Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xoXjvNemZTSj4V_fnMau5X9wHxg.roa
File: xoXjvNemZTSj4V_fnMau5X9wHxg.roa (raw, json)
Hash identifier: b2tk5ubHiVm5OKze2l3O3m4Wrf96BB7uzhBIRScs0U4=
Subject key identifier: C6:85:E3:BC:D7:A6:65:34:A3:E1:5F:DF:9C:C6:AE:E5:7F:70:1F:18
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143F0CEED48617309598B19FF557BF3
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xoXjvNemZTSj4V_fnMau5X9wHxg.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61350
IP address blocks: 89.213.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f0:ce:ed:48:61:73:09:59:8b:19:ff:55:7b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c685e3bcd7a66534a3e15fdf9cc6aee57f701f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:00:4c:e5:42:f4:67:b5:55:68:5e:fd:90:
b4:a1:e1:a3:4a:3c:bd:f4:07:03:4b:4c:85:a0:35:
a7:0a:e3:5d:85:7e:1c:be:e9:8f:8e:7a:20:29:7c:
d4:83:cc:84:dc:62:71:85:38:6f:77:08:d5:5f:d2:
c1:fb:e9:8d:e2:2a:ca:1c:d1:8d:e7:27:ce:cd:a4:
f2:09:1f:c0:98:40:48:b2:52:0b:28:08:6e:13:90:
db:15:08:44:c0:39:d6:b0:93:e7:1c:83:ea:25:07:
81:c1:4c:cb:9f:48:f3:f6:1c:2f:cb:dc:a9:35:f1:
11:03:70:0a:5f:2a:78:de:9f:7a:f9:03:26:ab:b2:
3b:b8:4c:5f:b9:9b:2f:4c:a9:72:29:22:44:6d:d5:
f3:9c:01:35:47:32:5f:73:cd:16:ac:c6:23:37:27:
28:ac:d9:8c:31:eb:45:ef:df:c8:57:66:d5:f8:48:
a2:c0:ea:35:83:69:f5:0f:9f:40:77:ad:c4:73:2a:
1b:58:cd:ec:bd:1c:26:1b:b6:61:b9:ef:ac:14:60:
11:37:85:38:24:04:4d:2d:34:8a:8e:78:ec:5e:63:
cf:61:82:e7:e6:26:fd:95:6e:f9:79:f3:0b:8d:29:
f3:a1:c0:cf:2f:24:f8:ac:67:a6:14:f8:5c:ff:e6:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:E3:BC:D7:A6:65:34:A3:E1:5F:DF:9C:C6:AE:E5:7F:70:1F:18
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/xoXjvNemZTSj4V_fnMau5X9wHxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.128.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:45:d3:74:5c:5e:a6:e4:9a:35:04:8b:57:5c:dc:39:ab:e3:
0e:fd:25:5f:6a:53:5e:a1:2f:3e:22:af:9a:93:53:e2:b4:cb:
28:6f:ea:b1:98:63:f5:4a:5f:63:f8:b3:22:34:99:b2:f4:4d:
30:71:13:23:e1:81:67:ba:41:7d:a8:d4:84:df:ef:8b:47:a0:
79:98:3a:84:4c:86:fe:e9:cf:9e:70:a4:77:79:0e:b3:18:6c:
f1:57:59:bd:ae:9d:56:c5:08:db:d1:6d:0a:25:5a:a0:40:3e:
da:bf:4a:0e:6e:29:ce:0c:43:75:96:ea:3d:64:be:eb:de:b4:
54:f5:3f:64:f2:84:b3:4e:41:46:56:8e:85:b8:c2:23:d3:c9:
6b:de:ca:49:a1:0c:05:ad:42:0d:6c:83:1f:7a:09:0d:8f:20:
e5:b1:6b:29:2a:86:46:95:ca:82:8a:11:50:34:3b:50:ae:a9:
16:67:31:a7:5e:48:26:37:a1:dd:f5:af:5c:23:40:b0:8a:98:
2f:7f:05:e1:d7:2a:8c:71:41:8d:59:1e:ff:57:ae:b7:05:7d:
9c:b9:fd:ab:f0:a7:ef:6e:ae:c2:d4:d2:35:d8:41:b2:94:3a:
49:d6:5d:97:08:6e:43:04:75:26:3c:e2:09:f7:91:29:a4:8b:
5f:4b:80:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ/DO7UhhcwlZixn/VXvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjg1ZTNiY2Q3YTY2NTM0YTNlMTVmZGY5Y2M2YWVlNTdmNzAxZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYIATOVC9Ge1VWhe/ZC0oeGjSjy9
9AcDS0yFoDWnCuNdhX4cvumPjnogKXzUg8yE3GJxhThvdwjVX9LB++mN4irKHNGN
5yfOzaTyCR/AmEBIslILKAhuE5DbFQhEwDnWsJPnHIPqJQeBwUzLn0jz9hwvy9yp
NfERA3AKXyp43p96+QMmq7I7uExfuZsvTKlyKSJEbdXznAE1RzJfc80WrMYjNyco
rNmMMetF79/IV2bV+EiiwOo1g2n1D59Ad63EcyobWM3svRwmG7Zhue+sFGARN4U4
JARNLTSKjnjsXmPPYYLn5ib9lW75efMLjSnzocDPLyT4rGemFPhc/+YwVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMaF47zXpmU0o+Ff35zGruV/cB8YMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEveG9YanZOZW1aVFNqNFZfZm5NYXU1WDl3SHhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWAMA0G
CSqGSIb3DQEBCwUAA4IBAQCMRdN0XF6m5Jo1BItXXNw5q+MO/SVfalNeoS8+Iq+a
k1PitMsob+qxmGP1Sl9j+LMiNJmy9E0wcRMj4YFnukF9qNSE3++LR6B5mDqETIb+
6c+ecKR3eQ6zGGzxV1m9rp1WxQjb0W0KJVqgQD7av0oObinODEN1luo9ZL7r3rRU
9T9k8oSzTkFGVo6FuMIj08lr3spJoQwFrUINbIMfegkNjyDlsWspKoZGlcqCihFQ
NDtQrqkWZzGnXkgmN6Hd9a9cI0CwipgvfwXh1yqMcUGNWR7/V663BX2cuf2r8Kfv
bq7C1NI12EGylDpJ1l2XCG5DBHUmPOIJ95EppItfS4CT
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:44:57 2025 by rpki-client