Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa
File: FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa (raw, json)
Hash identifier: xxP3anqPTVsDNIot0W1weEkTT3WAnTHsLSQ+pzdPwvs=
Subject key identifier: 15:30:76:47:23:F0:7E:30:FF:70:0D:B0:BC:0F:99:07:5E:33:6F:52
Certificate issuer: /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial: 0194228D4D996B2A8A74CB8F492EFD744451
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa
Signing time: Wed 01 Jan 2025 15:47:53 +0000
ROA not before: Wed 01 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198691
IP address blocks: 109.245.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:4d:99:6b:2a:8a:74:cb:8f:49:2e:fd:74:44:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Validity
Not Before: Jan 1 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1530764723f07e30ff700db0bc0f99075e336f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:ab:e5:3f:6f:b5:2f:67:c8:07:d3:e4:fe:
68:1c:0e:91:37:0d:90:08:bf:fd:cf:8a:1f:75:27:
c7:60:cc:17:dd:8f:4d:81:ca:b1:2e:db:6e:6b:be:
a4:12:53:62:41:c9:5b:af:18:e4:dd:d4:39:e9:f7:
19:86:8d:e1:cc:44:eb:52:05:7c:8a:73:18:1f:e8:
e0:d6:d0:15:68:cf:e5:52:53:d2:62:54:ef:41:52:
0c:b5:6b:56:e6:a7:60:c5:71:26:65:79:a4:dd:b6:
9b:f3:65:54:d4:ca:c5:4a:c0:95:6c:8f:20:46:59:
a4:d9:b4:e4:d2:44:b0:25:54:b6:b6:c9:bb:42:17:
20:65:3b:96:83:c0:0a:22:b0:f5:92:64:cd:fe:39:
a1:a9:fd:40:04:57:1e:bf:ed:fe:67:ae:09:65:f5:
cc:4c:49:8b:8e:a2:75:7d:22:72:0a:04:dd:58:8a:
e6:f8:15:ce:15:50:df:63:6f:e7:73:98:ee:f0:7a:
93:ff:47:85:93:7b:c9:80:08:9b:da:1e:3c:a1:a5:
74:7a:eb:a3:5d:13:fe:32:1c:b1:09:30:85:f8:35:
16:92:b4:8d:d1:a3:83:bf:09:f3:89:5d:77:b3:2d:
64:2e:80:0e:ea:54:f6:97:21:f7:a3:5c:d0:80:0b:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:30:76:47:23:F0:7E:30:FF:70:0D:B0:BC:0F:99:07:5E:33:6F:52
X509v3 Authority Key Identifier:
keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.245.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c3:14:f5:84:17:aa:6d:37:f4:1b:cc:0f:da:6f:bd:9c:14:
0e:79:87:70:da:57:21:25:da:61:97:13:9f:3f:4d:d2:c1:4c:
3b:32:bd:b1:1c:a8:01:9e:89:8c:90:7d:6e:62:e8:e5:3f:ae:
d3:ed:59:cc:db:bc:ea:11:9e:83:e8:ab:3a:34:32:d0:d5:83:
db:db:8d:5c:cf:17:ca:09:34:c1:86:ca:59:0b:75:86:b2:59:
d6:11:7a:d6:45:95:07:c2:86:2b:7b:11:19:be:aa:83:c7:cf:
2c:2b:6c:39:00:e2:d1:e2:2f:5e:7f:83:a8:d8:96:d3:e2:1b:
63:8c:2e:52:46:e0:02:98:9e:c4:c8:ac:3e:61:26:31:3b:3b:
6b:cb:85:35:99:83:4f:c6:d6:93:87:02:74:d1:dd:0d:03:0a:
ca:cb:64:2e:fe:cc:24:0f:93:ea:94:f0:af:bf:b1:98:44:ec:
e5:b6:70:fc:8a:7c:0e:ec:3e:a9:71:6b:bf:2a:76:19:85:0e:
36:46:6c:85:f7:ce:11:5a:60:4f:ed:42:52:fa:14:3c:94:0f:
73:81:b9:fb:e1:75:4b:93:6c:46:cf:0d:a5:dc:55:c6:42:15:
78:50:0c:34:ce:c2:42:f7:31:a8:b8:e2:42:da:ac:9d:8b:f3:
6f:af:5a:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijU2ZayqKdMuPSS79dERRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzJmZTJjODA1ZWQ2M2FmYzljODllOTMyNGFjOTRkMzA5
MzlhYWIwHhcNMjUwMTAxMTU0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTMwNzY0NzIzZjA3ZTMwZmY3MDBkYjBiYzBmOTkwNzVlMzM2ZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP6r5T9vtS9nyAfT5P5oHA6RNw2Q
CL/9z4ofdSfHYMwX3Y9NgcqxLttua76kElNiQclbrxjk3dQ56fcZho3hzETrUgV8
inMYH+jg1tAVaM/lUlPSYlTvQVIMtWtW5qdgxXEmZXmk3bab82VU1MrFSsCVbI8g
Rlmk2bTk0kSwJVS2tsm7QhcgZTuWg8AKIrD1kmTN/jmhqf1ABFcev+3+Z64JZfXM
TEmLjqJ1fSJyCgTdWIrm+BXOFVDfY2/nc5ju8HqT/0eFk3vJgAib2h48oaV0euuj
XRP+MhyxCTCF+DUWkrSN0aODvwnziV13sy1kLoAO6lT2lyH3o1zQgAt6HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBUwdkcj8H4w/3ANsLwPmQdeM29SMB8GA1UdIwQY
MBaAFA1y/iyAXtY6/JyJ6TJKyU0wk5qrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgt
Y2Y4MThjN2M0NTFhLzEvRlRCMlJ5UHdmakRfY0Eyd3ZBLVpCMTR6YjFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMmUxZDEtOTk4NC00MTU4LThkMTgtY2Y4MThjN2M0NTFh
LzEvRFhMLUxJQmUxanI4bklucE1rckpUVENUbXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbfUfMA0G
CSqGSIb3DQEBCwUAA4IBAQA6wxT1hBeqbTf0G8wP2m+9nBQOeYdw2lchJdphlxOf
P03SwUw7Mr2xHKgBnomMkH1uYujlP67T7VnM27zqEZ6D6Ks6NDLQ1YPb241czxfK
CTTBhspZC3WGslnWEXrWRZUHwoYrexEZvqqDx88sK2w5AOLR4i9ef4Oo2JbT4htj
jC5SRuACmJ7EyKw+YSYxOztry4U1mYNPxtaThwJ00d0NAwrKy2Qu/swkD5PqlPCv
v7GYROzltnD8inwO7D6pcWu/KnYZhQ42RmyF984RWmBP7UJS+hQ8lA9zgbn74XVL
k2xGzw2l3FXGQhV4UAw0zsJC9zGouOJC2qydi/Nvr1qA
-----END CERTIFICATE-----
Generated at Sun Apr 13 10:12:29 2025 by rpki-client