Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/XLX74-2fz_xcT8jjeK7YOxawwwc.roa
File: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (raw, json)
Hash identifier: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=
Subject key identifier: 5C:B5:FB:E3:ED:9F:CF:FC:5C:4F:C8:E3:78:AE:D8:3B:16:B0:C3:07
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 0194258F673CB0514E988B4521915879ECA3
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/XLX74-2fz_xcT8jjeK7YOxawwwc.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 162.12.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:67:3c:b0:51:4e:98:8b:45:21:91:58:79:ec:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cb5fbe3ed9fcffc5c4fc8e378aed83b16b0c307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:ed:04:76:0f:ec:1d:19:03:57:5d:93:5d:
ab:ae:45:e7:b2:e1:ac:75:40:80:a9:41:d8:90:1b:
1b:ba:3a:f2:29:17:d5:4c:9f:6b:cc:92:45:74:8d:
3d:ef:51:65:40:76:27:8c:57:d3:c9:31:39:8f:14:
3f:00:bf:fb:1c:4e:41:61:e5:5f:95:0b:d4:21:61:
35:43:f1:2c:93:db:77:df:de:bc:d7:29:91:83:9f:
2a:79:ac:fd:3d:7e:8a:7e:0d:c9:b8:fc:98:df:c2:
82:9d:d5:b8:fc:1e:ee:38:89:1b:81:71:a0:0d:46:
50:c4:cd:3b:5a:4a:ab:3f:14:41:c8:d9:ba:14:86:
46:9d:e9:7a:d2:fa:a5:d1:1d:b3:a6:17:c0:0c:44:
f0:84:00:20:45:f4:07:51:e2:8b:2d:81:23:1d:57:
de:3d:f7:a7:16:ac:74:ad:f6:d7:38:18:1d:53:1c:
db:86:52:92:6e:c4:00:d8:84:49:c8:77:97:23:38:
ba:19:57:53:8a:b4:08:bd:92:f4:cb:d8:70:30:2e:
7b:76:9f:58:a9:3c:96:bc:af:1b:b7:9e:0f:2f:ca:
74:75:21:60:77:96:ca:26:65:77:7f:58:eb:38:a4:
09:a0:59:89:16:c9:e0:72:03:b0:8f:fa:de:ff:03:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:FB:E3:ED:9F:CF:FC:5C:4F:C8:E3:78:AE:D8:3B:16:B0:C3:07
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/XLX74-2fz_xcT8jjeK7YOxawwwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.12.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b7:4d:06:c9:42:0c:0e:df:2e:fb:9e:c2:18:3c:99:e1:c5:
dd:36:2e:cd:00:8b:c5:23:77:99:14:95:e6:6f:e7:80:47:31:
de:b3:b1:e3:70:05:8e:72:a5:1d:9b:94:6d:ea:c0:a3:b8:37:
5c:37:f3:a6:ba:cd:d9:32:23:72:f4:af:36:07:98:e0:b3:90:
3c:48:db:0c:6e:26:e4:65:61:65:99:6e:9d:95:fb:22:76:39:
39:df:0d:d9:76:3e:fd:d9:f7:91:55:12:7e:cb:b7:52:03:f3:
9c:04:47:7c:e9:65:04:3d:3c:a9:09:6b:78:b6:84:00:d1:d7:
e4:71:66:71:4c:4f:1c:79:93:8f:cd:10:40:0b:85:9b:dc:00:
84:28:d6:24:15:e1:00:69:d0:16:04:b4:f2:1c:2b:42:50:b5:
0e:91:b1:64:35:72:89:29:a9:c2:7d:86:ad:35:ab:33:79:cc:
56:a2:07:53:31:c6:e9:36:0c:27:9a:88:e8:f0:e4:04:ae:10:
b0:5a:d1:06:54:31:5b:27:5e:b6:4d:c5:25:00:fb:39:11:fe:
6e:3d:e0:23:30:3d:54:94:5d:8c:56:b4:3d:0a:bb:13:9f:25:
6a:2f:f2:a0:f6:12:40:9a:7c:b8:8e:05:43:ed:98:fc:97:e5:
04:14:8a:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj2c8sFFOmItFIZFYeeyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl
MmM0ZDcwHhcNMjUwMTAyMDU0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2I1ZmJlM2VkOWZjZmZjNWM0ZmM4ZTM3OGFlZDgzYjE2YjBjMzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTXtBHYP7B0ZA1ddk12rrkXnsuGs
dUCAqUHYkBsbujryKRfVTJ9rzJJFdI0971FlQHYnjFfTyTE5jxQ/AL/7HE5BYeVf
lQvUIWE1Q/Esk9t339681ymRg58qeaz9PX6Kfg3JuPyY38KCndW4/B7uOIkbgXGg
DUZQxM07WkqrPxRByNm6FIZGnel60vql0R2zphfADETwhAAgRfQHUeKLLYEjHVfe
PfenFqx0rfbXOBgdUxzbhlKSbsQA2IRJyHeXIzi6GVdTirQIvZL0y9hwMC57dp9Y
qTyWvK8bt54PL8p0dSFgd5bKJmV3f1jrOKQJoFmJFsngcgOwj/re/wMRmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFy1++Ptn8/8XE/I43iu2DsWsMMHMB8GA1UdIwQY
MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct
ODMxZjdlNmY1Y2NkLzEvWExYNzQtMmZ6X3hjVDhqamVLN1lPeGF3d3djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk
LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAogzMMA0G
CSqGSIb3DQEBCwUAA4IBAQAut00GyUIMDt8u+57CGDyZ4cXdNi7NAIvFI3eZFJXm
b+eARzHes7HjcAWOcqUdm5Rt6sCjuDdcN/Omus3ZMiNy9K82B5jgs5A8SNsMbibk
ZWFlmW6dlfsidjk53w3Zdj792feRVRJ+y7dSA/OcBEd86WUEPTypCWt4toQA0dfk
cWZxTE8ceZOPzRBAC4Wb3ACEKNYkFeEAadAWBLTyHCtCULUOkbFkNXKJKanCfYat
NaszecxWogdTMcbpNgwnmojo8OQErhCwWtEGVDFbJ162TcUlAPs5Ef5uPeAjMD1U
lF2MVrQ9CrsTnyVqL/Kg9hJAmny4jgVD7Zj8l+UEFIpk
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:05 2025 by rpki-client