Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/xgdaw_rveHEK5d7Lv8gByebbpYM.roa
File: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (raw, json)
Hash identifier: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=
Subject key identifier: C6:07:5A:C3:FA:EF:78:71:0A:E5:DE:CB:BF:C8:01:C9:E6:DB:A5:83
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 019428257CE35E1AA3D11FFD649E72FC6DB6
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/xgdaw_rveHEK5d7Lv8gByebbpYM.roa
Signing time: Thu 02 Jan 2025 17:52:12 +0000
ROA not before: Thu 02 Jan 2025 17:52:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 666
IP address blocks: 84.205.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:7c:e3:5e:1a:a3:d1:1f:fd:64:9e:72:fc:6d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 2 17:52:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6075ac3faef78710ae5decbbfc801c9e6dba583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:5f:d7:5b:0e:81:af:ae:ef:2c:0a:a6:c8:
70:c8:23:d6:d9:22:15:d0:1e:1b:aa:76:33:33:76:
35:0f:96:10:cf:e6:c4:c3:25:90:f0:d6:38:21:f2:
eb:d5:a9:ca:cb:63:82:bb:85:cc:e9:39:a2:9c:42:
8b:fb:60:09:d3:a4:67:87:96:e0:34:87:8e:62:c6:
70:71:d2:f4:fb:e2:06:49:aa:3d:19:83:5d:55:76:
bc:89:8e:18:4c:0f:49:be:8e:88:5b:eb:09:b1:30:
aa:ce:47:67:c2:ae:2c:a4:c0:8b:52:f5:a6:04:06:
73:f6:8d:46:3d:dc:76:b5:d7:2c:f8:55:20:bc:06:
dd:17:fc:9c:d4:ac:93:f0:7f:a1:d1:67:ad:dc:f0:
16:6e:38:ce:47:5c:b5:21:6e:47:4e:86:9d:93:c0:
b8:75:3a:51:9d:bd:82:de:9f:6b:3f:65:14:74:8a:
5c:a0:77:ab:62:26:79:f9:64:e2:79:e8:a5:94:25:
11:8a:a3:c0:dd:67:30:a7:8b:a8:02:81:cf:48:57:
dd:ea:b8:d7:78:d0:8f:44:52:5b:03:55:cf:1b:85:
75:f7:e2:4d:ac:04:15:d9:15:d8:a9:5c:cd:3d:3a:
7d:ec:2d:a2:ff:80:76:a7:1a:96:e9:70:90:2f:98:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:07:5A:C3:FA:EF:78:71:0A:E5:DE:CB:BF:C8:01:C9:E6:DB:A5:83
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/xgdaw_rveHEK5d7Lv8gByebbpYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.81.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:37:0c:e1:68:05:23:d7:f0:95:bd:49:05:95:b6:8f:0e:85:
c6:99:39:78:c8:89:ea:99:02:9a:5f:9a:5a:da:16:b9:d1:19:
b2:80:88:95:ae:99:1c:07:2c:47:9b:4f:6b:91:45:24:90:8f:
b9:be:79:3f:26:16:65:b9:34:c4:6e:69:27:35:60:43:b1:51:
44:79:17:81:0d:6e:2c:5b:76:a8:3e:08:07:7b:78:be:c0:23:
ba:c1:8b:22:47:41:bf:83:a4:1b:dc:b2:54:14:78:77:db:7b:
0f:81:7c:f8:10:36:ac:04:bd:3b:f9:e8:4d:e2:41:55:60:99:
d0:0e:53:6d:83:65:39:61:90:50:25:a1:eb:c1:93:ad:e0:0a:
41:1c:ec:55:23:d5:4f:0b:38:1d:57:54:0d:c6:26:d5:e7:48:
6f:b3:30:01:99:79:48:9a:70:2d:54:9b:65:63:65:88:cd:d3:
24:15:4f:19:41:c1:ce:f2:2c:a3:48:46:6b:b3:3c:e6:25:36:
ad:8d:d8:28:3c:b9:03:47:54:d2:38:47:15:7f:e7:1d:7d:71:
4f:8a:1b:74:4b:0f:81:fc:1d:7e:a4:08:74:d5:db:13:92:4d:
2c:71:da:32:74:08:9d:a7:71:2d:c6:5d:00:47:15:48:1b:b3:
2e:19:df:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJXzjXhqj0R/9ZJ5y/G22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez
ZGY5MjIwHhcNMjUwMTAyMTc1MjEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjA3NWFjM2ZhZWY3ODcxMGFlNWRlY2JiZmM4MDFjOWU2ZGJhNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gtf11sOga+u7ywKpshwyCPW2SIV
0B4bqnYzM3Y1D5YQz+bEwyWQ8NY4IfLr1anKy2OCu4XM6TminEKL+2AJ06Rnh5bg
NIeOYsZwcdL0++IGSao9GYNdVXa8iY4YTA9Jvo6IW+sJsTCqzkdnwq4spMCLUvWm
BAZz9o1GPdx2tdcs+FUgvAbdF/yc1KyT8H+h0Wet3PAWbjjOR1y1IW5HToadk8C4
dTpRnb2C3p9rP2UUdIpcoHerYiZ5+WTieeillCURiqPA3Wcwp4uoAoHPSFfd6rjX
eNCPRFJbA1XPG4V19+JNrAQV2RXYqVzNPTp97C2i/4B2pxqW6XCQL5iJHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMYHWsP673hxCuXey7/IAcnm26WDMB8GA1UdIwQY
MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt
ZTY2MzY5NjQ5NDExLzEveGdkYXdfcnZlSEVLNWQ3THY4Z0J5ZWJicFlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx
LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVM1RMA0G
CSqGSIb3DQEBCwUAA4IBAQDFNwzhaAUj1/CVvUkFlbaPDoXGmTl4yInqmQKaX5pa
2ha50RmygIiVrpkcByxHm09rkUUkkI+5vnk/JhZluTTEbmknNWBDsVFEeReBDW4s
W3aoPggHe3i+wCO6wYsiR0G/g6Qb3LJUFHh323sPgXz4EDasBL07+ehN4kFVYJnQ
DlNtg2U5YZBQJaHrwZOt4ApBHOxVI9VPCzgdV1QNxibV50hvszABmXlImnAtVJtl
Y2WIzdMkFU8ZQcHO8iyjSEZrszzmJTatjdgoPLkDR1TSOEcVf+cdfXFPiht0Sw+B
/B1+pAh01dsTkk0scdoydAidp3Etxl0ARxVIG7MuGd/v
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:12 2025 by rpki-client