Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/XDaCGcZealj-spshbO6gPk6HDcA.roa
File: XDaCGcZealj-spshbO6gPk6HDcA.roa (raw, json)
Hash identifier: nsrfqrdgPjlaid22aLgk/rpbmAlJVh+pY8pGwnfkSSY=
Subject key identifier: 5C:36:82:19:C6:5E:6A:58:FE:B2:9B:21:6C:EE:A0:3E:4E:87:0D:C0
Certificate issuer: /CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Certificate serial: 01942368EA9C8A452EAC02279609B740272D
Authority key identifier: 8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/XDaCGcZealj-spshbO6gPk6HDcA.roa
Signing time: Wed 01 Jan 2025 19:47:45 +0000
ROA not before: Wed 01 Jan 2025 19:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59824
IP address blocks: 195.170.160.0/24 maxlen: 24
2001:67c:71c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ea:9c:8a:45:2e:ac:02:27:96:09:b7:40:27:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bcab3b6dcfcbdafd763110f866a82815dea4463
Validity
Not Before: Jan 1 19:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c368219c65e6a58feb29b216ceea03e4e870dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:e8:e3:69:fd:8d:86:cd:36:61:37:8c:7a:
f6:be:69:8f:ab:79:40:f9:fd:22:90:0e:50:e8:5d:
f4:c9:66:aa:18:c5:ae:37:30:2f:c6:59:01:89:8e:
b4:e4:66:61:4f:48:e3:6d:c6:55:7d:3a:60:5b:93:
06:5e:af:bc:5b:89:85:00:7e:00:5b:f3:71:ae:8e:
81:5a:65:8c:4b:08:69:e1:68:cf:73:04:6f:4d:f3:
1c:52:fa:da:36:1b:39:79:71:49:67:00:df:22:d5:
37:00:e6:f7:5f:8a:0b:97:51:cb:bb:6d:08:dd:20:
a6:07:52:36:d3:c0:90:a5:29:60:2a:90:94:f7:06:
20:de:4b:d4:e1:cc:fd:d1:b4:a2:73:d0:de:23:13:
8a:59:ea:08:5f:cf:02:ee:16:db:14:45:c0:7c:6b:
f6:d7:eb:8c:d6:36:58:12:dd:ea:0f:fe:07:73:f1:
74:1a:dd:9a:3e:3c:4e:41:42:c3:ae:5d:25:9a:eb:
7e:c0:d6:f4:85:13:d5:ce:a3:c8:26:93:ed:51:e7:
ad:6a:dc:f2:b1:ea:9b:41:71:57:cc:2d:b9:6c:d3:
0c:dd:5c:82:d6:fb:ba:87:13:89:3c:9d:78:5a:7a:
d4:38:e8:99:8b:10:26:1f:57:60:74:5d:b5:89:98:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:82:19:C6:5E:6A:58:FE:B2:9B:21:6C:EE:A0:3E:4E:87:0D:C0
X509v3 Authority Key Identifier:
keyid:8B:CA:B3:B6:DC:FC:BD:AF:D7:63:11:0F:86:6A:82:81:5D:EA:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8qzttz8va_XYxEPhmqCgV3qRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/XDaCGcZealj-spshbO6gPk6HDcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f879a2-2881-43b1-a810-f2c892c2dc7d/1/i8qzttz8va_XYxEPhmqCgV3qRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.160.0/24
IPv6:
2001:67c:71c::/48
Signature Algorithm: sha256WithRSAEncryption
88:3f:ae:23:dc:ae:be:d0:31:45:00:13:22:cd:39:64:5b:18:
ee:15:32:64:9f:ce:df:c4:5d:39:5e:80:94:37:25:4c:38:db:
6a:75:a1:81:e2:b0:63:9a:be:c5:8e:c3:5a:d8:a3:4d:dd:f5:
d0:9e:ac:89:11:3b:50:5a:c8:a7:e0:37:a6:aa:5d:47:f1:8d:
bb:a0:b1:31:e1:24:e2:87:ac:40:e3:16:88:f0:e4:31:3a:9a:
2c:47:bc:76:48:ba:e5:d7:0a:b7:4f:28:6b:ce:2f:e8:83:59:
62:64:4c:31:cc:d2:2b:3e:1c:72:49:2f:8a:0c:72:18:9b:c0:
ec:de:61:ec:c1:94:4c:9c:36:62:7c:44:64:02:d6:ab:e0:f9:
52:bc:5b:2f:fd:18:ea:cd:e2:22:97:71:ab:9c:9b:85:36:dc:
4f:ca:14:7a:44:af:d0:11:28:52:15:52:5f:12:b6:c8:7f:5a:
dc:8b:c0:0a:0d:d0:09:2f:0e:e9:f5:eb:40:ee:37:0b:bc:a1:
88:ee:68:e8:d0:dc:6f:cd:26:7b:01:77:5b:da:65:58:57:3a:
b0:13:e5:c1:58:f5:a6:80:66:3b:9b:cf:2e:8d:b5:3e:4c:76:
a2:7c:a9:0b:18:34:41:c4:ee:1a:e4:88:8f:43:de:18:97:8b:
f0:3f:08:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQjaOqcikUurAInlgm3QCctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2FiM2I2ZGNmY2JkYWZkNzYzMTEwZjg2NmE4MjgxNWRl
YTQ0NjMwHhcNMjUwMTAxMTk0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzM2ODIxOWM2NWU2YTU4ZmViMjliMjE2Y2VlYTAzZTRlODcwZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMvo42n9jYbNNmE3jHr2vmmPq3lA
+f0ikA5Q6F30yWaqGMWuNzAvxlkBiY605GZhT0jjbcZVfTpgW5MGXq+8W4mFAH4A
W/Nxro6BWmWMSwhp4WjPcwRvTfMcUvraNhs5eXFJZwDfItU3AOb3X4oLl1HLu20I
3SCmB1I208CQpSlgKpCU9wYg3kvU4cz90bSic9DeIxOKWeoIX88C7hbbFEXAfGv2
1+uM1jZYEt3qD/4Hc/F0Gt2aPjxOQULDrl0lmut+wNb0hRPVzqPIJpPtUeetatzy
seqbQXFXzC25bNMM3VyC1vu6hxOJPJ14WnrUOOiZixAmH1dgdF21iZhcFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFw2ghnGXmpY/rKbIWzuoD5Ohw3AMB8GA1UdIwQY
MBaAFIvKs7bc/L2v12MRD4ZqgoFd6kRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAt
ZjJjODkyYzJkYzdkLzEvWERhQ0djWmVhbGotc3BzaGJPNmdQazZIRGNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mODc5YTItMjg4MS00M2IxLWE4MTAtZjJjODkyYzJkYzdk
LzEvaThxenR0ejh2YV9YWXhFUGhtcUNnVjNxUkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw6qgMA8E
AgACMAkDBwAgAQZ8BxwwDQYJKoZIhvcNAQELBQADggEBAIg/riPcrr7QMUUAEyLN
OWRbGO4VMmSfzt/EXTlegJQ3JUw422p1oYHisGOavsWOw1rYo03d9dCerIkRO1Ba
yKfgN6aqXUfxjbugsTHhJOKHrEDjFojw5DE6mixHvHZIuuXXCrdPKGvOL+iDWWJk
TDHM0is+HHJJL4oMchibwOzeYezBlEycNmJ8RGQC1qvg+VK8Wy/9GOrN4iKXcauc
m4U23E/KFHpEr9ARKFIVUl8Stsh/WtyLwAoN0AkvDun160DuNwu8oYjuaOjQ3G/N
JnsBd1vaZVhXOrAT5cFY9aaAZjubzy6NtT5MdqJ8qQsYNEHE7hrkiI9D3hiXi/A/
CFw=
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:38 2025 by rpki-client