Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xeQ2GqJUUPfZWSLJOYpNfW6bQ4Y.roa
File: xeQ2GqJUUPfZWSLJOYpNfW6bQ4Y.roa (raw, json)
Hash identifier: g9BBM0ZlhU7G2VkEalTd49oMAANxLQ8Xfrbwnla0ZFI=
Subject key identifier: C5:E4:36:1A:A2:54:50:F7:D9:59:22:C9:39:8A:4D:7D:6E:9B:43:86
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067F1BF87FAC81F5D9405DD142D1A11
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xeQ2GqJUUPfZWSLJOYpNfW6bQ4Y.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211759
IP address blocks: 2a12:3fc2:ab40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f1:bf:87:fa:c8:1f:5d:94:05:dd:14:2d:1a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5e4361aa25450f7d95922c9398a4d7d6e9b4386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:d0:c4:dc:c9:9e:a2:41:45:d3:ae:69:2c:
07:12:2b:9f:6b:b9:2d:81:5a:18:d0:ec:8f:fa:62:
c2:95:71:9a:1f:bb:19:a1:7c:6c:1f:42:00:9b:ff:
30:5f:99:50:05:50:09:9e:c3:31:b7:e0:83:20:d8:
d6:eb:46:16:7b:60:0c:67:1e:f1:c2:66:0f:b7:d6:
a9:61:20:58:95:ad:a5:d9:e4:a5:db:a3:aa:1c:fa:
61:45:62:64:ad:11:2e:58:c6:82:5b:30:ce:8e:f8:
ce:6b:07:e8:d6:da:22:98:f8:56:ea:0d:7d:72:49:
6a:c6:de:f0:58:33:16:8e:9b:94:33:f2:6d:a9:0c:
f7:e8:cd:01:48:6e:24:e4:cd:8c:ad:55:90:4e:dd:
a3:f9:e6:44:92:79:70:3f:f1:99:b8:53:85:99:d7:
4f:12:dd:2f:45:23:87:88:77:c6:a9:b0:60:dc:14:
81:52:a9:1c:85:84:8a:f7:0b:69:95:67:41:f0:84:
5e:2d:18:11:df:b0:04:db:88:c2:b9:71:9a:c3:94:
28:56:2f:d5:52:6f:6a:d0:ee:fd:e7:88:42:1c:aa:
9e:08:85:e8:9c:bc:04:05:70:8e:80:52:6f:a9:ab:
11:6c:88:8b:3e:6a:ac:41:b3:1a:0f:8b:22:07:2e:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E4:36:1A:A2:54:50:F7:D9:59:22:C9:39:8A:4D:7D:6E:9B:43:86
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/xeQ2GqJUUPfZWSLJOYpNfW6bQ4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:ab40::/44
Signature Algorithm: sha256WithRSAEncryption
94:98:16:de:81:a8:21:06:d7:ed:00:06:86:95:05:b2:52:62:
2b:9b:80:20:a9:0c:87:fc:7a:4b:27:b5:eb:0e:46:aa:43:1f:
bb:06:9e:1e:90:af:0a:95:73:d7:be:ac:3c:95:12:52:8b:1f:
b1:34:78:ec:79:c1:d2:43:dc:e8:26:55:d8:4b:84:5d:ab:ba:
f6:31:d2:3a:b7:34:e4:35:d9:8f:9d:c8:93:9e:b8:7f:03:ae:
40:d8:b0:56:49:95:51:d3:f2:69:a2:f6:88:ac:26:c4:39:b5:
dd:67:f7:9d:96:64:f7:85:26:21:c1:5f:17:05:bd:62:41:e9:
9b:95:f8:89:99:53:14:fb:60:81:97:03:9b:03:f5:e6:0d:02:
2c:e0:bc:74:62:6b:e2:62:75:b6:52:e9:5a:cb:72:56:56:02:
b0:b8:bb:f7:9e:9e:f5:95:27:cf:28:63:67:78:6b:3b:91:78:
64:86:4d:03:d4:a0:50:aa:61:b1:72:ed:a4:1b:96:fb:f2:c5:
3b:9b:49:3b:3e:d2:27:5d:46:18:71:2c:28:c5:c5:e6:3a:5f:
f6:2c:6f:b2:dd:95:0f:9f:5d:57:36:41:ba:08:00:8a:f1:f6:
57:b3:0c:63:8d:b1:16:a3:d7:ce:41:8f:fb:f7:59:af:fd:2f:
1d:37:57:b4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQgZ/G/h/rIH12UBd0ULRoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjUwMTAxMDU0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWU0MzYxYWEyNTQ1MGY3ZDk1OTIyYzkzOThhNGQ3ZDZlOWI0Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ3QxNzJnqJBRdOuaSwHEiufa7kt
gVoY0OyP+mLClXGaH7sZoXxsH0IAm/8wX5lQBVAJnsMxt+CDINjW60YWe2AMZx7x
wmYPt9apYSBYla2l2eSl26OqHPphRWJkrREuWMaCWzDOjvjOawfo1toimPhW6g19
cklqxt7wWDMWjpuUM/JtqQz36M0BSG4k5M2MrVWQTt2j+eZEknlwP/GZuFOFmddP
Et0vRSOHiHfGqbBg3BSBUqkchYSK9wtplWdB8IReLRgR37AE24jCuXGaw5QoVi/V
Um9q0O7954hCHKqeCIXonLwEBXCOgFJvqasRbIiLPmqsQbMaD4siBy7bzwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMXkNhqiVFD32VkiyTmKTX1um0OGMB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEveGVRMkdxSlVVUGZaV1NMSk9ZcE5mVzZiUTRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhI/wqtA
MA0GCSqGSIb3DQEBCwUAA4IBAQCUmBbegaghBtftAAaGlQWyUmIrm4AgqQyH/HpL
J7XrDkaqQx+7Bp4ekK8KlXPXvqw8lRJSix+xNHjsecHSQ9zoJlXYS4Rdq7r2MdI6
tzTkNdmPnciTnrh/A65A2LBWSZVR0/JpovaIrCbEObXdZ/edlmT3hSYhwV8XBb1i
QemblfiJmVMU+2CBlwObA/XmDQIs4Lx0YmviYnW2Uulay3JWVgKwuLv3np71lSfP
KGNneGs7kXhkhk0D1KBQqmGxcu2kG5b78sU7m0k7PtInXUYYcSwoxcXmOl/2LG+y
3ZUPn11XNkG6CACK8fZXswxjjbEWo9fOQY/791mv/S8dN1e0
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:17 2025 by rpki-client