Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xPJn9HaU4t51hbW5OBuJoCsPyo4.roa
File: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (raw, json)
Hash identifier: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=
Subject key identifier: C4:F2:67:F4:76:94:E2:DE:75:85:B5:B9:38:1B:89:A0:2B:0F:CA:8E
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 019424B3FE6893024F734117223AA23607B1
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xPJn9HaU4t51hbW5OBuJoCsPyo4.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56911
IP address blocks: 89.35.118.0/24 maxlen: 24
149.62.34.0/24 maxlen: 24
185.70.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fe:68:93:02:4f:73:41:17:22:3a:a2:36:07:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4f267f47694e2de7585b5b9381b89a02b0fca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:2d:72:e7:4a:e3:0b:ed:7b:d5:ae:f6:34:
f5:d7:16:40:aa:5f:5e:dd:c5:d8:11:39:31:55:a3:
25:c4:c1:31:9c:b4:20:5d:51:66:da:bd:70:f8:78:
d8:e5:c2:a5:b0:47:f2:62:96:18:d0:83:a0:be:9b:
93:68:09:b4:34:68:a6:75:53:d1:3b:f7:f5:a1:78:
ec:41:c0:2c:0c:47:e2:ea:a7:0e:4c:2b:31:3b:50:
7e:9c:71:39:ce:9d:fd:14:b2:fd:fe:34:96:b7:38:
36:de:6e:a7:15:8c:74:9e:09:dc:57:e7:34:e5:ae:
31:07:98:e1:09:ce:fc:a1:92:c9:fc:1b:21:39:90:
fc:eb:82:23:58:37:3f:62:f1:33:9e:9b:92:03:51:
ac:e8:dc:06:d7:28:59:c9:10:f1:7c:5c:21:74:b4:
34:21:35:3b:24:e0:de:73:b4:f1:e6:d8:cb:b7:a2:
9f:7d:d7:64:f7:0c:b1:f4:36:a0:0f:07:49:28:49:
fb:98:f5:e0:c6:52:57:d1:ed:c9:65:8a:ad:8c:c4:
8e:0f:5b:8c:d6:d3:8d:47:39:03:bf:e5:52:e6:ef:
92:4c:dc:72:5c:29:a0:03:1b:5e:07:e5:0e:c0:b1:
23:41:c6:20:85:1c:1f:5f:c6:2b:48:5f:44:60:90:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F2:67:F4:76:94:E2:DE:75:85:B5:B9:38:1B:89:A0:2B:0F:CA:8E
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xPJn9HaU4t51hbW5OBuJoCsPyo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.118.0/24
149.62.34.0/24
185.70.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:bd:96:ce:ec:c7:c1:f8:1c:44:9c:2f:c6:fe:d2:15:2d:d6:
f4:ca:22:d3:f9:cb:d1:fd:12:6c:f9:59:90:02:3a:db:2c:56:
50:1e:12:05:87:6f:df:83:42:9f:14:02:22:5a:35:c3:18:d4:
d8:ab:f7:6a:77:75:8f:ba:31:66:43:f5:fc:68:61:b0:3d:b3:
e6:da:e6:de:c6:fd:a5:f7:c1:af:3c:08:7d:2d:33:c2:c9:d7:
c8:6f:d8:03:71:1c:cd:a2:74:59:ef:21:8b:63:71:6b:07:22:
5c:10:74:ac:ff:8a:3f:32:a8:4d:37:8f:46:ed:36:37:c6:3a:
75:5a:eb:bb:0e:0c:69:ec:e4:aa:c8:af:e1:2b:84:61:8d:14:
00:f4:4b:e3:f8:26:5d:9e:3a:1d:36:26:50:92:a0:97:0a:f5:
e0:2c:cc:7c:56:47:d8:ac:d3:01:95:85:7c:30:15:ff:e8:61:
78:ba:79:9a:75:c0:df:d5:89:b1:14:28:9c:32:ea:fd:7a:c8:
89:ec:e9:44:01:86:85:4a:3c:b5:f1:dc:02:4f:9e:a5:e6:84:
83:9d:b3:98:34:7b:37:4b:13:e4:e7:33:f4:be:3d:5a:ce:be:
ed:e6:b4:0e:18:f7:ca:08:1c:f5:40:8d:c1:21:14:9e:c0:c1:
89:48:eb:ad
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQks/5okwJPc0EXIjqiNgexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3
MDFhNDgwHhcNMjUwMTAyMDE0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGYyNjdmNDc2OTRlMmRlNzU4NWI1YjkzODFiODlhMDJiMGZjYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLAtcudK4wvte9Wu9jT11xZAql9e
3cXYETkxVaMlxMExnLQgXVFm2r1w+HjY5cKlsEfyYpYY0IOgvpuTaAm0NGimdVPR
O/f1oXjsQcAsDEfi6qcOTCsxO1B+nHE5zp39FLL9/jSWtzg23m6nFYx0ngncV+c0
5a4xB5jhCc78oZLJ/BshOZD864IjWDc/YvEznpuSA1Gs6NwG1yhZyRDxfFwhdLQ0
ITU7JODec7Tx5tjLt6Kffddk9wyx9DagDwdJKEn7mPXgxlJX0e3JZYqtjMSOD1uM
1tONRzkDv+VS5u+STNxyXCmgAxteB+UOwLEjQcYghRwfX8YrSF9EYJBsZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMTyZ/R2lOLedYW1uTgbiaArD8qOMB8GA1UdIwQY
MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt
ZDJlMzUxNjA5NzU5LzEveFBKbjlIYVU0dDUxaGJXNU9CdUpvQ3NQeW80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5
LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSN2AwQA
lT4iAwQCuUYcMA0GCSqGSIb3DQEBCwUAA4IBAQCzvZbO7MfB+BxEnC/G/tIVLdb0
yiLT+cvR/RJs+VmQAjrbLFZQHhIFh2/fg0KfFAIiWjXDGNTYq/dqd3WPujFmQ/X8
aGGwPbPm2ubexv2l98GvPAh9LTPCydfIb9gDcRzNonRZ7yGLY3FrByJcEHSs/4o/
MqhNN49G7TY3xjp1Wuu7Dgxp7OSqyK/hK4RhjRQA9Evj+CZdnjodNiZQkqCXCvXg
LMx8VkfYrNMBlYV8MBX/6GF4unmadcDf1YmxFCicMur9esiJ7OlEAYaFSjy18dwC
T56l5oSDnbOYNHs3SxPk5zP0vj1azr7t5rQOGPfKCBz1QI3BIRSewMGJSOut
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:28 2025 by rpki-client