Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/XfXUviHD2-41qVbxhe8rIxWHRJw.roa
File: XfXUviHD2-41qVbxhe8rIxWHRJw.roa (raw, json)
Hash identifier: A9qCq+7rrMdRtJqeghvxTaesitjJVXd06HiOas9wsSI=
Subject key identifier: 5D:F5:D4:BE:21:C3:DB:EE:35:A9:56:F1:85:EF:2B:23:15:87:44:9C
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 01967A9CFAF3034E0F8858D82884A5052A54
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/XfXUviHD2-41qVbxhe8rIxWHRJw.roa
Signing time: Mon 28 Apr 2025 04:17:10 +0000
ROA not before: Mon 28 Apr 2025 04:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214454
IP address blocks: 2a13:fc1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:9c:fa:f3:03:4e:0f:88:58:d8:28:84:a5:05:2a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Apr 28 04:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5df5d4be21c3dbee35a956f185ef2b231587449c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:70:a2:74:87:33:dd:75:0f:6f:ed:a4:61:
5b:81:a3:e4:a7:59:c3:64:b0:91:d4:7d:41:4e:11:
d2:21:54:a8:1c:56:61:af:15:e8:72:ed:1f:97:44:
1b:cd:c5:e6:08:c2:93:e9:09:06:83:87:e2:52:d7:
5c:90:fe:94:6e:59:9b:90:05:1b:15:9d:f5:9c:b8:
a9:de:76:64:4b:75:e3:4b:19:cc:7a:86:ea:e2:bc:
c4:f3:3c:79:64:a3:fa:0b:aa:60:66:50:c1:4a:4c:
83:c5:52:44:16:1f:db:c5:b8:0b:88:79:d3:19:2a:
cb:fe:53:9b:84:da:88:b9:a6:c1:f4:42:26:7a:99:
8f:4d:95:b1:e5:50:99:14:31:90:4e:be:09:61:6a:
ed:ae:40:27:28:3a:2f:cf:13:8d:1a:61:a2:ae:1d:
40:42:95:fc:5e:1e:e7:c2:27:51:81:c2:80:a8:28:
2f:a1:70:42:96:ae:8d:ec:57:9c:b0:6b:4d:64:d7:
cc:5b:69:cc:0b:8e:c8:89:a2:65:fb:32:5a:fa:8e:
1c:fb:b8:c1:54:11:31:8c:4c:de:94:de:96:64:e4:
32:9e:eb:ac:11:d5:fe:db:f6:d2:76:01:9f:bb:4d:
09:41:94:6e:20:60:f5:ab:de:de:f5:4a:c0:bb:6f:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F5:D4:BE:21:C3:DB:EE:35:A9:56:F1:85:EF:2B:23:15:87:44:9C
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/XfXUviHD2-41qVbxhe8rIxWHRJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:fc1::/32
Signature Algorithm: sha256WithRSAEncryption
15:4a:14:c6:ef:aa:0e:fe:88:89:bc:de:01:64:86:51:c0:c9:
13:ae:1b:47:03:7c:55:27:f4:24:a5:72:e0:be:c9:8b:b7:21:
53:67:d8:83:aa:c4:f1:94:fe:56:54:98:38:6a:9f:bc:4d:45:
f9:c3:c1:ca:5d:15:49:da:37:6b:8a:75:71:bb:4d:0c:df:cd:
9e:27:75:69:39:28:77:9b:51:27:03:eb:ad:16:b3:97:66:e3:
56:1b:9d:e9:00:0b:5c:ed:f7:58:a7:ba:b1:2d:61:6f:8e:04:
01:d9:e1:4c:fa:8f:de:74:35:de:e8:89:2f:38:48:83:ed:bb:
1c:95:b1:ed:13:26:66:c0:e6:d1:8a:e1:d6:95:e1:0b:0d:e0:
89:d0:fd:e1:b7:29:ef:4b:b6:e9:b3:3e:4b:52:08:4c:8c:73:
46:7b:2a:0b:68:ea:18:f3:d3:db:6a:9a:88:be:b4:11:04:cd:
6d:33:01:f2:f2:fd:a9:a3:32:31:73:cd:fc:29:24:48:78:c0:
6b:7e:92:12:4c:73:73:68:91:e8:c6:70:53:d6:c1:78:db:df:
c6:5a:16:d8:f3:16:93:07:bf:10:d4:23:cc:2f:06:36:de:31:
d3:24:a3:d4:37:74:e4:1b:bb:68:60:e5:66:33:49:68:e1:2c:
dc:05:73:9d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZZ6nPrzA04PiFjYKISlBSpUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjUwNDI4MDQxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGY1ZDRiZTIxYzNkYmVlMzVhOTU2ZjE4NWVmMmIyMzE1ODc0NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNZwonSHM911D2/tpGFbgaPkp1nD
ZLCR1H1BThHSIVSoHFZhrxXocu0fl0QbzcXmCMKT6QkGg4fiUtdckP6UblmbkAUb
FZ31nLip3nZkS3XjSxnMeobq4rzE8zx5ZKP6C6pgZlDBSkyDxVJEFh/bxbgLiHnT
GSrL/lObhNqIuabB9EImepmPTZWx5VCZFDGQTr4JYWrtrkAnKDovzxONGmGirh1A
QpX8Xh7nwidRgcKAqCgvoXBClq6N7FecsGtNZNfMW2nMC47IiaJl+zJa+o4c+7jB
VBExjEzelN6WZOQynuusEdX+2/bSdgGfu00JQZRuIGD1q97e9UrAu28N8wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFF311L4hw9vuNalW8YXvKyMVh0ScMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvWGZYVXZpSEQyLTQxcVZieGhlOHJJeFdIUkp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhMPwTAN
BgkqhkiG9w0BAQsFAAOCAQEAFUoUxu+qDv6IibzeAWSGUcDJE64bRwN8VSf0JKVy
4L7Ji7chU2fYg6rE8ZT+VlSYOGqfvE1F+cPByl0VSdo3a4p1cbtNDN/Nnid1aTko
d5tRJwPrrRazl2bjVhud6QALXO33WKe6sS1hb44EAdnhTPqP3nQ13uiJLzhIg+27
HJWx7RMmZsDm0Yrh1pXhCw3gidD94bcp70u26bM+S1IITIxzRnsqC2jqGPPT22qa
iL60EQTNbTMB8vL9qaMyMXPN/CkkSHjAa36SEkxzc2iR6MZwU9bBeNvfxloW2PMW
kwe/ENQjzC8GNt4x0ySj1Dd05Bu7aGDlZjNJaOEs3AVznQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:26:59 2025 by rpki-client