Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/xNs_MXSsSqQhb7POy7D96jrbBfE.roa
File: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (raw, json)
Hash identifier: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=
Subject key identifier: C4:DB:3F:31:74:AC:4A:A4:21:6F:B3:CE:CB:B0:FD:EA:3A:DB:05:F1
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA6437CC28D366589643337866D846
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/xNs_MXSsSqQhb7POy7D96jrbBfE.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 45.135.9.0/24 maxlen: 24
45.135.11.0/24 maxlen: 24
45.136.217.0/24 maxlen: 24
45.136.219.0/24 maxlen: 24
45.138.77.0/24 maxlen: 24
45.138.79.0/24 maxlen: 24
45.139.33.0/24 maxlen: 24
45.139.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:37:cc:28:d3:66:58:96:43:33:78:66:d8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4db3f3174ac4aa4216fb3cecbb0fdea3adb05f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:c5:52:89:c3:3a:59:57:fb:a8:45:40:2c:
93:9f:38:66:d8:1e:3e:3d:b2:04:75:98:b4:1a:97:
31:01:ec:e0:51:43:bb:a3:ba:a2:e4:18:b7:cf:93:
22:fc:9d:d3:05:a0:f9:d4:4b:06:e1:b3:da:30:60:
4a:f2:b8:30:c5:16:50:97:d2:ed:58:ed:31:86:ac:
37:8c:99:c3:20:eb:d2:9b:c9:08:29:d0:3e:21:99:
ea:ea:4b:aa:b2:b3:c0:20:0c:08:80:fc:ed:b2:52:
f0:56:84:71:ce:4c:51:c7:02:38:b0:87:8d:08:40:
fb:10:2f:e9:70:51:69:c4:50:d7:71:a9:36:99:7c:
9f:f6:3f:6f:8b:d0:82:91:fc:24:18:a9:52:41:7a:
ec:d1:ef:68:f5:3a:6e:81:1e:71:f4:6a:5f:cf:6e:
e5:1c:9d:aa:85:86:1f:48:e0:6f:ee:ff:07:42:f8:
b5:f8:5f:1f:0c:a8:f0:03:29:9b:c9:89:ed:39:49:
8e:2a:e0:aa:d1:51:d0:64:95:46:d7:90:8e:3c:da:
70:5f:9c:66:10:5a:01:99:78:6c:9d:3d:af:5f:77:
fb:a8:51:73:8b:7a:e7:44:5f:52:d1:53:f8:48:d2:
a6:3e:6d:a3:5f:03:a1:7a:c8:73:ae:2e:13:47:3c:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DB:3F:31:74:AC:4A:A4:21:6F:B3:CE:CB:B0:FD:EA:3A:DB:05:F1
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/xNs_MXSsSqQhb7POy7D96jrbBfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.9.0/24
45.135.11.0/24
45.136.217.0/24
45.136.219.0/24
45.138.77.0/24
45.138.79.0/24
45.139.33.0/24
45.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:98:71:31:9a:27:25:0e:46:6e:01:7d:ee:9c:45:e0:7d:65:
c3:8c:b3:db:22:94:cf:c3:55:a1:76:37:89:68:7d:00:e4:91:
9b:97:28:de:92:27:36:10:30:fb:d8:ab:1f:d6:b7:14:f0:df:
bc:d9:d9:fc:0a:77:f5:5e:89:ae:3d:c4:b3:89:f3:ca:c8:be:
83:e7:47:44:ec:f4:6c:b5:a8:22:72:81:32:41:52:69:90:62:
ca:a7:fa:33:a7:24:34:e5:30:c7:ec:58:64:81:03:e3:cb:3d:
f1:2b:e8:a0:e5:20:fc:10:7f:a3:a9:20:e1:1e:f0:9b:94:dd:
17:d1:24:59:f8:06:38:33:af:84:54:ed:45:45:10:28:7c:ca:
2f:0a:14:7c:2e:71:0e:7e:d1:5e:c7:ec:cc:f4:1b:5b:10:80:
a1:14:3f:1b:b0:d5:98:d3:c2:22:1f:75:26:4b:ba:d4:38:5b:
f1:fb:81:b6:ef:7a:41:ea:bb:e6:01:36:09:3f:6d:5c:44:4e:
8a:e5:56:f1:26:17:b7:c1:5d:0d:bd:df:f5:d1:99:7c:d0:3a:
f2:26:fa:75:43:34:ee:a9:32:1a:11:ab:07:71:e9:3b:21:01:
81:5c:40:6f:34:61:f5:7b:3c:bb:08:80:ed:40:5f:ec:a0:47:
41:73:60:9b
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZQf+mQ3zCjTZliWQzN4ZthGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjUwMTAxMDM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGRiM2YzMTc0YWM0YWE0MjE2ZmIzY2VjYmIwZmRlYTNhZGIwNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwLFUonDOllX+6hFQCyTnzhm2B4+
PbIEdZi0GpcxAezgUUO7o7qi5Bi3z5Mi/J3TBaD51EsG4bPaMGBK8rgwxRZQl9Lt
WO0xhqw3jJnDIOvSm8kIKdA+IZnq6kuqsrPAIAwIgPztslLwVoRxzkxRxwI4sIeN
CED7EC/pcFFpxFDXcak2mXyf9j9vi9CCkfwkGKlSQXrs0e9o9TpugR5x9Gpfz27l
HJ2qhYYfSOBv7v8HQvi1+F8fDKjwAymbyYntOUmOKuCq0VHQZJVG15COPNpwX5xm
EFoBmXhsnT2vX3f7qFFzi3rnRF9S0VP4SNKmPm2jXwOheshzri4TRzx/SwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFMTbPzF0rEqkIW+zzsuw/eo62wXxMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEveE5zX01YU3NTcVFoYjdQT3k3RDk2anJiQmZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALYcJAwQA
LYcLAwQALYjZAwQALYjbAwQALYpNAwQALYpPAwQALYshAwQALYsjMA0GCSqGSIb3
DQEBCwUAA4IBAQCgmHExmiclDkZuAX3unEXgfWXDjLPbIpTPw1WhdjeJaH0A5JGb
lyjekic2EDD72Ksf1rcU8N+82dn8Cnf1XomuPcSzifPKyL6D50dE7PRstagicoEy
QVJpkGLKp/ozpyQ05TDH7FhkgQPjyz3xK+ig5SD8EH+jqSDhHvCblN0X0SRZ+AY4
M6+EVO1FRRAofMovChR8LnEOftFex+zM9BtbEIChFD8bsNWY08IiH3UmS7rUOFvx
+4G273pB6rvmATYJP21cRE6K5VbxJhe3wV0Nvd/10Zl80DryJvp1QzTuqTIaEasH
cek7IQGBXEBvNGH1ezy7CIDtQF/soEdBc2Cb
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:32:56 2025 by rpki-client