Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/xvoTABjzfOJqRlktELqO5-hThXE.roa
File: xvoTABjzfOJqRlktELqO5-hThXE.roa (raw, json)
Hash identifier: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=
Subject key identifier: C6:FA:13:00:18:F3:7C:E2:6A:46:59:2D:10:BA:8E:E7:E8:53:85:71
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 01942521E18E6448B97DF4C273068DA2289E
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/xvoTABjzfOJqRlktELqO5-hThXE.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209899
IP address blocks: 45.65.96.0/22 maxlen: 24
185.136.244.0/22 maxlen: 24
2a09:300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e1:8e:64:48:b9:7d:f4:c2:73:06:8d:a2:28:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6fa130018f37ce26a46592d10ba8ee7e8538571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:40:5a:45:f9:4b:45:e2:be:f8:db:fe:1e:
07:91:5d:29:d2:32:59:9d:73:fe:1f:ac:49:a9:e2:
e9:78:78:bd:8d:d0:23:f9:d5:99:fb:14:9a:12:e3:
48:c2:b0:98:86:8e:02:c0:33:7a:e5:9a:6a:ab:22:
4c:18:47:1e:5d:10:fa:da:c8:7a:e2:05:16:3d:0c:
b1:05:5a:cb:8a:19:0d:08:89:6e:ad:e6:18:8f:c1:
21:d6:7e:cc:a9:91:84:67:4d:8b:65:42:a8:86:2f:
16:c8:38:e4:2f:72:2e:c5:20:b9:08:9e:df:99:0b:
ba:73:ff:bc:b2:8d:38:54:04:88:bb:e1:af:17:bf:
f3:e1:df:67:cd:80:99:fc:5b:4d:21:23:80:a2:28:
20:c6:84:da:ed:22:00:76:3d:3b:59:4c:7b:fa:f4:
66:52:13:f0:42:ec:e0:8f:a9:1e:c6:1d:7e:01:5c:
91:39:a8:14:6c:4e:ab:34:b4:b9:31:ab:7f:65:05:
84:64:87:b4:3e:8a:50:1d:02:6c:17:df:26:3c:13:
a6:ca:8a:e8:14:7e:98:55:a5:83:fa:7d:c6:bb:92:
ee:0e:36:9b:2d:76:09:87:a8:27:2a:83:b3:fd:9c:
98:4d:90:6e:14:d3:2b:56:ee:e3:92:c2:2d:db:e7:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:13:00:18:F3:7C:E2:6A:46:59:2D:10:BA:8E:E7:E8:53:85:71
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/xvoTABjzfOJqRlktELqO5-hThXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.96.0/22
185.136.244.0/22
IPv6:
2a09:300::/29
Signature Algorithm: sha256WithRSAEncryption
81:40:a8:1c:58:62:22:87:2f:33:ce:e5:4b:ce:05:fc:fc:48:
10:5d:71:21:36:bf:58:de:3d:d9:da:6a:f6:2a:a7:6d:32:76:
92:0b:41:4c:06:56:8c:aa:56:ca:74:26:79:6b:b6:6f:7c:aa:
cd:c1:c6:d1:b9:27:ec:99:79:45:b1:06:e7:e1:b7:23:f9:1a:
5c:27:87:74:43:67:67:b7:c7:7f:e7:c7:4a:91:32:f5:41:b2:
78:fe:04:a5:93:85:ac:c2:1e:50:2d:2c:07:e7:eb:70:d3:ee:
b4:c1:98:9e:e8:92:61:67:88:24:83:71:ff:bd:68:f3:6c:5a:
6d:11:5e:0f:a6:d8:fa:5e:19:c3:2b:16:7e:34:3d:c2:01:c9:
33:31:65:4a:6b:9f:ac:9a:54:89:8e:50:89:8a:bd:0d:72:af:
ae:6e:3c:70:e7:b3:22:0d:b3:f0:39:d4:89:4c:34:37:27:e1:
34:bf:67:1e:57:bc:c3:5f:05:92:42:10:4c:fc:b5:ea:d0:af:
36:90:57:8a:95:7e:dc:b7:3f:be:06:5c:6d:f9:38:a1:ad:aa:
04:10:50:ec:61:10:cd:93:21:9f:e8:d1:a4:c3:8a:6d:6b:3b:
29:d7:bb:fa:6b:c0:68:12:c0:10:30:e6:b2:bf:7e:d8:49:69:
22:84:2a:4e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQlIeGOZEi5ffTCcwaNoiieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMmQ5NGJiM2RjNTM0YTY0MjdmZTlhNjczMDBkOGY0YzQ5
MTQ2YzQwHhcNMjUwMTAyMDM0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmZhMTMwMDE4ZjM3Y2UyNmE0NjU5MmQxMGJhOGVlN2U4NTM4NTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYtAWkX5S0Xivvjb/h4HkV0p0jJZ
nXP+H6xJqeLpeHi9jdAj+dWZ+xSaEuNIwrCYho4CwDN65ZpqqyJMGEceXRD62sh6
4gUWPQyxBVrLihkNCIlureYYj8Eh1n7MqZGEZ02LZUKohi8WyDjkL3IuxSC5CJ7f
mQu6c/+8so04VASIu+GvF7/z4d9nzYCZ/FtNISOAoiggxoTa7SIAdj07WUx7+vRm
UhPwQuzgj6kexh1+AVyROagUbE6rNLS5Mat/ZQWEZIe0PopQHQJsF98mPBOmyoro
FH6YVaWD+n3Gu5LuDjabLXYJh6gnKoOz/ZyYTZBuFNMrVu7jksIt2+e60QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMb6EwAY83ziakZZLRC6jufoU4VxMB8GA1UdIwQY
MBaAFPEtlLs9xTSmQn/ppnMA2PTEkUbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hNjM1YWYtYTQ2ZC00ZDBiLWI5MzEt
YTNhYmRiZDFkYTA2LzEveHZvVEFCanpmT0pxUmxrdEVMcU81LWhUaFhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hNjM1YWYtYTQ2ZC00ZDBiLWI5MzEtYTNhYmRiZDFkYTA2
LzEvOFMyVXV6M0ZOS1pDZi1tbWN3RFk5TVNSUnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLUFgAwQC
uYj0MA0EAgACMAcDBQMqCQMAMA0GCSqGSIb3DQEBCwUAA4IBAQCBQKgcWGIihy8z
zuVLzgX8/EgQXXEhNr9Y3j3Z2mr2KqdtMnaSC0FMBlaMqlbKdCZ5a7ZvfKrNwcbR
uSfsmXlFsQbn4bcj+RpcJ4d0Q2dnt8d/58dKkTL1QbJ4/gSlk4Wswh5QLSwH5+tw
0+60wZie6JJhZ4gkg3H/vWjzbFptEV4Pptj6XhnDKxZ+ND3CAckzMWVKa5+smlSJ
jlCJir0Ncq+ubjxw57MiDbPwOdSJTDQ3J+E0v2ceV7zDXwWSQhBM/LXq0K82kFeK
lX7ctz++Blxt+TihraoEEFDsYRDNkyGf6NGkw4ptazsp17v6a8BoEsAQMOayv37Y
SWkihCpO
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:23:49 2025 by rpki-client