Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/x3I4XFLPkKB0I5raydIIJRGLjyU.roa
File: x3I4XFLPkKB0I5raydIIJRGLjyU.roa (raw, json)
Hash identifier: D4KBC4PnKVMhAPMumEie+uljGtb5tJcwU0lNDesvPH4=
Subject key identifier: C7:72:38:5C:52:CF:90:A0:74:23:9A:DA:C9:D2:08:25:11:8B:8F:25
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B22345BA98463F0FC438C47C38A53C
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/x3I4XFLPkKB0I5raydIIJRGLjyU.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8522
IP address blocks: 2001:648:2c30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:23:45:ba:98:46:3f:0f:c4:38:c4:7c:38:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c772385c52cf90a074239adac9d20825118b8f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:7f:39:dc:ab:db:49:44:3f:40:1c:1d:0a:
0a:57:5a:5c:51:cf:26:9d:7a:c6:83:e9:5e:67:56:
5a:b4:3d:15:62:42:45:e4:b0:0b:13:14:76:cc:38:
33:72:69:63:ed:3b:04:f1:39:cc:20:56:11:c6:de:
2c:cd:ee:c1:2b:cc:c6:2a:45:4a:0e:82:fc:35:20:
9b:23:a8:70:58:b9:4d:88:5f:a3:91:d5:62:26:59:
26:10:df:b3:2a:02:a7:20:ac:1c:d5:ff:63:ac:9d:
ba:20:25:19:9f:a1:64:1b:9f:60:6c:dc:92:75:76:
e8:8a:0a:ce:a2:11:a4:98:3c:57:50:03:93:d8:ff:
bc:42:d5:94:5b:fa:8d:89:08:c6:35:59:c6:eb:14:
3a:92:f2:58:31:0a:a2:8e:e5:20:d6:52:45:0b:a2:
74:bf:f1:6c:27:9c:0f:88:79:99:f1:da:ea:d1:d1:
ae:0f:a2:eb:1d:90:dd:39:df:76:7d:c9:aa:c2:93:
e8:5c:6d:e8:5a:4e:69:8f:86:d9:f4:a2:cd:bd:6a:
63:f0:24:01:a1:23:b3:42:9b:2a:42:22:b1:66:50:
c0:ae:ce:b6:50:f7:ac:df:1b:78:3f:ce:c4:15:fc:
8c:ad:47:68:cd:e0:a7:e9:1c:bb:a6:9a:d4:29:20:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:38:5C:52:CF:90:A0:74:23:9A:DA:C9:D2:08:25:11:8B:8F:25
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/x3I4XFLPkKB0I5raydIIJRGLjyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:2c30::/48
Signature Algorithm: sha256WithRSAEncryption
06:6d:15:03:43:83:50:9c:3a:af:ac:a5:82:77:79:2d:2d:d7:
04:c5:8f:c3:bb:e4:18:be:be:cb:6f:25:59:a1:e3:55:b6:c9:
fe:52:7c:cb:df:7e:c7:24:dd:ab:23:14:65:85:8f:52:7d:67:
55:9a:43:aa:14:bd:fa:41:c5:e8:91:2f:5d:2f:4f:87:81:4d:
6c:10:f1:dc:39:de:a6:3e:32:7e:05:d1:fa:9a:21:0d:2d:6f:
3b:ec:5d:c1:a8:a6:09:6e:52:d7:82:4f:13:a2:12:4e:f4:4e:
d0:41:ee:c0:d3:26:cf:2a:ae:e3:42:89:3f:de:d3:a1:0f:46:
f6:76:06:28:09:78:82:c6:1b:f7:4c:64:75:48:5c:a3:55:54:
a0:82:15:5c:a5:bd:33:9f:a4:d1:f6:28:3e:2a:80:f2:28:c1:
76:5b:19:46:36:dc:88:4e:fe:38:5a:42:20:ea:1b:11:90:e0:
71:ea:b4:de:cc:fa:c7:9f:ee:6e:72:cd:ff:49:fe:e9:0b:b9:
a9:2b:04:eb:e7:fb:55:c4:99:18:10:d9:69:1e:c4:30:ce:59:
71:cd:ac:11:24:f1:6f:fc:d9:b7:38:39:a7:61:bc:b4:4a:e6:
61:25:06:2b:19:65:a2:75:c3:54:ee:99:70:c2:b0:83:26:c1:
6c:58:c4:b6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQhsiNFuphGPw/EOMR8OKU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjUwMTAxMTE0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzcyMzg1YzUyY2Y5MGEwNzQyMzlhZGFjOWQyMDgyNTExOGI4ZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiV/Odyr20lEP0AcHQoKV1pcUc8m
nXrGg+leZ1ZatD0VYkJF5LALExR2zDgzcmlj7TsE8TnMIFYRxt4sze7BK8zGKkVK
DoL8NSCbI6hwWLlNiF+jkdViJlkmEN+zKgKnIKwc1f9jrJ26ICUZn6FkG59gbNyS
dXboigrOohGkmDxXUAOT2P+8QtWUW/qNiQjGNVnG6xQ6kvJYMQqijuUg1lJFC6J0
v/FsJ5wPiHmZ8drq0dGuD6LrHZDdOd92fcmqwpPoXG3oWk5pj4bZ9KLNvWpj8CQB
oSOzQpsqQiKxZlDArs62UPes3xt4P87EFfyMrUdozeCn6Ry7pprUKSBmdwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMdyOFxSz5CgdCOa2snSCCURi48lMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEveDNJNFhGTFBrS0IwSTVyYXlkSUlKUkdManlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGSCww
MA0GCSqGSIb3DQEBCwUAA4IBAQAGbRUDQ4NQnDqvrKWCd3ktLdcExY/Du+QYvr7L
byVZoeNVtsn+UnzL337HJN2rIxRlhY9SfWdVmkOqFL36QcXokS9dL0+HgU1sEPHc
Od6mPjJ+BdH6miENLW877F3BqKYJblLXgk8TohJO9E7QQe7A0ybPKq7jQok/3tOh
D0b2dgYoCXiCxhv3TGR1SFyjVVSgghVcpb0zn6TR9ig+KoDyKMF2WxlGNtyITv44
WkIg6hsRkOBx6rTezPrHn+5ucs3/Sf7pC7mpKwTr5/tVxJkYENlpHsQwzllxzawR
JPFv/Nm3ODmnYby0SuZhJQYrGWWidcNU7plwwrCDJsFsWMS2
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:04:12 2025 by rpki-client