Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/aqxiXCKg8wILOiiXb3CbjFknkz0.roa
File: aqxiXCKg8wILOiiXb3CbjFknkz0.roa (raw, json)
Hash identifier: yaEb+yV9BvpFXZongqAOcwN1zzlRTWmLt/Rv8aKMq6E=
Subject key identifier: 6A:AC:62:5C:22:A0:F3:02:0B:3A:28:97:6F:70:9B:8C:59:27:93:3D
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0194244544B2A1A5C31216D45D6E880CA95E
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/aqxiXCKg8wILOiiXb3CbjFknkz0.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209492
IP address blocks: 46.34.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:44:b2:a1:a5:c3:12:16:d4:5d:6e:88:0c:a9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aac625c22a0f3020b3a28976f709b8c5927933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:e0:7a:5b:bc:dd:54:31:08:8d:24:00:90:
92:07:91:90:04:2e:24:f1:ad:2e:20:e4:79:f1:5c:
5c:eb:fd:4d:4e:0e:af:95:e0:aa:78:6d:64:38:aa:
75:e9:7e:9d:43:68:70:5a:41:f7:30:95:39:63:1d:
6c:3c:32:c0:32:b9:e2:ea:37:6e:a9:9a:1a:af:62:
ad:40:ba:cc:21:b6:79:a1:dc:f2:bf:12:ad:5d:59:
83:7a:2a:2f:6e:fc:49:d1:d0:e8:2a:e0:c0:4e:30:
33:3f:22:ba:11:05:16:42:bd:c4:9b:0f:2c:61:ba:
b1:87:75:97:d0:4e:c0:4e:eb:da:72:bd:a8:6c:72:
53:11:09:0f:b6:fd:ab:60:1e:95:51:f4:ab:0c:d5:
e1:6e:c0:d4:9c:dd:d2:d3:45:63:7b:6c:6d:91:e2:
36:e4:cd:f2:9d:1a:c7:f8:cb:03:a7:ef:68:49:8b:
25:04:eb:b2:b1:d5:32:de:1d:c3:77:13:41:a2:2e:
08:7e:c5:25:2c:dd:13:e5:75:24:a5:ec:1f:f5:b6:
47:c8:18:53:87:11:8b:e4:61:60:43:b2:51:29:d9:
24:fa:17:0f:df:30:c9:a3:6b:32:08:5a:6d:75:ce:
01:f9:6b:f6:5c:a8:79:1c:1d:14:bc:5b:a7:ad:b5:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AC:62:5C:22:A0:F3:02:0B:3A:28:97:6F:70:9B:8C:59:27:93:3D
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/aqxiXCKg8wILOiiXb3CbjFknkz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:51:eb:ab:4d:89:4c:9e:55:25:89:26:a7:bd:47:bd:55:c0:
68:44:7d:64:57:e0:fc:a5:aa:16:2d:da:2f:ff:cb:0e:ce:7f:
f6:9f:af:3e:8e:92:39:99:46:06:ab:99:44:ca:69:90:40:c2:
c6:46:5c:8d:3b:e0:6e:b6:d8:30:46:e8:aa:26:a9:1c:32:0b:
b3:45:d2:25:b4:0e:87:71:4f:68:64:7a:e4:63:e7:a3:1a:b5:
e4:bb:0e:a0:d9:a0:af:fa:24:83:df:51:6e:3b:68:39:ad:d5:
d2:5c:fb:90:71:cd:ce:9e:b8:8f:80:80:d4:5a:2d:00:cb:ec:
d5:c7:d9:7a:e5:8f:3b:94:b4:bc:aa:9a:ec:9c:ab:a9:64:24:
f1:5b:c2:5c:e6:50:65:8d:60:63:fe:94:e3:34:ee:56:29:40:
1f:7f:f1:97:4f:6f:28:95:33:47:d1:c7:18:13:b0:b6:6c:ea:
93:d2:6b:c8:db:ce:28:00:71:9b:bc:eb:e7:83:2b:a2:85:7b:
dd:a6:24:08:f6:a8:a0:10:8b:59:91:6e:a9:61:dd:86:80:ce:
13:52:bb:3d:42:09:35:26:60:fb:b9:0d:b9:d2:85:58:ab:76:
b4:59:52:b6:42:2b:ee:7d:57:8d:53:6d:7a:85:65:7d:07:76:
d1:2d:e9:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRUSyoaXDEhbUXW6IDKleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjUwMTAxMjM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWFjNjI1YzIyYTBmMzAyMGIzYTI4OTc2ZjcwOWI4YzU5Mjc5MzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Lgelu83VQxCI0kAJCSB5GQBC4k
8a0uIOR58Vxc6/1NTg6vleCqeG1kOKp16X6dQ2hwWkH3MJU5Yx1sPDLAMrni6jdu
qZoar2KtQLrMIbZ5odzyvxKtXVmDeiovbvxJ0dDoKuDATjAzPyK6EQUWQr3Emw8s
Ybqxh3WX0E7ATuvacr2obHJTEQkPtv2rYB6VUfSrDNXhbsDUnN3S00Vje2xtkeI2
5M3ynRrH+MsDp+9oSYslBOuysdUy3h3DdxNBoi4IfsUlLN0T5XUkpewf9bZHyBhT
hxGL5GFgQ7JRKdkk+hcP3zDJo2syCFptdc4B+Wv2XKh5HB0UvFunrbXkAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGqsYlwioPMCCzool29wm4xZJ5M9MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvYXF4aVhDS2c4d0lMT2lpWGIzQ2JqRmtua3owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiI2MA0G
CSqGSIb3DQEBCwUAA4IBAQBcUeurTYlMnlUliSanvUe9VcBoRH1kV+D8paoWLdov
/8sOzn/2n68+jpI5mUYGq5lEymmQQMLGRlyNO+ButtgwRuiqJqkcMguzRdIltA6H
cU9oZHrkY+ejGrXkuw6g2aCv+iSD31FuO2g5rdXSXPuQcc3OnriPgIDUWi0Ay+zV
x9l65Y87lLS8qprsnKupZCTxW8Jc5lBljWBj/pTjNO5WKUAff/GXT28olTNH0ccY
E7C2bOqT0mvI284oAHGbvOvngyuihXvdpiQI9qigEItZkW6pYd2GgM4TUrs9Qgk1
JmD7uQ250oVYq3a0WVK2QivufVeNU216hWV9B3bRLenY
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:08:38 2025 by rpki-client