Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/XatCcqLdyXV4mDDXl-bQhtm4cRc.roa
File: XatCcqLdyXV4mDDXl-bQhtm4cRc.roa (raw, json)
Hash identifier: /XWqpMBXURF/ynpvKs9v1yAxYQyLrEGEwYt1l5eri0Y=
Subject key identifier: 5D:AB:42:72:A2:DD:C9:75:78:98:30:D7:97:E6:D0:86:D9:B8:71:17
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B5E13A72B153D3F631AB8545D8E57
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/XatCcqLdyXV4mDDXl-bQhtm4cRc.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200361
IP address blocks: 212.21.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5e:13:a7:2b:15:3d:3f:63:1a:b8:54:5d:8e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dab4272a2ddc975789830d797e6d086d9b87117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:ba:f8:d6:ae:97:4f:b4:32:fb:ac:da:29:
6e:53:88:1b:b7:4c:c6:63:98:e1:cf:37:09:de:de:
fa:aa:ec:cc:0a:f6:63:fb:1c:a9:4f:5e:75:19:32:
0b:49:3d:e2:6b:60:63:26:02:6e:3a:51:e5:ba:b3:
e5:a5:39:f2:99:15:61:d1:6c:ff:4f:06:bd:e3:85:
f9:bf:2e:7b:ef:5c:25:e9:b2:18:fe:f1:3b:4d:60:
58:40:5a:c0:15:b1:f8:97:2d:44:bf:19:ec:1a:30:
24:6b:1f:07:cf:35:f3:3a:5d:47:84:99:b0:d0:94:
30:10:66:91:c8:7d:cb:fa:db:cc:6b:1f:d1:31:93:
4e:da:ad:9a:a0:e5:88:4b:ec:de:3f:6c:b3:85:d0:
c2:c0:74:29:4a:89:bd:ea:53:fa:b8:d8:7b:fc:47:
47:b9:33:b9:b8:11:ea:75:b5:06:bc:2f:e8:4f:ba:
6b:ef:5f:0c:a5:22:51:4b:3c:8f:46:db:51:ad:3e:
d1:e3:e1:1a:cb:d1:ef:b0:43:c7:02:83:f2:5d:4d:
05:ca:c0:52:26:2c:82:38:63:cd:67:b7:f8:a8:18:
ea:83:1a:cc:8b:77:b7:c4:25:b9:55:b4:89:38:97:
80:f0:c8:dd:cb:91:a6:29:ec:e4:73:c8:63:7e:42:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AB:42:72:A2:DD:C9:75:78:98:30:D7:97:E6:D0:86:D9:B8:71:17
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/XatCcqLdyXV4mDDXl-bQhtm4cRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.134.0/24
Signature Algorithm: sha256WithRSAEncryption
39:be:df:38:de:10:5f:c9:4d:33:b8:73:ad:bc:dc:ea:0b:54:
8f:3b:a4:29:9f:91:a9:77:c2:0d:54:4b:03:03:42:d6:22:d5:
12:bd:fa:5e:98:62:6d:c5:39:58:70:ab:d5:ff:26:e7:78:f7:
52:cc:3c:85:b7:3f:a3:ec:86:32:c0:ca:68:99:3d:87:f4:e5:
d9:55:04:a5:74:10:4e:76:29:29:07:2c:15:7c:36:fd:2a:3b:
28:ff:f4:70:01:fd:8e:06:94:f6:e1:28:c2:3e:aa:f3:1d:00:
cf:68:74:16:98:11:bc:7d:6a:96:fa:13:0a:5e:53:ff:d5:05:
47:6e:c8:41:13:9f:47:ac:8d:f3:17:03:94:a8:a4:46:a4:d6:
e2:5f:15:80:15:1b:ca:39:f8:57:e2:2c:3f:40:51:86:e2:c9:
0e:e0:61:a8:2a:f6:d9:ce:b2:cb:69:76:ae:da:c9:30:60:76:
a1:94:c0:29:19:74:68:19:e0:58:9c:8f:06:7a:56:f7:99:a2:
38:bb:f9:1b:fe:b2:3a:f5:9b:d9:a8:ac:51:9c:72:3f:c3:5f:
44:89:03:f4:12:6b:07:48:98:15:6f:37:fa:9d:bc:59:30:4e:
3d:01:63:58:fe:ef:62:b2:f4:f9:a5:69:52:f2:cb:1f:9d:0f:
ac:7b:04:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma14TpysVPT9jGrhUXY5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjUwMTAyMDk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGFiNDI3MmEyZGRjOTc1Nzg5ODMwZDc5N2U2ZDA4NmQ5Yjg3MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJW6+Naul0+0Mvus2iluU4gbt0zG
Y5jhzzcJ3t76quzMCvZj+xypT151GTILST3ia2BjJgJuOlHlurPlpTnymRVh0Wz/
Twa944X5vy5771wl6bIY/vE7TWBYQFrAFbH4ly1EvxnsGjAkax8HzzXzOl1HhJmw
0JQwEGaRyH3L+tvMax/RMZNO2q2aoOWIS+zeP2yzhdDCwHQpSom96lP6uNh7/EdH
uTO5uBHqdbUGvC/oT7pr718MpSJRSzyPRttRrT7R4+Eay9HvsEPHAoPyXU0FysBS
JiyCOGPNZ7f4qBjqgxrMi3e3xCW5VbSJOJeA8Mjdy5GmKezkc8hjfkIcDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF2rQnKi3cl1eJgw15fm0IbZuHEXMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvWGF0Q2NxTGR5WFY0bUREWGwtYlFodG00Y1JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BWGMA0G
CSqGSIb3DQEBCwUAA4IBAQA5vt843hBfyU0zuHOtvNzqC1SPO6Qpn5Gpd8INVEsD
A0LWItUSvfpemGJtxTlYcKvV/ybnePdSzDyFtz+j7IYywMpomT2H9OXZVQSldBBO
dikpBywVfDb9Kjso//RwAf2OBpT24SjCPqrzHQDPaHQWmBG8fWqW+hMKXlP/1QVH
bshBE59HrI3zFwOUqKRGpNbiXxWAFRvKOfhX4iw/QFGG4skO4GGoKvbZzrLLaXau
2skwYHahlMApGXRoGeBYnI8Gelb3maI4u/kb/rI69ZvZqKxRnHI/w19EiQP0EmsH
SJgVbzf6nbxZME49AWNY/u9isvT5pWlS8ssfnQ+sewSI
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:31 2025 by rpki-client