Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/XST97aNGZZRqCU4Q2norfi4ndhI.roa
File: XST97aNGZZRqCU4Q2norfi4ndhI.roa (raw, json)
Hash identifier: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=
Subject key identifier: 5D:24:FD:ED:A3:46:65:94:6A:09:4E:10:DA:7A:2B:7E:2E:27:76:12
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B8D8596D5BCC3CDF79F999BA85084
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/XST97aNGZZRqCU4Q2norfi4ndhI.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60362
IP address blocks: 78.142.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8d:85:96:d5:bc:c3:cd:f7:9f:99:9b:a8:50:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d24fdeda34665946a094e10da7a2b7e2e277612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:24:9e:99:0f:6b:78:0c:5b:2a:09:72:38:
66:79:4b:48:bd:69:ff:14:42:13:95:dd:f6:21:4a:
f0:8b:af:e0:ae:47:8d:87:a2:d8:ba:87:6f:40:f4:
72:ee:52:ec:d3:75:39:0f:c7:ae:b0:ee:8c:30:d4:
e2:b2:45:1e:3d:d0:b1:82:9b:fa:0a:b9:98:7f:92:
41:86:84:4a:ec:42:a3:81:4d:34:45:0f:03:08:ff:
cf:9a:b2:50:f9:e0:04:eb:f7:86:9d:aa:19:f8:8e:
be:4d:54:03:0c:51:00:ef:2f:f1:88:99:6d:49:a1:
32:92:b9:85:c4:84:2e:ff:58:51:af:74:6b:01:a6:
eb:0f:1f:f2:03:be:21:06:f9:6c:a2:82:79:da:1f:
3c:a6:48:86:7f:64:74:8d:dd:1f:f3:e2:ad:d6:49:
d6:b9:70:da:5b:80:20:c6:44:dc:ad:8b:0b:47:ea:
50:1e:b9:ac:47:cb:d5:5f:a6:b1:d2:f7:11:07:2a:
ef:70:15:0c:59:c8:67:f4:d2:bf:b5:cb:1d:3c:5f:
3e:b8:a3:53:6a:65:5d:6b:6d:0e:a9:5a:e3:d5:bc:
1d:84:35:31:5f:4d:36:16:7c:18:76:33:19:4b:91:
1a:68:90:5a:4c:24:b3:c6:4b:ce:40:a3:84:0e:30:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:24:FD:ED:A3:46:65:94:6A:09:4E:10:DA:7A:2B:7E:2E:27:76:12
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/XST97aNGZZRqCU4Q2norfi4ndhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.219.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:48:1f:1c:66:5f:c5:5a:4a:f0:78:70:17:66:fe:2b:03:ec:
c1:ba:51:ab:f3:23:35:7b:e0:1b:4c:95:33:0c:17:71:2f:af:
0c:49:7e:27:a0:7f:44:53:09:40:39:2e:ae:d4:c1:fc:3a:5d:
81:22:4b:3d:df:ad:65:30:a7:0a:a0:fc:f1:44:80:0f:d4:4d:
85:d5:57:ae:88:9e:37:17:18:07:5f:03:90:8d:9a:c4:7e:c7:
7a:f6:57:35:42:e3:0d:ad:b2:e3:26:ef:db:9c:ff:78:67:12:
bd:f1:fc:dd:14:5f:71:5e:77:2e:08:48:8b:e4:5c:99:7e:13:
0f:57:a0:04:2c:36:1c:93:b5:8d:8a:b4:13:18:bd:15:d3:96:
aa:3e:e7:ff:74:d7:09:8c:55:ed:b1:75:db:34:a8:df:bc:7b:
88:d5:4a:27:f9:49:19:9a:08:e1:04:7d:8d:59:23:a5:b5:54:
55:c2:53:a9:90:c3:27:ee:40:53:b9:fe:6f:ad:b2:e8:52:5f:
93:44:db:54:82:d9:99:ce:89:04:b9:79:90:99:94:f3:5d:c8:
d4:9d:4b:7a:eb:8b:d8:07:01:ec:88:39:4a:23:3e:91:cf:07:
e8:69:9d:bb:cd:0d:1d:3e:3b:ec:cb:de:8d:d5:6c:1a:04:4b:
eb:e7:4f:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma42FltW8w833n5mbqFCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjUwMTAyMDk0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDI0ZmRlZGEzNDY2NTk0NmEwOTRlMTBkYTdhMmI3ZTJlMjc3NjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspEknpkPa3gMWyoJcjhmeUtIvWn/
FEITld32IUrwi6/grkeNh6LYuodvQPRy7lLs03U5D8eusO6MMNTiskUePdCxgpv6
CrmYf5JBhoRK7EKjgU00RQ8DCP/PmrJQ+eAE6/eGnaoZ+I6+TVQDDFEA7y/xiJlt
SaEykrmFxIQu/1hRr3RrAabrDx/yA74hBvlsooJ52h88pkiGf2R0jd0f8+Kt1knW
uXDaW4AgxkTcrYsLR+pQHrmsR8vVX6ax0vcRByrvcBUMWchn9NK/tcsdPF8+uKNT
amVda20OqVrj1bwdhDUxX002FnwYdjMZS5EaaJBaTCSzxkvOQKOEDjBhdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF0k/e2jRmWUaglOENp6K34uJ3YSMB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvWFNUOTdhTkdaWlJxQ1U0UTJub3JmaTRuZGhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo7bMA0G
CSqGSIb3DQEBCwUAA4IBAQCqSB8cZl/FWkrweHAXZv4rA+zBulGr8yM1e+AbTJUz
DBdxL68MSX4noH9EUwlAOS6u1MH8Ol2BIks9361lMKcKoPzxRIAP1E2F1VeuiJ43
FxgHXwOQjZrEfsd69lc1QuMNrbLjJu/bnP94ZxK98fzdFF9xXncuCEiL5FyZfhMP
V6AELDYck7WNirQTGL0V05aqPuf/dNcJjFXtsXXbNKjfvHuI1Uon+UkZmgjhBH2N
WSOltVRVwlOpkMMn7kBTuf5vrbLoUl+TRNtUgtmZzokEuXmQmZTzXcjUnUt664vY
BwHsiDlKIz6RzwfoaZ27zQ0dPjvsy96N1WwaBEvr5099
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:04:54 2025 by rpki-client