Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa
File: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (raw, json)
Hash identifier: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=
Subject key identifier: C5:1D:8A:BA:3F:D7:E4:94:58:DD:65:FF:5A:A8:0F:82:E9:24:F4:BC
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019425FDAFA70B51D69BE3EBAAFD8CDD9E18
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207572
IP address blocks: 193.17.3.0/24 maxlen: 24
193.17.15.0/24 maxlen: 24
193.17.20.0/24 maxlen: 24
193.17.23.0/24 maxlen: 24
2a0f:74c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:af:a7:0b:51:d6:9b:e3:eb:aa:fd:8c:dd:9e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c51d8aba3fd7e49458dd65ff5aa80f82e924f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:f8:9d:84:e5:4c:83:ec:f6:54:48:02:d5:
5f:24:ad:66:7c:e1:f6:20:74:dc:bc:aa:a6:ef:77:
57:73:3d:b6:b3:25:48:3b:5e:ae:6c:56:41:e8:26:
f5:1f:86:07:64:64:1c:b7:93:28:34:34:a8:f5:72:
2b:fa:c8:de:2a:1a:79:ec:69:02:71:14:e9:44:48:
03:21:e1:47:1f:a7:13:de:fd:45:36:53:e9:e3:fe:
77:51:99:d1:7c:a2:a4:b9:22:1a:7a:ed:78:b9:b1:
2d:2d:2d:d9:51:54:1b:18:e0:fb:84:9e:c9:a9:92:
2a:81:ea:60:63:2a:98:90:56:1a:b0:34:67:1b:e0:
32:85:91:24:63:b2:ed:51:b0:b0:2d:7e:9b:fa:4a:
cd:f4:bb:3d:c3:bf:6c:5e:50:fd:13:6c:62:02:6e:
2d:73:ac:3a:c3:cf:ad:09:c9:f5:f4:85:75:65:60:
ff:3f:ca:10:11:fc:b3:d2:43:6d:4f:b6:10:ca:b1:
3b:7c:a0:9b:fc:47:f0:8d:47:76:d6:4a:a7:93:90:
cf:8d:d6:d5:40:31:5b:bf:45:5c:56:c3:c7:d4:3f:
cd:6c:b3:15:ac:06:d2:e3:0e:69:20:7e:8a:05:e0:
3d:19:11:0c:41:fa:72:92:e7:52:80:64:7b:54:54:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1D:8A:BA:3F:D7:E4:94:58:DD:65:FF:5A:A8:0F:82:E9:24:F4:BC
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.3.0/24
193.17.15.0/24
193.17.20.0/24
193.17.23.0/24
IPv6:
2a0f:74c0::/29
Signature Algorithm: sha256WithRSAEncryption
99:e5:5d:d0:2c:51:ed:38:8c:19:2a:ea:d4:03:a0:ba:04:42:
37:54:a0:02:c2:83:a6:52:11:27:76:b8:71:ff:4d:46:02:c1:
9f:a0:65:83:09:ae:d3:50:ce:ce:e5:95:11:77:8d:b1:ac:d9:
e5:86:42:97:f4:36:40:3c:f4:3a:6e:56:55:02:90:d3:ba:64:
30:1e:9b:58:af:2e:88:75:43:1c:f4:bf:5c:eb:73:70:a1:5f:
4b:4f:6c:11:c4:a1:05:c0:16:01:f1:d2:18:3c:34:c4:5c:74:
f5:7a:e8:53:7f:bf:cc:9c:84:9a:40:dc:0b:71:00:a6:bb:25:
e4:84:da:47:df:2c:49:f4:a8:bf:a0:be:55:b3:d1:08:f3:23:
3d:93:35:ca:ea:c8:aa:1c:35:37:64:9a:3b:4d:e2:6b:cb:68:
44:f1:fe:16:8b:fe:e8:7f:c1:83:4d:52:48:ad:d4:49:39:3e:
dd:c4:6d:c1:2e:37:25:e5:2c:08:91:e7:97:1b:6c:ba:3f:13:
ba:31:38:3d:f8:10:cc:b2:d0:bc:6b:6e:6d:b6:d7:14:eb:6c:
1b:12:aa:ac:85:f9:5d:5a:3c:0f:13:c0:56:98:90:eb:f2:10:
a1:7d:ca:9e:cf:8e:bf:c4:be:46:67:4d:a6:1d:e6:b5:6a:c3:
13:2c:7b:89
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQl/a+nC1HWm+Prqv2M3Z4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGEzYTQzMzAxY2QyYzgwNDdlYjg1NDRmODBhYjRmZmNm
ZTlhY2YwHhcNMjUwMTAyMDc0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTFkOGFiYTNmZDdlNDk0NThkZDY1ZmY1YWE4MGY4MmU5MjRmNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb74nYTlTIPs9lRIAtVfJK1mfOH2
IHTcvKqm73dXcz22syVIO16ubFZB6Cb1H4YHZGQct5MoNDSo9XIr+sjeKhp57GkC
cRTpREgDIeFHH6cT3v1FNlPp4/53UZnRfKKkuSIaeu14ubEtLS3ZUVQbGOD7hJ7J
qZIqgepgYyqYkFYasDRnG+AyhZEkY7LtUbCwLX6b+krN9Ls9w79sXlD9E2xiAm4t
c6w6w8+tCcn19IV1ZWD/P8oQEfyz0kNtT7YQyrE7fKCb/EfwjUd21kqnk5DPjdbV
QDFbv0VcVsPH1D/NbLMVrAbS4w5pIH6KBeA9GREMQfpykudSgGR7VFQnuQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMUdiro/1+SUWN1l/1qoD4LpJPS8MB8GA1UdIwQY
MBaAFNyKOkMwHNLIBH64VE+Aq0/8/prPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQt
ZmU4NDQwNjBhNDZkLzEveFIyS3VqX1g1SlJZM1dYX1dxZ1BndWtrOUx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQtZmU4NDQwNjBhNDZk
LzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwREDAwQA
wREPAwQAwREUAwQAwREXMA0EAgACMAcDBQMqD3TAMA0GCSqGSIb3DQEBCwUAA4IB
AQCZ5V3QLFHtOIwZKurUA6C6BEI3VKACwoOmUhEndrhx/01GAsGfoGWDCa7TUM7O
5ZURd42xrNnlhkKX9DZAPPQ6blZVApDTumQwHptYry6IdUMc9L9c63NwoV9LT2wR
xKEFwBYB8dIYPDTEXHT1euhTf7/MnISaQNwLcQCmuyXkhNpH3yxJ9Ki/oL5Vs9EI
8yM9kzXK6siqHDU3ZJo7TeJry2hE8f4Wi/7of8GDTVJIrdRJOT7dxG3BLjcl5SwI
keeXG2y6PxO6MTg9+BDMstC8a25tttcU62wbEqqshfldWjwPE8BWmJDr8hChfcqe
z46/xL5GZ02mHea1asMTLHuJ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:10 2025 by rpki-client