Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xZVOAyL775Qzj55wnSDSNO2P908.roa
File: xZVOAyL775Qzj55wnSDSNO2P908.roa (raw, json)
Hash identifier: tBZgDimuQzefEDv90knX4m+kR3YFpLyb41RdW8yjLbs=
Subject key identifier: C5:95:4E:03:22:FB:EF:94:33:8F:9E:70:9D:20:D2:34:ED:8F:F7:4F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D858C461F674429AACC1C456E7510A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xZVOAyL775Qzj55wnSDSNO2P908.roa
Signing time: Thu 02 Jan 2025 11:48:20 +0000
ROA not before: Thu 02 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206275
IP address blocks: 46.37.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:58:c4:61:f6:74:42:9a:ac:c1:c4:56:e7:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5954e0322fbef94338f9e709d20d234ed8ff74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:00:11:98:2d:22:a5:6d:d9:85:65:3a:9c:
ae:f8:84:6e:16:94:b3:75:1e:cf:45:76:5c:38:cc:
7c:10:94:8b:0d:11:04:f7:47:df:a1:84:d3:b7:7f:
70:d1:2b:02:0b:c4:47:be:a4:cb:02:cd:57:24:65:
93:61:de:74:a7:f7:4a:f4:bf:c7:83:b4:f7:16:4c:
26:71:14:e4:49:8f:82:62:d7:c3:83:05:71:d4:82:
9a:99:36:fd:9a:36:8e:a7:45:8c:83:d6:8d:3f:21:
d6:95:7a:77:1c:31:27:7d:39:f8:ac:01:87:d1:46:
c7:a7:20:29:b7:aa:59:ae:62:1e:ff:a3:9d:9e:cb:
f2:03:cf:84:48:ef:2c:84:ac:ef:a9:a1:2a:b6:e6:
34:7d:ae:f6:14:eb:33:cf:7b:11:9e:9b:01:d5:0c:
05:b2:0e:8e:95:ec:3b:a3:27:d4:be:63:7e:e3:6a:
b4:83:79:76:e7:98:6e:12:7c:8b:78:a1:ec:76:fe:
9e:bf:c9:59:d2:74:6b:ff:be:07:9b:9a:26:78:92:
5a:df:a8:6e:7d:ca:cb:3c:35:c7:31:2b:da:4a:17:
e0:6b:47:04:d1:8a:a0:ad:07:00:aa:92:8e:07:e0:
6f:aa:ec:7d:a1:1c:87:88:ac:17:a2:1d:8f:ca:30:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:95:4E:03:22:FB:EF:94:33:8F:9E:70:9D:20:D2:34:ED:8F:F7:4F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/xZVOAyL775Qzj55wnSDSNO2P908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0e:34:93:f4:07:c5:ac:58:54:b8:87:d9:0e:b7:d6:f7:be:
0f:6a:32:3c:ae:13:9c:69:7a:aa:3a:93:8c:0a:bc:a5:34:00:
ef:03:18:58:da:03:1d:f2:17:3a:bd:a3:60:5c:6a:12:cc:4f:
5c:1d:94:2f:bc:01:6f:af:bd:83:df:bb:a2:9f:0a:e8:ea:cf:
a4:dc:d0:bb:49:ad:3e:6b:94:c7:3c:d7:ed:4f:c1:a4:25:c9:
59:9f:b9:74:a6:fc:fc:a6:df:db:88:73:13:83:54:7e:2a:e9:
5b:85:54:95:24:ae:61:0d:59:33:88:72:e7:5d:46:a4:6c:75:
0d:62:cd:c7:98:14:54:99:96:cb:45:a6:c5:8e:ab:c9:9f:26:
d7:d8:ec:ff:d3:c7:e8:e8:32:0b:04:50:7f:67:ca:5b:db:6c:
23:8b:3d:cb:ae:69:20:61:9c:1a:c2:4d:be:bb:2b:76:17:33:
51:fa:54:fe:c1:1a:18:95:b7:81:3a:a2:50:7d:cc:e1:01:2a:
2f:6c:e5:fe:55:cd:e6:ec:bc:34:7f:98:2f:be:1a:00:43:35:
80:8f:f0:30:ff:7e:cf:32:d3:68:4e:19:74:6c:69:41:33:f9:
a8:cc:16:7b:62:a2:ae:d3:c0:84:1b:53:be:ac:2a:f5:d2:a4:
f9:d6:fb:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2FjEYfZ0QpqswcRW51EKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwMTAyMTE0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTk1NGUwMzIyZmJlZjk0MzM4ZjllNzA5ZDIwZDIzNGVkOGZmNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XsAEZgtIqVt2YVlOpyu+IRuFpSz
dR7PRXZcOMx8EJSLDREE90ffoYTTt39w0SsCC8RHvqTLAs1XJGWTYd50p/dK9L/H
g7T3FkwmcRTkSY+CYtfDgwVx1IKamTb9mjaOp0WMg9aNPyHWlXp3HDEnfTn4rAGH
0UbHpyApt6pZrmIe/6OdnsvyA8+ESO8shKzvqaEqtuY0fa72FOszz3sRnpsB1QwF
sg6Olew7oyfUvmN+42q0g3l255huEnyLeKHsdv6ev8lZ0nRr/74Hm5omeJJa36hu
fcrLPDXHMSvaShfga0cE0YqgrQcAqpKOB+Bvqux9oRyHiKwXoh2PyjC/2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMWVTgMi+++UM4+ecJ0g0jTtj/dPMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEveFpWT0F5TDc3NVF6ajU1d25TRFNOTzJQOTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVxMA0G
CSqGSIb3DQEBCwUAA4IBAQAuDjST9AfFrFhUuIfZDrfW974PajI8rhOcaXqqOpOM
CrylNADvAxhY2gMd8hc6vaNgXGoSzE9cHZQvvAFvr72D37uinwro6s+k3NC7Sa0+
a5THPNftT8GkJclZn7l0pvz8pt/biHMTg1R+KulbhVSVJK5hDVkziHLnXUakbHUN
Ys3HmBRUmZbLRabFjqvJnybX2Oz/08fo6DILBFB/Z8pb22wjiz3LrmkgYZwawk2+
uyt2FzNR+lT+wRoYlbeBOqJQfczhASovbOX+Vc3m7Lw0f5gvvhoAQzWAj/Aw/37P
MtNoThl0bGlBM/mozBZ7YqKu08CEG1O+rCr10qT51vsn
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:53 2025 by rpki-client