Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/xZlrXqE8pd9RbauBbqs28LHvRHA.roa
File: xZlrXqE8pd9RbauBbqs28LHvRHA.roa (raw, json)
Hash identifier: 2cai0/ZfgqLeuQF0rbi62rT8qPeDCMYpSTam6ord1Vg=
Subject key identifier: C5:99:6B:5E:A1:3C:A5:DF:51:6D:AB:81:6E:AB:36:F0:B1:EF:44:70
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 0194236A195706E25D45523AE194ECDED8B5
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/xZlrXqE8pd9RbauBbqs28LHvRHA.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207062
IP address blocks: 213.140.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:19:57:06:e2:5d:45:52:3a:e1:94:ec:de:d8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5996b5ea13ca5df516dab816eab36f0b1ef4470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:40:d9:b3:5e:b2:6c:13:78:b8:c2:6b:5f:
fe:a3:d9:41:6c:f8:c1:4d:f8:67:ef:8c:2c:f1:2c:
45:8d:9a:72:65:82:86:b4:44:51:41:e1:d0:cf:90:
1e:37:1a:f3:6c:f5:7b:7d:47:e1:b8:e8:ca:be:d9:
11:48:ec:6f:12:a9:01:12:90:4f:e9:37:97:c5:99:
e5:e3:2d:ce:f3:41:28:f5:cf:f8:40:73:54:47:3d:
12:2a:23:aa:c5:ae:93:c3:29:8f:df:a1:23:e0:0a:
74:7b:de:99:98:e1:10:b3:fd:8c:02:51:3b:0d:6a:
83:b8:82:6c:e1:27:f2:44:26:d1:2a:49:ab:55:df:
4d:35:d8:38:0e:ff:dd:2d:d3:31:cc:04:3f:75:62:
36:eb:e0:a5:67:55:b9:22:f5:8d:8c:4a:aa:e4:8a:
84:0d:08:e1:74:ef:bf:4a:89:c5:51:82:d5:09:56:
05:84:a1:8d:e9:68:1a:0c:ac:ab:7c:e6:43:bd:f5:
ef:54:eb:92:44:4e:2e:70:e2:de:b3:e1:d7:c8:27:
af:d7:13:b7:e0:28:a6:42:14:bd:a5:91:62:b4:7d:
a6:18:f5:92:e2:75:7c:d0:ea:d7:c1:3f:fb:65:2b:
d5:77:c3:df:74:3d:ce:f2:64:42:90:d8:27:0b:05:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:99:6B:5E:A1:3C:A5:DF:51:6D:AB:81:6E:AB:36:F0:B1:EF:44:70
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/xZlrXqE8pd9RbauBbqs28LHvRHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.140.145.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ff:a2:3d:f4:cc:8a:61:64:3c:2a:7a:11:63:e8:a8:c4:e1:
01:7b:05:86:24:29:47:31:6f:be:8c:b3:3d:db:ea:70:66:ce:
59:03:6c:32:89:34:86:f5:01:36:9c:0d:c1:b7:c1:aa:c3:c9:
b1:8c:f8:7a:c5:8e:b2:46:04:4c:c2:79:c3:f9:11:aa:2b:5f:
1a:79:35:07:64:65:73:9a:00:dc:47:a5:31:51:df:db:64:c5:
ab:7a:f3:ed:74:24:32:8e:29:b9:5e:31:c4:80:15:f2:a3:41:
20:fe:0a:1a:51:eb:54:9a:40:f3:75:0c:5f:2f:3d:30:7e:72:
db:5e:01:0b:0b:9b:8e:b8:e6:e9:14:61:c8:ff:fc:51:e2:0a:
3d:36:d2:67:72:67:93:9d:53:db:dd:ef:fe:03:89:5e:ec:79:
1b:1a:81:ad:49:ef:d3:20:fc:00:be:4b:7a:79:5d:e0:18:3c:
ab:ff:50:a1:80:02:6b:46:c7:61:c1:4d:2d:cf:b2:8e:68:d0:
f3:bb:26:7e:af:d0:13:65:4d:c7:50:eb:77:b4:60:2b:e7:e1:
85:d5:89:2b:96:3e:12:a0:76:21:37:5f:58:99:21:5a:7b:e3:
80:8e:21:a8:b1:27:2a:dc:cc:84:24:a2:c5:5d:6b:bf:af:f7:
57:1a:81:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjahlXBuJdRVI64ZTs3ti1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOGE5ZmQ3YzUxOTI2ZTIyZWE4YWEzM2IzYjg4MzhlOTNl
OGJlZGQwHhcNMjUwMTAxMTk0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTk5NmI1ZWExM2NhNWRmNTE2ZGFiODE2ZWFiMzZmMGIxZWY0NDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLFA2bNesmwTeLjCa1/+o9lBbPjB
Tfhn74ws8SxFjZpyZYKGtERRQeHQz5AeNxrzbPV7fUfhuOjKvtkRSOxvEqkBEpBP
6TeXxZnl4y3O80Eo9c/4QHNURz0SKiOqxa6TwymP36Ej4Ap0e96ZmOEQs/2MAlE7
DWqDuIJs4SfyRCbRKkmrVd9NNdg4Dv/dLdMxzAQ/dWI26+ClZ1W5IvWNjEqq5IqE
DQjhdO+/SonFUYLVCVYFhKGN6WgaDKyrfOZDvfXvVOuSRE4ucOLes+HXyCev1xO3
4CimQhS9pZFitH2mGPWS4nV80OrXwT/7ZSvVd8PfdD3O8mRCkNgnCwXKQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMWZa16hPKXfUW2rgW6rNvCx70RwMB8GA1UdIwQY
MBaAFF2Kn9fFGSbiLqiqM7O4g46T6L7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMt
NjZjNTNmMmIxZjAyLzEveFpsclhxRThwZDlSYmF1QmJxczI4TEh2UkhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMtNjZjNTNmMmIxZjAy
LzEvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YyRMA0G
CSqGSIb3DQEBCwUAA4IBAQAI/6I99MyKYWQ8KnoRY+ioxOEBewWGJClHMW++jLM9
2+pwZs5ZA2wyiTSG9QE2nA3Bt8Gqw8mxjPh6xY6yRgRMwnnD+RGqK18aeTUHZGVz
mgDcR6UxUd/bZMWrevPtdCQyjim5XjHEgBXyo0Eg/goaUetUmkDzdQxfLz0wfnLb
XgELC5uOuObpFGHI//xR4go9NtJncmeTnVPb3e/+A4le7HkbGoGtSe/TIPwAvkt6
eV3gGDyr/1ChgAJrRsdhwU0tz7KOaNDzuyZ+r9ATZU3HUOt3tGAr5+GF1Ykrlj4S
oHYhN19YmSFae+OAjiGosScq3MyEJKLFXWu/r/dXGoHQ
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:43 2025 by rpki-client