Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa
File: xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa (raw, json)
Hash identifier: GrtU+4+6ynaLDRxKv11eYK+Mg2EvgzvT4avZIVJ491s=
Subject key identifier: C4:CD:62:14:64:BA:42:E0:52:BF:DD:2D:FB:82:C0:68:79:C2:E5:24
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019423D70939BE2C8B2102E4922F9801F66A
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60707
IP address blocks: 213.238.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:09:39:be:2c:8b:21:02:e4:92:2f:98:01:f6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4cd621464ba42e052bfdd2dfb82c06879c2e524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:42:98:ac:6a:fd:70:02:97:c9:77:cb:36:
53:a6:70:de:b8:2c:01:e5:3d:43:41:3e:d8:80:d3:
5d:99:cc:12:07:fb:1d:dd:4f:0f:55:28:83:43:09:
87:61:80:a6:31:52:0f:a8:83:1a:b9:2f:fa:10:9a:
95:38:74:44:b8:3d:6a:a7:24:d9:98:0a:65:5a:79:
c8:cd:5c:ff:9a:dc:be:13:f1:9e:ff:cf:55:89:7d:
59:32:d6:90:49:3a:41:2e:e6:4d:a1:a5:ec:27:44:
81:55:43:92:e2:e2:41:5f:14:60:7f:a5:72:47:ca:
64:57:53:ba:13:97:1c:f4:3b:06:61:98:b5:81:c9:
af:61:d0:95:82:4d:dc:6f:42:35:3a:63:c3:f4:2e:
ea:5e:c2:32:6e:90:13:c8:0d:f9:64:5c:5b:58:f6:
4e:14:0f:a8:f8:38:52:c5:77:da:7a:f3:fb:c7:0d:
90:e4:51:9b:fc:e4:d6:18:15:03:c5:39:ef:85:bb:
c8:ad:92:de:ab:28:16:ee:6b:22:e1:8a:c0:3b:c4:
5c:5a:a6:17:9e:b1:fd:a4:5d:38:be:58:7f:6d:df:
c1:32:91:85:b2:96:dc:fa:6f:a4:6c:c9:46:df:8f:
1f:70:77:af:05:6d:ef:fa:3b:34:8d:c9:89:bd:9d:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CD:62:14:64:BA:42:E0:52:BF:DD:2D:FB:82:C0:68:79:C2:E5:24
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/xM1iFGS6QuBSv90t-4LAaHnC5SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.172.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7e:05:03:f0:7f:b6:cc:5c:42:2e:f7:86:be:46:98:80:30:
7d:51:ab:c1:c2:46:76:7a:d4:03:2b:1e:97:18:b1:3f:1a:8b:
ad:29:b5:27:2a:eb:e4:27:77:26:80:eb:ac:5e:91:84:ec:0a:
7c:7c:59:0c:ed:a6:d4:de:fe:48:f2:dd:c0:7e:54:89:fb:67:
27:f5:29:1b:c9:2b:fd:a9:a6:32:d2:c1:d1:d1:b4:9f:f0:31:
c9:6b:35:89:d2:d3:ae:3c:74:79:e5:95:96:de:cb:c9:e4:83:
10:2d:4d:4b:c4:24:0b:e6:4f:40:68:ce:a4:95:bf:47:2c:20:
88:a8:71:c4:aa:04:c1:73:e9:3b:a6:4d:26:26:f2:1e:49:c0:
4a:ba:ca:51:9c:52:1e:71:3d:9d:da:0c:6d:51:c1:08:90:c0:
99:ed:f3:0e:0d:41:04:bf:6a:9d:6b:ad:91:91:d8:6d:56:2a:
64:09:b7:7d:31:a8:50:4a:13:c5:c0:bc:32:a0:57:7a:d9:0d:
60:4d:61:0c:77:fd:b9:54:30:13:55:6b:02:9a:09:63:b4:19:
da:b0:cb:1e:3a:82:b6:2b:44:ba:df:3c:28:8f:03:a1:42:65:
65:d8:42:61:96:e1:fa:f7:ab:90:e6:77:a6:60:c3:1d:52:f8:
96:d4:94:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1wk5viyLIQLkki+YAfZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjUwMTAxMjE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGNkNjIxNDY0YmE0MmUwNTJiZmRkMmRmYjgyYzA2ODc5YzJlNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXdCmKxq/XACl8l3yzZTpnDeuCwB
5T1DQT7YgNNdmcwSB/sd3U8PVSiDQwmHYYCmMVIPqIMauS/6EJqVOHREuD1qpyTZ
mAplWnnIzVz/mty+E/Ge/89ViX1ZMtaQSTpBLuZNoaXsJ0SBVUOS4uJBXxRgf6Vy
R8pkV1O6E5cc9DsGYZi1gcmvYdCVgk3cb0I1OmPD9C7qXsIybpATyA35ZFxbWPZO
FA+o+DhSxXfaevP7xw2Q5FGb/OTWGBUDxTnvhbvIrZLeqygW7msi4YrAO8RcWqYX
nrH9pF04vlh/bd/BMpGFspbc+m+kbMlG348fcHevBW3v+js0jcmJvZ31MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMTNYhRkukLgUr/dLfuCwGh5wuUkMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEveE0xaUZHUzZRdUJTdjkwdC00TEFhSG5DNVNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e6sMA0G
CSqGSIb3DQEBCwUAA4IBAQCZfgUD8H+2zFxCLveGvkaYgDB9UavBwkZ2etQDKx6X
GLE/GoutKbUnKuvkJ3cmgOusXpGE7Ap8fFkM7abU3v5I8t3AflSJ+2cn9SkbySv9
qaYy0sHR0bSf8DHJazWJ0tOuPHR55ZWW3svJ5IMQLU1LxCQL5k9AaM6klb9HLCCI
qHHEqgTBc+k7pk0mJvIeScBKuspRnFIecT2d2gxtUcEIkMCZ7fMODUEEv2qda62R
kdhtVipkCbd9MahQShPFwLwyoFd62Q1gTWEMd/25VDATVWsCmgljtBnasMseOoK2
K0S63zwojwOhQmVl2EJhluH696uQ5nemYMMdUviW1JSr
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:44 2025 by rpki-client