Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/xQUI4-r4XjQLs0FjPM2WCfbBxWQ.roa
File: xQUI4-r4XjQLs0FjPM2WCfbBxWQ.roa (raw, json)
Hash identifier: 8AY4z5mbYOVzgbpSHBMZBweydiWSklrRLaeWro7dQDw=
Subject key identifier: C5:05:08:E3:EA:F8:5E:34:0B:B3:41:63:3C:CD:96:09:F6:C1:C5:64
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0194252197C551BD07718EB9AB5FB302558A
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/xQUI4-r4XjQLs0FjPM2WCfbBxWQ.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 2a13:a5c7:2710::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:97:c5:51:bd:07:71:8e:b9:ab:5f:b3:02:55:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c50508e3eaf85e340bb341633ccd9609f6c1c564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:35:8a:9b:99:f9:4a:b9:42:2f:fa:22:0a:
c6:3e:a3:ff:71:bd:ea:19:d0:0f:6e:ae:5b:55:b5:
d2:ef:72:a0:3a:32:ed:4f:2b:e3:0e:99:96:67:21:
9a:a8:a2:52:c4:bb:1c:1f:60:a2:29:a6:27:4e:5c:
4f:c5:48:e4:c6:cb:c7:ed:a7:2b:a2:4e:f1:5f:e1:
fb:87:bc:95:4c:e8:a9:1c:ab:27:1a:72:77:f9:c9:
2c:36:5f:cc:97:d7:b5:5f:26:c1:bb:4e:16:09:d0:
74:27:b5:4e:e5:3b:23:c4:cd:04:d5:08:ae:4a:91:
cc:96:aa:d9:c2:43:ca:4b:74:9f:c4:2b:e7:be:73:
3d:90:fe:92:28:0c:f3:69:64:cb:af:57:08:1d:d4:
56:b6:3a:87:0a:89:d2:21:3b:37:52:ad:a7:54:8f:
29:20:ae:74:42:ef:f7:2f:a3:e4:39:a2:c7:e8:1d:
31:55:58:ac:d9:81:18:83:01:f2:2e:a6:76:10:b8:
ea:14:26:5b:0f:c2:53:94:96:0a:5e:38:65:49:66:
da:4f:46:2a:29:73:45:1a:7e:b6:c1:b7:11:a1:30:
4d:96:8c:ea:68:d9:cc:cf:38:1e:34:83:1f:0c:fe:
4f:de:9c:2a:3b:73:73:74:f1:63:0a:df:b5:67:56:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:05:08:E3:EA:F8:5E:34:0B:B3:41:63:3C:CD:96:09:F6:C1:C5:64
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/xQUI4-r4XjQLs0FjPM2WCfbBxWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2710::/44
Signature Algorithm: sha256WithRSAEncryption
58:58:b1:9d:2d:77:10:86:02:94:fe:b8:97:f2:62:9d:68:1d:
a6:29:46:75:83:f7:d4:ff:85:c0:19:89:cb:a3:31:1e:d5:35:
2f:94:bf:4c:98:87:63:2c:03:22:c3:17:7f:8b:0d:68:5c:e1:
08:49:79:4a:57:77:d3:1b:09:67:6e:be:2e:51:cd:8a:c4:74:
9c:af:af:7f:1d:be:ce:6e:e0:ef:be:d3:b6:10:60:44:f2:61:
55:6c:09:24:a6:c9:a7:29:d5:fb:07:91:3d:98:d3:89:ac:f5:
26:f4:17:db:89:94:a4:1f:59:9d:21:a9:01:d7:4e:1e:9d:6a:
08:d1:fa:20:7f:3a:c9:8f:35:ed:a7:4b:0e:ac:78:fe:ae:b3:
a0:d3:32:78:b1:74:a1:85:59:f6:7c:ee:3a:0d:89:b0:04:20:
4f:fb:e4:ba:55:cc:2b:dc:e4:5e:8d:87:74:b7:8d:38:c9:2a:
46:68:24:04:e4:d9:fd:dd:5b:22:d5:c0:4f:15:c5:b0:fc:6f:
36:1f:a3:24:4b:0b:a6:42:cf:a3:fe:e5:01:6f:9b:b7:fb:1b:
38:70:e0:aa:da:2b:40:69:e0:73:03:47:27:86:94:64:e9:c3:
8e:b4:8f:48:f1:a5:db:92:8a:90:6d:bc:ab:b4:e4:3a:7f:bb:
67:61:43:9f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIZfFUb0HcY65q1+zAlWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjUwMTAyMDM0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTA1MDhlM2VhZjg1ZTM0MGJiMzQxNjMzY2NkOTYwOWY2YzFjNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kg1ipuZ+Uq5Qi/6IgrGPqP/cb3q
GdAPbq5bVbXS73KgOjLtTyvjDpmWZyGaqKJSxLscH2CiKaYnTlxPxUjkxsvH7acr
ok7xX+H7h7yVTOipHKsnGnJ3+cksNl/Ml9e1XybBu04WCdB0J7VO5TsjxM0E1Qiu
SpHMlqrZwkPKS3SfxCvnvnM9kP6SKAzzaWTLr1cIHdRWtjqHConSITs3Uq2nVI8p
IK50Qu/3L6PkOaLH6B0xVVis2YEYgwHyLqZ2ELjqFCZbD8JTlJYKXjhlSWbaT0Yq
KXNFGn62wbcRoTBNlozqaNnMzzgeNIMfDP5P3pwqO3NzdPFjCt+1Z1bqUQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMUFCOPq+F40C7NBYzzNlgn2wcVkMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEveFFVSTQtcjRYalFMczBGalBNMldDZmJCeFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOlxycQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBYWLGdLXcQhgKU/riX8mKdaB2mKUZ1g/fU/4XA
GYnLozEe1TUvlL9MmIdjLAMiwxd/iw1oXOEISXlKV3fTGwlnbr4uUc2KxHScr69/
Hb7ObuDvvtO2EGBE8mFVbAkkpsmnKdX7B5E9mNOJrPUm9BfbiZSkH1mdIakB104e
nWoI0fogfzrJjzXtp0sOrHj+rrOg0zJ4sXShhVn2fO46DYmwBCBP++S6Vcwr3ORe
jYd0t404ySpGaCQE5Nn93Vsi1cBPFcWw/G82H6MkSwumQs+j/uUBb5u3+xs4cOCq
2itAaeBzA0cnhpRk6cOOtI9I8aXbkoqQbbyrtOQ6f7tnYUOf
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:33:48 2025 by rpki-client