Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xdzMl2dBjCTNBQybuXYBgSxzduo.roa
File: xdzMl2dBjCTNBQybuXYBgSxzduo.roa (raw, json)
Hash identifier: JEkwDfKXDwIr/2rXwBPBdk3uqDoMAYK5dQs47lFmsqg=
Subject key identifier: C5:DC:CC:97:67:41:8C:24:CD:05:0C:9B:B9:76:01:81:2C:73:76:EA
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B39C548F4DB38F7063E7BE01C1269C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xdzMl2dBjCTNBQybuXYBgSxzduo.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59692
IP address blocks: 45.135.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9c:54:8f:4d:b3:8f:70:63:e7:be:01:c1:26:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5dccc9767418c24cd050c9bb97601812c7376ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d5:97:5b:ba:af:40:6f:cc:93:df:b8:0d:45:
46:48:f2:3b:6a:b6:2d:cb:93:4b:65:04:42:52:44:
c1:77:98:18:6c:62:e2:97:21:8d:82:99:e9:9b:19:
79:e2:e7:97:aa:d1:db:f3:ca:b3:f0:cd:48:01:22:
a5:43:d5:6a:7b:05:73:e7:47:ec:6b:aa:b2:1f:36:
82:60:5d:4d:bb:cb:71:d1:62:22:b4:14:b0:eb:14:
d2:b8:56:dc:96:93:7a:e7:db:0b:6f:64:a6:cf:f1:
93:3c:cf:14:d6:18:30:60:db:73:b0:8a:fd:27:30:
59:07:64:c0:5d:a3:fd:9e:9a:23:a6:ef:d2:a7:00:
6a:db:11:17:fa:4a:f3:fe:3c:12:97:b4:19:ad:37:
a7:22:ea:f5:78:c1:59:47:b2:82:05:f5:4e:a2:eb:
90:50:69:22:af:06:6e:e0:5b:42:fc:73:51:cd:38:
dd:3d:6a:1f:6f:a4:1e:09:d3:04:41:6e:70:ff:0f:
3d:6f:de:fa:98:dd:19:7a:6e:db:0e:57:ee:f4:2f:
a6:c9:a0:c6:09:9d:ee:c4:47:5b:c2:2b:56:c9:2a:
4e:89:b6:03:0d:ba:5d:d1:65:fc:c5:7c:37:8c:15:
ff:36:64:8c:d9:66:d2:31:22:3e:89:f6:55:17:e2:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DC:CC:97:67:41:8C:24:CD:05:0C:9B:B9:76:01:81:2C:73:76:EA
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/xdzMl2dBjCTNBQybuXYBgSxzduo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.239.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f4:1f:00:f4:c3:d5:9b:7a:8b:a0:ba:5c:28:86:07:4a:b2:
1d:65:e4:61:88:00:b1:37:48:c4:60:82:84:b3:d3:b5:94:10:
bf:23:91:66:bf:e1:d4:3d:62:95:cf:fb:43:36:26:fc:b4:d0:
48:f7:4a:1f:af:ef:07:52:5e:36:78:9c:e0:26:9b:9e:a1:d6:
18:b9:4d:99:3b:8e:eb:9f:e1:87:ba:7c:61:f0:74:a6:5c:77:
fc:5d:47:78:a2:5d:00:ca:df:a8:be:72:c1:9e:6f:53:d2:60:
a8:72:aa:1e:54:d7:9c:20:d3:56:a5:5d:a4:50:11:64:fe:54:
3f:e6:19:8a:a2:21:68:9b:bf:dd:ac:04:a1:ee:a8:85:1f:95:
20:dd:ff:bf:32:73:fc:ab:6c:18:bd:99:3c:33:57:c6:18:b7:
ae:9d:79:76:92:2a:cb:2d:a8:47:7d:f5:9e:62:9e:a7:f1:13:
81:92:99:fa:0e:09:c9:f3:d4:22:9d:0a:50:fa:8d:cf:db:53:
bf:c3:92:47:84:24:8b:a8:16:d9:24:b6:1f:8d:9f:62:ca:b3:
ce:a9:2a:41:3e:0b:50:e5:ee:84:d3:cc:bd:8a:cb:95:73:bd:
2b:ad:cf:97:ed:61:f7:db:b0:48:a6:95:ac:8a:11:fa:cf:ab:
bd:4d:d3:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks5xUj02zj3Bj574BwSacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMTAyMDE0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWRjY2M5NzY3NDE4YzI0Y2QwNTBjOWJiOTc2MDE4MTJjNzM3NmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNWXW7qvQG/Mk9+4DUVGSPI7arYt
y5NLZQRCUkTBd5gYbGLilyGNgpnpmxl54ueXqtHb88qz8M1IASKlQ9VqewVz50fs
a6qyHzaCYF1Nu8tx0WIitBSw6xTSuFbclpN659sLb2Smz/GTPM8U1hgwYNtzsIr9
JzBZB2TAXaP9npojpu/SpwBq2xEX+krz/jwSl7QZrTenIur1eMFZR7KCBfVOouuQ
UGkirwZu4FtC/HNRzTjdPWofb6QeCdMEQW5w/w89b976mN0Zem7bDlfu9C+myaDG
CZ3uxEdbwitWySpOibYDDbpd0WX8xXw3jBX/NmSM2WbSMSI+ifZVF+LGdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXczJdnQYwkzQUMm7l2AYEsc3bqMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEveGR6TWwyZEJqQ1ROQlF5YnVYWUJnU3h6ZHVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfvMA0G
CSqGSIb3DQEBCwUAA4IBAQAW9B8A9MPVm3qLoLpcKIYHSrIdZeRhiACxN0jEYIKE
s9O1lBC/I5Fmv+HUPWKVz/tDNib8tNBI90ofr+8HUl42eJzgJpueodYYuU2ZO47r
n+GHunxh8HSmXHf8XUd4ol0Ayt+ovnLBnm9T0mCocqoeVNecINNWpV2kUBFk/lQ/
5hmKoiFom7/drASh7qiFH5Ug3f+/MnP8q2wYvZk8M1fGGLeunXl2kirLLahHffWe
Yp6n8ROBkpn6DgnJ89QinQpQ+o3P21O/w5JHhCSLqBbZJLYfjZ9iyrPOqSpBPgtQ
5e6E08y9isuVc70rrc+X7WH327BIppWsihH6z6u9TdPk
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:51 2025 by rpki-client