Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/xAkaLP7SkRQoBd-TYEf0fakBydQ.roa
File: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (raw, json)
Hash identifier: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=
Subject key identifier: C4:09:1A:2C:FE:D2:91:14:28:05:DF:93:60:47:F4:7D:A9:01:C9:D4
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 01942521B00C7F560959AC1191CEE1D8456B
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/xAkaLP7SkRQoBd-TYEf0fakBydQ.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25160
IP address blocks: 2a0e:fc80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b0:0c:7f:56:09:59:ac:11:91:ce:e1:d8:45:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4091a2cfed291142805df936047f47da901c9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:a7:66:de:e1:e7:c9:0c:15:1e:9f:1e:ef:
f4:61:7c:64:2d:f5:f5:12:96:a5:1a:85:a9:53:db:
e7:bd:63:7c:65:a9:39:28:4c:df:22:9e:16:43:d8:
93:8e:28:05:bc:10:22:d1:00:48:72:b3:4f:53:dd:
46:41:cc:36:02:47:c1:ab:93:15:ee:95:41:b4:b3:
b4:ec:69:c7:8b:99:76:ac:e1:91:73:5f:66:76:d5:
90:00:94:24:20:b5:e5:5c:5a:f6:08:d2:8a:b1:fc:
5f:e7:8b:5d:aa:dc:4f:c1:5d:78:60:58:6c:26:07:
82:4d:39:e5:cf:38:5a:af:71:ff:69:aa:d7:4f:92:
a7:34:d1:9f:95:2f:cb:64:36:c6:b2:2b:9b:e7:80:
49:e8:ae:0b:8c:21:87:cf:51:d9:93:bd:95:06:e4:
27:e1:d1:ab:06:f5:f2:4f:f2:eb:2e:fb:25:65:94:
45:15:04:34:a3:3a:16:87:54:83:f4:c9:b2:74:81:
25:0b:4a:2c:80:39:b0:7d:9a:17:a4:a7:c6:ba:b0:
15:2c:a5:fb:54:8e:7a:f8:a0:77:63:c5:32:1f:e6:
cb:2f:4b:16:cc:f9:05:5b:5a:1f:f3:4e:8c:20:4d:
b5:fe:20:83:b9:06:93:ac:1a:15:b4:0f:81:ae:7a:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:09:1A:2C:FE:D2:91:14:28:05:DF:93:60:47:F4:7D:A9:01:C9:D4
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/xAkaLP7SkRQoBd-TYEf0fakBydQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
21:cc:44:41:a6:2c:0a:55:7e:2c:43:20:a1:b5:e3:0c:79:fb:
3b:b2:3b:8a:87:19:27:54:c9:8a:30:eb:9b:3d:66:b9:1e:bf:
0a:85:05:78:98:a3:d0:fe:b0:60:28:70:4f:1e:c2:71:7a:c1:
cc:7a:8e:12:1a:fc:bf:e3:fa:32:47:e5:8a:1f:42:c8:e6:a4:
1f:0b:7b:7a:95:62:fa:fb:14:ce:bf:0a:cb:3f:c5:50:de:e7:
37:69:84:bd:bb:cb:38:99:d6:c1:90:40:7c:e2:ae:74:75:22:
32:e3:13:b4:11:22:4c:a6:fa:f2:45:1c:cb:29:b9:5d:ec:90:
df:a3:d3:1a:22:6e:d6:c1:c0:75:37:24:95:64:21:d4:22:90:
ee:f0:05:ab:35:b5:72:ea:3b:16:8c:da:1f:b5:ca:c9:0b:9d:
1e:78:7c:b9:67:1b:a1:35:dd:60:6f:2e:15:4d:b9:0e:42:bc:
18:b3:15:7c:f3:4c:20:1a:05:ca:69:b2:52:52:1d:3c:04:05:
7d:9a:c1:7e:da:07:5a:7a:71:7e:8e:bb:45:00:15:4c:eb:7e:
52:6a:5f:31:f5:ba:81:46:69:a8:56:70:01:7c:a8:b7:c6:3b:
f7:a4:3d:05:6b:e5:c1:0e:c3:09:90:8f:b2:26:7b:b7:d1:99:
d6:3b:dc:8c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQlIbAMf1YJWawRkc7h2EVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2VlMzFkMmYwZWYxMDMyOTZkZGVjM2M2NmIwN2EzZjQ0
MmFjOTgwHhcNMjUwMTAyMDM0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDA5MWEyY2ZlZDI5MTE0MjgwNWRmOTM2MDQ3ZjQ3ZGE5MDFjOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1mnZt7h58kMFR6fHu/0YXxkLfX1
EpalGoWpU9vnvWN8Zak5KEzfIp4WQ9iTjigFvBAi0QBIcrNPU91GQcw2AkfBq5MV
7pVBtLO07GnHi5l2rOGRc19mdtWQAJQkILXlXFr2CNKKsfxf54tdqtxPwV14YFhs
JgeCTTnlzzhar3H/aarXT5KnNNGflS/LZDbGsiub54BJ6K4LjCGHz1HZk72VBuQn
4dGrBvXyT/LrLvslZZRFFQQ0ozoWh1SD9MmydIElC0osgDmwfZoXpKfGurAVLKX7
VI56+KB3Y8UyH+bLL0sWzPkFW1of806MIE21/iCDuQaTrBoVtA+BrnrznwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMQJGiz+0pEUKAXfk2BH9H2pAcnUMB8GA1UdIwQY
MBaAFO8+4x0vDvEDKW3ew8ZrB6P0QqyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMt
NzQ4ZDYxNzNiNmExLzEveEFrYUxQN1NrUlFvQmQtVFlFZjBmYWtCeWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85OTBjYTktNmQ0Yy00OTQ2LWI3ZjMtNzQ4ZDYxNzNiNmEx
LzEvN3o3akhTOE84UU1wYmQ3RHhtc0hvX1JDckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg78gDAN
BgkqhkiG9w0BAQsFAAOCAQEAIcxEQaYsClV+LEMgobXjDHn7O7I7iocZJ1TJijDr
mz1muR6/CoUFeJij0P6wYChwTx7CcXrBzHqOEhr8v+P6Mkflih9CyOakHwt7epVi
+vsUzr8Kyz/FUN7nN2mEvbvLOJnWwZBAfOKudHUiMuMTtBEiTKb68kUcyym5XeyQ
36PTGiJu1sHAdTcklWQh1CKQ7vAFqzW1cuo7FozaH7XKyQudHnh8uWcboTXdYG8u
FU25DkK8GLMVfPNMIBoFymmyUlIdPAQFfZrBftoHWnpxfo67RQAVTOt+UmpfMfW6
gUZpqFZwAXyot8Y796Q9BWvlwQ7DCZCPsiZ7t9GZ1jvcjA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:42 2025 by rpki-client