Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/xB2QvC1lnSEbHZpo5CzUz22HzVs.roa
File: xB2QvC1lnSEbHZpo5CzUz22HzVs.roa (raw, json)
Hash identifier: iOoP9/OWnHogDFUgN5EWWw0h5813UdNcLLWGJLi6Jv0=
Subject key identifier: C4:1D:90:BC:2D:65:9D:21:1B:1D:9A:68:E4:2C:D4:CF:6D:87:CD:5B
Certificate issuer: /CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Certificate serial: 01942521A75A11DFB94B604C539B096CD488
Authority key identifier: 96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/xB2QvC1lnSEbHZpo5CzUz22HzVs.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.82.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a7:5a:11:df:b9:4b:60:4c:53:9b:09:6c:d4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96545bad39625aea67903f8183f9fbbaeac6c88d
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c41d90bc2d659d211b1d9a68e42cd4cf6d87cd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:45:63:66:9f:22:a8:a7:f0:3a:14:f9:e3:3f:
42:d5:39:ab:c5:d4:6b:0b:f8:c9:c5:07:c6:1f:1d:
89:20:2f:b1:9a:29:0a:e6:57:51:0a:89:dc:94:f9:
f4:f7:2f:32:33:ff:1d:f4:77:a4:2b:2e:48:0c:e3:
7f:34:96:3a:ff:3d:c2:3b:4a:d8:0d:dd:81:c0:36:
f9:48:54:7e:3d:d8:0a:bd:44:7b:aa:43:10:39:c4:
b7:a1:7d:1b:a2:d4:ae:67:9f:ad:59:cf:a8:2f:a0:
26:ca:1f:5f:05:c0:bb:08:2b:70:67:f5:91:6d:92:
2f:0d:2e:e6:c1:7c:77:5f:8d:75:af:96:54:ef:d0:
47:62:e8:52:7b:79:53:23:ab:0c:0a:cc:5b:19:4b:
00:4e:47:23:87:0a:19:ce:59:96:f5:37:4f:37:94:
4d:6e:36:ae:d5:1b:00:cf:e1:bd:9d:83:56:13:3a:
00:8c:86:48:db:d5:d1:fa:85:84:e8:b8:16:3b:7f:
48:51:be:de:30:2d:26:47:49:8f:cb:3c:6f:b3:b9:
0b:80:ad:e7:68:e7:9d:77:7b:3a:ef:21:cf:bc:20:
6a:b6:32:3b:2c:4b:04:b0:a5:73:17:f0:c5:ad:aa:
0c:2e:1d:52:d5:1c:63:93:29:53:66:ca:35:7e:4f:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1D:90:BC:2D:65:9D:21:1B:1D:9A:68:E4:2C:D4:CF:6D:87:CD:5B
X509v3 Authority Key Identifier:
keyid:96:54:5B:AD:39:62:5A:EA:67:90:3F:81:83:F9:FB:BA:EA:C6:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRbrTliWupnkD-Bg_n7uurGyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/xB2QvC1lnSEbHZpo5CzUz22HzVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eeb98f-cf11-449d-a9bb-8d44de54cfa7/1/llRbrTliWupnkD-Bg_n7uurGyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:9f:ff:37:d8:de:68:7f:79:18:a9:d3:3d:72:b2:2f:28:17:
97:1f:10:ef:dd:fb:90:a7:6e:d9:92:9c:16:71:5e:5b:2c:e6:
b1:cc:aa:dc:9b:51:f2:72:4f:4b:9b:f0:53:c8:14:80:04:71:
56:51:07:3a:b9:66:d8:99:8d:38:f1:65:e0:3e:4e:d6:45:3d:
c1:05:6c:f3:e6:99:f5:4c:65:3b:33:a7:f0:4b:fe:a3:0c:17:
8c:4c:9f:b5:8a:82:ba:d5:d8:64:74:d5:07:d0:12:42:c6:47:
03:ee:77:e6:f3:be:60:b6:55:7d:7e:8d:0f:ac:a6:51:b0:b7:
3b:65:b5:b6:7f:92:36:d0:38:dc:a6:80:4c:d8:9f:18:ef:1e:
82:a6:eb:e8:38:45:60:e8:42:09:dd:fd:c9:46:cb:f4:61:d5:
d2:86:1a:f6:a7:8f:63:f8:d4:65:d5:0a:38:65:28:b1:1d:14:
30:ab:09:ea:0d:16:b6:d8:56:01:cf:e3:90:ed:fb:c7:40:ef:
00:7d:41:6f:89:97:41:60:a1:18:3e:44:93:c1:3a:bb:a9:08:
2e:52:e3:9a:61:bd:92:45:e4:08:c2:1d:a9:12:21:59:bd:1a:
b1:f8:9a:0a:b6:3d:bd:86:53:8e:57:05:1b:8d:da:08:4e:3e:
ca:41:a0:dd
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQlIadaEd+5S2BMU5sJbNSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NTQ1YmFkMzk2MjVhZWE2NzkwM2Y4MTgzZjlmYmJhZWFj
NmM4OGQwHhcNMjUwMTAyMDM0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDFkOTBiYzJkNjU5ZDIxMWIxZDlhNjhlNDJjZDRjZjZkODdjZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EVjZp8iqKfwOhT54z9C1TmrxdRr
C/jJxQfGHx2JIC+xmikK5ldRConclPn09y8yM/8d9HekKy5IDON/NJY6/z3CO0rY
Dd2BwDb5SFR+PdgKvUR7qkMQOcS3oX0botSuZ5+tWc+oL6Amyh9fBcC7CCtwZ/WR
bZIvDS7mwXx3X411r5ZU79BHYuhSe3lTI6sMCsxbGUsATkcjhwoZzlmW9TdPN5RN
bjau1RsAz+G9nYNWEzoAjIZI29XR+oWE6LgWO39IUb7eMC0mR0mPyzxvs7kLgK3n
aOedd3s67yHPvCBqtjI7LEsEsKVzF/DFraoMLh1S1RxjkylTZso1fk+tiwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFMQdkLwtZZ0hGx2aaOQs1M9th81bMB8GA1UdIwQY
MBaAFJZUW605YlrqZ5A/gYP5+7rqxsiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmIt
OGQ0NGRlNTRjZmE3LzEveEIyUXZDMWxuU0ViSFpwbzVDelV6MjJIelZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lZWI5OGYtY2YxMS00NDlkLWE5YmItOGQ0NGRlNTRjZmE3
LzEvbGxSYnJUbGlXdXBua0QtQmdfbjd1dXJHeUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjVIwDQYJ
KoZIhvcNAQELBQADggEBAEKf/zfY3mh/eRip0z1ysi8oF5cfEO/d+5CnbtmSnBZx
Xlss5rHMqtybUfJyT0ub8FPIFIAEcVZRBzq5ZtiZjTjxZeA+TtZFPcEFbPPmmfVM
ZTszp/BL/qMMF4xMn7WKgrrV2GR01QfQEkLGRwPud+bzvmC2VX1+jQ+splGwtztl
tbZ/kjbQONymgEzYnxjvHoKm6+g4RWDoQgnd/clGy/Rh1dKGGvanj2P41GXVCjhl
KLEdFDCrCeoNFrbYVgHP45Dt+8dA7wB9QW+Jl0FgoRg+RJPBOrupCC5S45phvZJF
5AjCHakSIVm9GrH4mgq2Pb2GU45XBRuN2ghOPspBoN0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:11:55 2025 by rpki-client