Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/xB07yBxLIVjEr3l9T5DCYKEGVwk.roa
File: xB07yBxLIVjEr3l9T5DCYKEGVwk.roa (raw, json)
Hash identifier: V6PyaH4lTb43MUnPu1xSJUPUjxYn747jXT7PmX0TsM0=
Subject key identifier: C4:1D:3B:C8:1C:4B:21:58:C4:AF:79:7D:4F:90:C2:60:A1:06:57:09
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8842AB4B4351668D5E09A5DE6668
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/xB07yBxLIVjEr3l9T5DCYKEGVwk.roa
Signing time: Thu 02 Jan 2025 09:50:34 +0000
ROA not before: Thu 02 Jan 2025 09:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204496
IP address blocks: 178.34.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:88:42:ab:4b:43:51:66:8d:5e:09:a5:de:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c41d3bc81c4b2158c4af797d4f90c260a1065709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:a1:79:39:15:f7:de:40:2e:ed:2d:8d:eb:
f5:c0:90:22:f1:35:10:d1:67:a2:ca:02:9c:b8:c1:
18:65:4c:3e:04:38:94:bb:c8:6b:6c:c8:a9:e0:6d:
24:11:7d:d7:39:da:29:c7:58:26:e7:ae:cc:12:2c:
e3:67:8d:64:ff:da:62:0c:ba:da:84:f1:b3:52:6d:
25:5d:d0:cf:66:2d:be:a1:ce:eb:8d:38:b1:d8:93:
ca:f5:2c:cd:78:73:76:91:7a:d2:ea:ed:83:f4:37:
0c:ad:d5:eb:55:81:fb:07:89:0a:d3:0d:12:9d:e3:
54:48:62:5d:74:31:b6:33:dd:f1:57:18:78:9a:b5:
17:67:0b:5f:6c:2f:29:3c:ad:4d:c5:b3:6b:fc:59:
62:e4:80:13:ba:97:a8:37:88:cf:e9:93:9d:93:0f:
45:fa:c5:de:77:0e:4d:11:10:ce:22:6f:38:fa:d3:
2f:e1:e0:46:39:f9:bf:e1:01:af:47:9c:cc:5c:b4:
6a:b2:6f:f8:73:1f:b2:50:d7:19:b9:86:b7:a5:14:
ef:e5:71:89:1f:d6:c6:20:a4:b8:4d:9e:39:1e:45:
25:28:ba:12:f6:68:cd:6c:b7:30:57:1e:0b:3d:fe:
e2:db:0f:16:8c:e9:ad:3a:64:16:7b:c4:87:6d:3f:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1D:3B:C8:1C:4B:21:58:C4:AF:79:7D:4F:90:C2:60:A1:06:57:09
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/xB07yBxLIVjEr3l9T5DCYKEGVwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.34.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:13:74:11:fa:21:3d:e1:72:40:e2:19:85:ed:37:68:19:c2:
76:01:40:ee:73:09:2d:cf:b7:75:3a:a5:d6:30:00:e8:a4:46:
35:04:d8:c1:c1:e9:d4:c4:c1:98:65:26:a4:92:d7:d9:87:6e:
d6:92:e8:32:a5:c8:65:59:85:8f:41:cf:78:d5:cf:5b:70:f4:
ee:49:51:29:5a:90:5e:00:d4:d1:db:23:22:e3:29:52:ca:de:
d4:3b:58:11:a8:27:89:c9:46:c4:19:56:0d:9d:2f:cc:a1:27:
13:59:51:4a:06:29:7d:18:b3:73:37:a2:f7:3f:3b:fd:1e:67:
48:87:24:8d:36:b3:49:c5:dc:52:02:e4:8d:9b:1f:3c:35:90:
80:39:f3:05:ec:ee:c7:e5:89:61:32:2a:a9:b6:d8:a8:21:f7:
d3:59:66:62:35:12:09:28:58:42:0a:ca:b4:b2:5e:84:8d:88:
a7:52:b1:24:b6:8c:25:9d:ba:70:63:bf:d7:ac:36:b1:5d:b9:
11:61:28:06:a9:c3:05:1b:5f:b2:b2:d0:da:8d:f3:53:81:a8:
94:26:03:d7:e1:ac:29:3e:19:31:71:9b:63:3f:9b:44:8c:1f:
4b:da:a4:da:fb:c5:16:4a:a5:60:f8:dd:94:2e:c9:46:7a:52:
e0:b0:ee:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbIhCq0tDUWaNXgml3mZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjUwMTAyMDk1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDFkM2JjODFjNGIyMTU4YzRhZjc5N2Q0ZjkwYzI2MGExMDY1NzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB+heTkV995ALu0tjev1wJAi8TUQ
0WeiygKcuMEYZUw+BDiUu8hrbMip4G0kEX3XOdopx1gm567MEizjZ41k/9piDLra
hPGzUm0lXdDPZi2+oc7rjTix2JPK9SzNeHN2kXrS6u2D9DcMrdXrVYH7B4kK0w0S
neNUSGJddDG2M93xVxh4mrUXZwtfbC8pPK1NxbNr/Fli5IATupeoN4jP6ZOdkw9F
+sXedw5NERDOIm84+tMv4eBGOfm/4QGvR5zMXLRqsm/4cx+yUNcZuYa3pRTv5XGJ
H9bGIKS4TZ45HkUlKLoS9mjNbLcwVx4LPf7i2w8WjOmtOmQWe8SHbT8sqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMQdO8gcSyFYxK95fU+QwmChBlcJMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEveEIwN3lCeExJVmpFcjNsOVQ1RENZS0VHVndrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsiJfMA0G
CSqGSIb3DQEBCwUAA4IBAQB/E3QR+iE94XJA4hmF7TdoGcJ2AUDucwktz7d1OqXW
MADopEY1BNjBwenUxMGYZSakktfZh27WkugypchlWYWPQc941c9bcPTuSVEpWpBe
ANTR2yMi4ylSyt7UO1gRqCeJyUbEGVYNnS/MoScTWVFKBil9GLNzN6L3Pzv9HmdI
hySNNrNJxdxSAuSNmx88NZCAOfMF7O7H5YlhMiqpttioIffTWWZiNRIJKFhCCsq0
sl6EjYinUrEktowlnbpwY7/XrDaxXbkRYSgGqcMFG1+ystDajfNTgaiUJgPX4awp
PhkxcZtjP5tEjB9L2qTa+8UWSqVg+N2ULslGelLgsO4u
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:10:05 2025 by rpki-client