END CERTIFICATE-----
Generated at Fri Jun 7 19:23:14 2024 by rpki-client on console-ams.rpki-client.org