Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa
File: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (raw, json)
Hash identifier: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=
Subject key identifier: 5E:ED:8A:F1:F5:BE:81:09:D8:57:B5:44:DC:84:B0:07:C3:7A:F1:FF
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 019425FC1342D87C654F61E14162DFEF6422
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 212.81.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:13:42:d8:7c:65:4f:61:e1:41:62:df:ef:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5eed8af1f5be8109d857b544dc84b007c37af1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:60:9a:12:1a:89:2a:4c:40:e2:a6:2f:aa:
8c:01:72:90:32:43:5f:e9:15:c6:0b:f3:d7:80:45:
c3:95:91:7e:e3:6a:04:d7:ab:bf:06:1a:c7:19:ac:
92:00:56:fb:d8:d7:57:81:79:e4:f1:36:94:74:a4:
51:0d:61:5f:55:70:f6:be:90:4f:54:80:cd:52:08:
d3:6c:53:0a:d4:80:cb:45:5c:c6:9b:e0:61:f5:51:
a0:e3:77:d2:f1:6a:50:75:a2:c8:65:d0:d2:37:4d:
67:c9:17:82:60:4b:63:00:ae:c4:7c:8d:eb:c0:f0:
e8:fc:06:29:60:fb:59:5d:8e:3c:ca:c7:70:e8:51:
76:7d:f7:de:40:c3:1c:87:c5:af:e8:6d:81:b8:62:
3d:4f:d4:79:76:38:e8:50:a1:51:b1:5f:a4:24:e7:
0f:4d:b1:f2:4b:55:b1:5f:e7:77:a2:6c:25:f9:6f:
ac:22:9b:84:e9:89:4a:da:e8:b4:96:9e:f5:35:9d:
87:8f:56:97:2d:fd:46:79:16:59:3d:85:78:ef:5d:
fc:5f:aa:06:67:95:08:b5:b5:dd:07:6a:b3:cb:8d:
22:ae:9c:35:cf:f3:d4:0e:9f:c3:88:00:72:eb:d3:
f6:ee:50:b9:91:9f:de:de:eb:1a:45:28:6d:a7:09:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:ED:8A:F1:F5:BE:81:09:D8:57:B5:44:DC:84:B0:07:C3:7A:F1:FF
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.40.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f1:4d:fe:28:d6:55:99:aa:ab:e7:38:ed:26:08:7b:8b:d1:
86:c9:a4:08:25:0e:f7:b3:51:02:71:d0:66:fd:61:c7:a1:39:
1b:fc:58:be:ce:e3:75:30:0b:44:93:84:8e:25:e8:16:64:1b:
92:bb:f6:18:df:e3:97:e0:51:56:65:c9:5c:19:55:af:de:a7:
b2:49:98:00:41:93:a5:c1:1b:56:1a:93:57:64:e9:87:03:ad:
b8:27:90:ee:04:ec:6a:51:0f:d4:c3:2d:c0:3e:93:c0:6e:20:
ab:79:93:ea:54:ef:3a:ca:0e:1a:1c:b6:54:2d:d0:26:e9:d2:
15:9a:ef:c9:c8:23:af:56:45:aa:f1:5e:12:11:03:a2:45:d9:
8e:ff:b4:d9:18:36:02:77:0c:53:36:3f:d2:ca:79:de:33:50:
89:54:73:34:33:5e:8d:a2:0f:4f:93:c9:37:7a:22:70:dd:77:
ea:96:36:33:9f:7b:8d:0e:da:40:e4:98:0c:30:cb:b4:e3:76:
4b:08:64:61:e8:7b:32:f0:43:6e:a3:cb:7e:28:44:28:73:76:
09:26:22:16:ac:5d:04:70:ae:5b:4d:34:3b:96:96:b1:0e:da:
ec:d8:d0:04:86:9a:87:90:ce:ec:1f:5b:0e:e4:d7:db:c0:91:
34:22:68:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/BNC2HxlT2HhQWLf72QiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx
ODQxMmMwHhcNMjUwMTAyMDc0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWVkOGFmMWY1YmU4MTA5ZDg1N2I1NDRkYzg0YjAwN2MzN2FmMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7xgmhIaiSpMQOKmL6qMAXKQMkNf
6RXGC/PXgEXDlZF+42oE16u/BhrHGaySAFb72NdXgXnk8TaUdKRRDWFfVXD2vpBP
VIDNUgjTbFMK1IDLRVzGm+Bh9VGg43fS8WpQdaLIZdDSN01nyReCYEtjAK7EfI3r
wPDo/AYpYPtZXY48ysdw6FF2fffeQMMch8Wv6G2BuGI9T9R5djjoUKFRsV+kJOcP
TbHyS1WxX+d3omwl+W+sIpuE6YlK2ui0lp71NZ2Hj1aXLf1GeRZZPYV47138X6oG
Z5UItbXdB2qzy40irpw1z/PUDp/DiABy69P27lC5kZ/e3usaRShtpwlU/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF7tivH1voEJ2Fe1RNyEsAfDevH/MB8GA1UdIwQY
MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt
MjVjYzlkNmNmYmI5LzEvWHUySzhmVy1nUW5ZVjdWRTNJU3dCOE42OGY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5
LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FEoMA0G
CSqGSIb3DQEBCwUAA4IBAQCA8U3+KNZVmaqr5zjtJgh7i9GGyaQIJQ73s1ECcdBm
/WHHoTkb/Fi+zuN1MAtEk4SOJegWZBuSu/YY3+OX4FFWZclcGVWv3qeySZgAQZOl
wRtWGpNXZOmHA624J5DuBOxqUQ/Uwy3APpPAbiCreZPqVO86yg4aHLZULdAm6dIV
mu/JyCOvVkWq8V4SEQOiRdmO/7TZGDYCdwxTNj/SynneM1CJVHM0M16Nog9Pk8k3
eiJw3XfqljYzn3uNDtpA5JgMMMu043ZLCGRh6Hsy8ENuo8t+KEQoc3YJJiIWrF0E
cK5bTTQ7lpaxDtrs2NAEhpqHkM7sH1sO5NfbwJE0Imgc
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:08:11 2025 by rpki-client