Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa
File: rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa (raw, json)
Hash identifier: QjSWjj4aefyvZCJhLyJvR8Q0WlYlBt3/cpGQEFpRsyU=
Subject key identifier: AD:74:D7:9B:9C:60:E0:C9:8C:12:8E:47:81:E0:CB:89:53:24:80:E0
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019422FC4B751E5AB7662947BFC23F502FCC
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211487
IP address blocks: 185.15.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4b:75:1e:5a:b7:66:29:47:bf:c2:3f:50:2f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad74d79b9c60e0c98c128e4781e0cb89532480e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:46:db:87:ed:13:91:b3:cc:c4:4e:0b:43:90:
4f:31:8c:00:0a:bb:23:ae:23:d4:90:26:8b:7b:4d:
ba:e7:39:72:86:42:f8:51:f0:78:d5:77:21:d6:bb:
e1:20:36:9a:b0:a5:e3:c7:0c:64:0f:8e:ea:88:a5:
43:60:2c:41:f7:94:d7:af:52:72:55:3a:f0:86:0e:
8d:59:50:04:70:f0:94:c3:a9:e2:f7:3c:1e:30:8c:
f0:98:f3:a3:19:55:4c:56:04:7c:86:9a:25:aa:99:
d1:29:3a:7d:ee:b9:06:70:39:6a:56:21:de:45:62:
5a:b2:94:5d:ed:0d:c2:48:19:f4:d3:34:b6:8c:d6:
18:25:86:88:c8:dd:81:e8:31:c4:b3:5b:7f:ab:95:
38:5b:ea:28:19:54:79:42:4c:27:3f:ce:f7:9a:d8:
48:ba:01:0d:de:b9:c2:26:b5:3e:67:76:d0:9c:99:
57:9f:78:c1:93:3f:b9:1a:85:78:52:4f:5e:62:8b:
31:70:2b:16:ae:15:89:7a:10:ca:bf:68:7c:35:ce:
3a:71:2b:0d:73:b0:58:9b:e9:7e:ec:5e:e7:88:aa:
8c:85:51:d7:9e:f7:6a:9d:d6:56:01:92:54:ca:5a:
2d:18:76:55:12:91:0b:06:8e:93:36:5c:76:ca:1f:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:D7:9B:9C:60:E0:C9:8C:12:8E:47:81:E0:CB:89:53:24:80:E0
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/rXTXm5xg4MmMEo5HgeDLiVMkgOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:00:a2:b9:0f:8f:98:0f:6b:e5:e3:b6:d9:5d:09:d9:02:e6:
df:92:b7:d5:a3:45:8a:c8:f2:e7:e0:51:53:17:58:12:91:97:
94:6d:fa:21:29:4f:0f:26:b1:37:30:bf:0e:2c:df:e4:3a:27:
e7:38:2e:a5:81:a2:da:2f:b9:27:23:4c:0b:e4:b5:d0:9c:b0:
1f:6b:6e:0f:ad:13:56:80:23:5c:55:67:10:09:d1:98:84:99:
97:7b:f2:8d:ca:e2:de:d7:83:dd:99:99:61:dc:f6:1e:7d:86:
8d:e4:14:04:13:7a:8d:1a:58:0b:4a:1e:88:29:2c:91:48:ad:
b5:80:ff:09:a8:da:7d:59:a8:dc:2b:5b:0e:83:16:c8:80:7f:
b3:cc:e2:71:cf:ba:ec:f5:9a:c0:49:3c:b2:0d:ae:a0:c1:19:
35:90:d7:08:39:d5:3f:e4:59:27:0d:19:b8:88:23:a1:4d:23:
33:cd:ae:bb:96:72:d7:61:4a:55:92:e4:6c:56:18:d5:cf:a4:
b3:72:3e:c7:3c:fb:dd:00:c6:22:82:35:33:6c:30:9e:ad:10:
1d:97:1c:b1:9a:57:54:3b:13:2e:d2:7f:13:f9:5d:1d:a7:12:
30:95:ab:85:a1:b5:38:19:d8:f4:5c:36:0b:4f:d8:f6:f5:2b:
68:39:c2:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/Et1Hlq3ZilHv8I/UC/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTAxMDM1ZDUzMzc3YzVhNzJiZWRjYTUyMmZjMTQ1NmUw
Yjg0MTkwHhcNMjUwMTAxMTc0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDc0ZDc5YjljNjBlMGM5OGMxMjhlNDc4MWUwY2I4OTUzMjQ4MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEbbh+0TkbPMxE4LQ5BPMYwACrsj
riPUkCaLe0265zlyhkL4UfB41Xch1rvhIDaasKXjxwxkD47qiKVDYCxB95TXr1Jy
VTrwhg6NWVAEcPCUw6ni9zweMIzwmPOjGVVMVgR8hpolqpnRKTp97rkGcDlqViHe
RWJaspRd7Q3CSBn00zS2jNYYJYaIyN2B6DHEs1t/q5U4W+ooGVR5QkwnP873mthI
ugEN3rnCJrU+Z3bQnJlXn3jBkz+5GoV4Uk9eYosxcCsWrhWJehDKv2h8Nc46cSsN
c7BYm+l+7F7niKqMhVHXnvdqndZWAZJUylotGHZVEpELBo6TNlx2yh8KJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1015ucYODJjBKOR4Hgy4lTJIDgMB8GA1UdIwQY
MBaAFHkQEDXVM3fFpyvtylIvwUVuC4QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvclhUWG01eGc0TW1NRW81SGdlRExpVk1rZ09BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvZVJBUU5kVXpkOFduSy0zS1VpX0JSVzRMaEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ+cMA0G
CSqGSIb3DQEBCwUAA4IBAQAcAKK5D4+YD2vl47bZXQnZAubfkrfVo0WKyPLn4FFT
F1gSkZeUbfohKU8PJrE3ML8OLN/kOifnOC6lgaLaL7knI0wL5LXQnLAfa24PrRNW
gCNcVWcQCdGYhJmXe/KNyuLe14PdmZlh3PYefYaN5BQEE3qNGlgLSh6IKSyRSK21
gP8JqNp9WajcK1sOgxbIgH+zzOJxz7rs9ZrASTyyDa6gwRk1kNcIOdU/5FknDRm4
iCOhTSMzza67lnLXYUpVkuRsVhjVz6Szcj7HPPvdAMYigjUzbDCerRAdlxyxmldU
OxMu0n8T+V0dpxIwlauFobU4Gdj0XDYLT9j29StoOcIa
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:17 2025 by rpki-client