Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Xa29r_CsUUcUzEz0BNLTpiSiPBY.roa
File: Xa29r_CsUUcUzEz0BNLTpiSiPBY.roa (raw, json)
Hash identifier: 53O4SVjNPzjqjz8qQLc5DlGX0iO3fhbcYi4JddJ19BE=
Subject key identifier: 5D:AD:BD:AF:F0:AC:51:47:14:CC:4C:F4:04:D2:D3:A6:24:A2:3C:16
Certificate issuer: /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial: 01942068646FCEDFD700C70A78C6B15433B1
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Xa29r_CsUUcUzEz0BNLTpiSiPBY.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33806
IP address blocks: 109.197.38.0/24 maxlen: 24
195.200.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:64:6f:ce:df:d7:00:c7:0a:78:c6:b1:54:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dadbdaff0ac514714cc4cf404d2d3a624a23c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:dc:13:f2:34:a3:d8:9a:10:f5:1f:8a:8c:
d3:8c:b8:c7:15:64:8e:4e:ed:bf:88:b6:08:e3:47:
5b:14:e7:be:38:7f:15:5c:cd:1a:43:f8:0b:dd:88:
da:62:ed:a3:30:31:69:23:b2:17:b3:87:38:20:02:
90:ec:21:f5:01:da:4f:42:a1:96:9b:47:d8:5e:56:
33:60:5a:5c:f0:d5:d5:01:a9:9b:7b:a9:b0:e7:2a:
b8:76:48:d5:6d:3b:5f:3b:22:fb:92:a0:42:5e:eb:
39:96:65:8d:67:d8:2c:da:4f:75:f9:f8:73:84:c8:
ba:37:d4:42:c9:b4:ae:9c:92:c5:7f:ff:27:74:ee:
54:3c:cc:d0:59:e4:6e:6a:51:18:75:7d:60:9c:01:
63:e0:cf:e3:5c:9b:cb:73:6b:9d:ed:2c:d2:57:dd:
54:ad:8e:01:5b:c1:07:7c:fd:60:fd:7a:a8:78:ce:
93:33:c0:d7:47:41:cc:d0:dd:68:82:4a:df:29:f3:
d1:57:f2:0c:a0:f9:86:7a:d7:e7:70:b6:ce:a2:e8:
ea:04:d4:c5:52:2a:55:e0:5b:70:1e:5e:7d:50:22:
b9:e8:af:a0:45:51:4e:4f:76:fa:3d:43:dc:14:eb:
ec:da:16:d8:14:0c:0d:e0:ff:b4:2a:50:f6:21:d6:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AD:BD:AF:F0:AC:51:47:14:CC:4C:F4:04:D2:D3:A6:24:A2:3C:16
X509v3 Authority Key Identifier:
keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Xa29r_CsUUcUzEz0BNLTpiSiPBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.38.0/24
195.200.206.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1b:fc:08:0f:d4:4b:c4:a8:8f:4d:1e:07:95:4d:2d:4c:74:
7f:4d:ee:4d:b8:0e:16:13:a4:7e:6a:61:98:c2:01:c4:53:9f:
db:b5:8c:f4:ac:16:84:f7:09:25:4b:86:eb:75:75:b7:87:9f:
77:32:82:a5:cf:9a:4a:15:14:2a:39:58:64:52:df:7f:d8:22:
04:f3:7e:8f:6a:ab:48:47:4a:fa:b8:44:6e:f9:e3:16:c9:2a:
1d:8e:a3:2b:f6:a8:2a:74:b5:85:1c:b8:48:08:08:11:9c:ae:
a3:90:96:75:48:b6:2f:12:3f:eb:23:37:80:d9:34:4e:54:77:
42:17:ec:00:cc:28:e7:29:72:88:4d:d2:0d:5b:a3:6d:02:00:
1c:8b:eb:28:ac:c6:19:9a:e4:03:cf:80:45:6d:c2:96:65:9d:
2b:8b:c5:ac:b1:56:da:6a:b1:1a:d6:d0:17:4f:dc:f5:59:49:
0c:c7:e2:34:08:91:44:be:48:7c:5b:42:66:dc:a5:a9:3b:f9:
0b:9b:9d:5a:00:74:98:fc:9d:84:43:51:ab:13:0e:18:2e:ee:
27:50:e6:4c:1a:70:99:69:d0:1f:34:27:0f:77:d2:cb:9f:53:
4d:bd:b8:d6:2a:e3:f5:63:e7:53:34:35:e7:37:ef:d0:cb:53:
92:b5:e1:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgaGRvzt/XAMcKeMaxVDOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYmZiNDYzNTNiZmNjY2ZmOTQxMmRjYmRkNDgwZjE5YjRj
OTgzOTcwHhcNMjUwMTAxMDU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGFkYmRhZmYwYWM1MTQ3MTRjYzRjZjQwNGQyZDNhNjI0YTIzYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5HcE/I0o9iaEPUfiozTjLjHFWSO
Tu2/iLYI40dbFOe+OH8VXM0aQ/gL3YjaYu2jMDFpI7IXs4c4IAKQ7CH1AdpPQqGW
m0fYXlYzYFpc8NXVAambe6mw5yq4dkjVbTtfOyL7kqBCXus5lmWNZ9gs2k91+fhz
hMi6N9RCybSunJLFf/8ndO5UPMzQWeRualEYdX1gnAFj4M/jXJvLc2ud7SzSV91U
rY4BW8EHfP1g/XqoeM6TM8DXR0HM0N1ogkrfKfPRV/IMoPmGetfncLbOoujqBNTF
UipV4FtwHl59UCK56K+gRVFOT3b6PUPcFOvs2hbYFAwN4P+0KlD2IdZLWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF2tva/wrFFHFMxM9ATS06YkojwWMB8GA1UdIwQY
MBaAFFG/tGNTv8zP+UEty91IDxm0yYOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgt
YzFlOTc0YmVkMTJlLzEvWGEyOXJfQ3NVVWNVekV6MEJOTFRwaVNpUEJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kOTI1NTctOGM0Ni00ODJjLTkxYTgtYzFlOTc0YmVkMTJl
LzEvVWItMFkxT196TV81UVMzTDNVZ1BHYlRKZzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbcUmAwQA
w8jOMA0GCSqGSIb3DQEBCwUAA4IBAQBYG/wID9RLxKiPTR4HlU0tTHR/Te5NuA4W
E6R+amGYwgHEU5/btYz0rBaE9wklS4brdXW3h593MoKlz5pKFRQqOVhkUt9/2CIE
836PaqtIR0r6uERu+eMWySodjqMr9qgqdLWFHLhICAgRnK6jkJZ1SLYvEj/rIzeA
2TROVHdCF+wAzCjnKXKITdINW6NtAgAci+sorMYZmuQDz4BFbcKWZZ0ri8WssVba
arEa1tAXT9z1WUkMx+I0CJFEvkh8W0Jm3KWpO/kLm51aAHSY/J2EQ1GrEw4YLu4n
UOZMGnCZadAfNCcPd9LLn1NNvbjWKuP1Y+dTNDXnN+/Qy1OSteHV
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:50:33 2025 by rpki-client