Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa
File: XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa (raw, json)
Hash identifier: oLiyfMEZ+8NuCZuPjPWFi0zBy3xSJ1joH9/Uajj7btQ=
Subject key identifier: 5C:AF:FE:0E:86:24:02:AD:05:42:D1:C1:78:71:19:06:2C:13:6E:D5
Certificate issuer: /CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Certificate serial: 01942068438A81067F6E500C593AFFACB006
Authority key identifier: B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8455
IP address blocks: 185.31.144.0/22 maxlen: 22
2a00:bd20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:43:8a:81:06:7f:6e:50:0c:59:3a:ff:ac:b0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b872da0f9c6c5686a3db9ee124a99042b0a882d1
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5caffe0e862402ad0542d1c1787119062c136ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:1a:e8:7a:e4:77:d3:c6:ff:f2:03:45:ea:
89:aa:26:fa:e6:a4:b6:69:d0:7b:b5:04:f5:99:d5:
ca:30:6e:64:14:51:7d:6e:e0:4f:ca:af:ba:57:3c:
c9:10:31:a0:d3:b9:e2:65:c3:ef:9e:eb:19:4b:ac:
2e:0e:d5:99:df:ed:35:ed:1a:f5:d8:09:5f:79:b8:
a6:df:27:1d:68:42:13:58:57:63:e8:24:84:ed:e9:
1a:50:09:08:4a:42:1f:e2:39:d2:72:29:0c:13:a3:
e2:6a:d5:b0:a9:43:f1:cf:98:3b:e8:3f:19:15:0b:
15:8b:20:d1:3b:68:f9:2e:ab:0e:ce:77:66:4d:55:
5c:dc:2e:8b:da:f2:e6:2a:7c:e2:fe:4a:6c:c8:76:
a8:60:d3:6b:0a:85:38:2d:29:f7:49:eb:8a:98:fd:
eb:3f:8e:b0:02:c7:f8:92:74:b0:18:65:ef:73:2e:
e7:20:66:ff:f3:b8:e9:b8:5b:d7:f3:e8:bf:03:50:
51:a5:c3:cf:ce:4a:2e:2d:6d:e7:a0:f9:58:cb:07:
e8:59:cb:32:b6:19:5b:32:ec:a5:fb:26:43:e8:5b:
2e:e4:69:2f:da:80:7a:c4:07:c8:00:f2:57:b4:ff:
a7:26:7e:ec:c1:3e:95:9e:b3:b3:1d:b3:f9:01:0f:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AF:FE:0E:86:24:02:AD:05:42:D1:C1:78:71:19:06:2C:13:6E:D5
X509v3 Authority Key Identifier:
keyid:B8:72:DA:0F:9C:6C:56:86:A3:DB:9E:E1:24:A9:90:42:B0:A8:82:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHLaD5xsVoaj257hJKmQQrCogtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/XK_-DoYkAq0FQtHBeHEZBiwTbtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2716ec-5657-4f56-8f43-e23103a88052/1/uHLaD5xsVoaj257hJKmQQrCogtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.144.0/22
IPv6:
2a00:bd20::/32
Signature Algorithm: sha256WithRSAEncryption
3d:43:f6:e5:de:e0:7a:88:18:2c:a9:e3:91:bf:24:a0:ab:d5:
f3:f0:28:43:28:f9:f3:11:a0:34:7c:40:ed:dc:d1:4b:2b:9b:
8f:7a:d2:e6:e6:c1:07:58:1f:18:24:56:c8:06:aa:c7:1b:a7:
44:7c:97:c7:9a:bd:62:61:ff:b1:1e:ba:4b:2e:1f:09:ae:d2:
48:97:5d:c3:f1:1d:eb:44:8f:fa:46:eb:81:7e:de:c3:08:d3:
0d:b1:17:d1:22:1c:69:c7:b8:f4:f5:1c:04:60:2f:1c:8e:3e:
d3:55:6e:12:34:23:63:b5:10:2e:5a:dc:1f:33:ca:02:f7:aa:
ee:a4:d0:e4:38:8b:97:3b:16:d5:36:40:37:0a:c5:1f:e7:c2:
eb:6d:1b:25:36:4c:81:54:94:42:3e:43:3f:f0:c8:45:37:18:
8a:03:6a:fe:f9:b5:ed:48:88:49:3e:82:21:fb:75:e3:79:e8:
20:63:7f:3b:16:e0:d5:b5:55:40:eb:5e:ed:1a:0d:f8:61:ac:
67:93:fe:21:1d:ee:df:04:6c:35:32:9a:24:f6:b7:d4:fa:13:
eb:10:92:79:5c:ad:53:72:0c:e7:21:e1:78:cb:68:c7:f4:cb:
9b:c2:79:05:0c:68:78:bc:80:24:e3:00:e4:78:b0:ef:6d:56:
85:70:f2:e7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaEOKgQZ/blAMWTr/rLAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NzJkYTBmOWM2YzU2ODZhM2RiOWVlMTI0YTk5MDQyYjBh
ODgyZDEwHhcNMjUwMTAxMDU0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2FmZmUwZTg2MjQwMmFkMDU0MmQxYzE3ODcxMTkwNjJjMTM2ZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RAa6Hrkd9PG//IDReqJqib65qS2
adB7tQT1mdXKMG5kFFF9buBPyq+6VzzJEDGg07niZcPvnusZS6wuDtWZ3+017Rr1
2Alfebim3ycdaEITWFdj6CSE7ekaUAkISkIf4jnScikME6PiatWwqUPxz5g76D8Z
FQsViyDRO2j5LqsOzndmTVVc3C6L2vLmKnzi/kpsyHaoYNNrCoU4LSn3SeuKmP3r
P46wAsf4knSwGGXvcy7nIGb/87jpuFvX8+i/A1BRpcPPzkouLW3noPlYywfoWcsy
thlbMuyl+yZD6Fsu5Gkv2oB6xAfIAPJXtP+nJn7swT6VnrOzHbP5AQ9D1wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFyv/g6GJAKtBULRwXhxGQYsE27VMB8GA1UdIwQY
MBaAFLhy2g+cbFaGo9ue4SSpkEKwqILRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMt
ZTIzMTAzYTg4MDUyLzEvWEtfLURvWWtBcTBGUXRIQmVIRVpCaXdUYnRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yNzE2ZWMtNTY1Ny00ZjU2LThmNDMtZTIzMTAzYTg4MDUy
LzEvdUhMYUQ1eHNWb2FqMjU3aEpLbVFRckNvZ3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR+QMA0E
AgACMAcDBQAqAL0gMA0GCSqGSIb3DQEBCwUAA4IBAQA9Q/bl3uB6iBgsqeORvySg
q9Xz8ChDKPnzEaA0fEDt3NFLK5uPetLm5sEHWB8YJFbIBqrHG6dEfJfHmr1iYf+x
HrpLLh8JrtJIl13D8R3rRI/6RuuBft7DCNMNsRfRIhxpx7j09RwEYC8cjj7TVW4S
NCNjtRAuWtwfM8oC96rupNDkOIuXOxbVNkA3CsUf58LrbRslNkyBVJRCPkM/8MhF
NxiKA2r++bXtSIhJPoIh+3XjeeggY387FuDVtVVA617tGg34Yaxnk/4hHe7fBGw1
Mpok9rfU+hPrEJJ5XK1TcgznIeF4y2jH9MubwnkFDGh4vIAk4wDkeLDvbVaFcPLn
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:30 2025 by rpki-client