Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/RXihHE1bk2rb6e8LsPR4sjHZpzk.roa
File: RXihHE1bk2rb6e8LsPR4sjHZpzk.roa (raw, json)
Hash identifier: ZGXtsquKSRTSn8S7HgSDVT7eE81RLzcowDazyADroUU=
Subject key identifier: 45:78:A1:1C:4D:5B:93:6A:DB:E9:EF:0B:B0:F4:78:B2:31:D9:A7:39
Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Certificate serial: 01966771C11C65F980BD20FCBB7F40724665
Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/RXihHE1bk2rb6e8LsPR4sjHZpzk.roa
Signing time: Thu 24 Apr 2025 10:57:10 +0000
ROA not before: Thu 24 Apr 2025 10:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211274
IP address blocks: 193.56.11.0/24 maxlen: 24
2a0b:4740::/30 maxlen: 30
2a0b:4744::/32 maxlen: 32
2a0b:4745::/32 maxlen: 32
2a0b:4746::/32 maxlen: 32
2a0b:4747::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:71:c1:1c:65:f9:80:bd:20:fc:bb:7f:40:72:46:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996
Validity
Not Before: Apr 24 10:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4578a11c4d5b936adbe9ef0bb0f478b231d9a739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9d:42:bd:56:72:30:85:b7:e1:fb:d3:81:f8:
fd:bb:d6:25:6d:67:a8:4c:f2:dd:dc:cc:2d:bb:74:
a7:7d:fb:b8:02:9f:3d:27:44:8b:ca:47:0d:69:13:
0e:5e:f0:d3:56:73:78:58:fb:d0:74:2c:10:8f:9b:
58:4f:22:9d:ee:3b:60:93:89:00:15:37:91:bc:35:
b0:6a:4e:ef:5f:8d:06:f4:5c:1a:2d:19:c1:11:4a:
38:05:50:85:02:50:66:13:fb:2b:59:01:ef:87:f5:
9f:d7:6e:ff:63:00:11:a3:fa:7a:e7:4f:7f:49:04:
a3:f2:6a:62:ed:e7:cb:23:22:76:7d:10:63:39:f1:
bb:f8:23:7d:24:e9:f6:87:cb:01:68:89:02:26:d8:
93:fe:98:92:a0:e4:ca:ec:7e:35:3e:0c:9c:bd:eb:
9d:d1:73:a7:25:3c:4a:d4:d2:4c:83:55:38:40:e7:
1f:63:36:46:85:79:dd:90:e6:c9:02:69:0e:ad:77:
5d:7f:54:bb:0a:1c:f7:f3:61:c0:7a:68:97:2a:d0:
5e:65:f1:82:c3:ee:40:33:b5:ac:d0:ed:ec:66:1a:
aa:20:35:30:67:12:ad:8b:bd:9e:dc:0b:b3:06:62:
62:b2:2d:0f:da:2b:85:b6:ec:71:a0:81:0f:ec:de:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:78:A1:1C:4D:5B:93:6A:DB:E9:EF:0B:B0:F4:78:B2:31:D9:A7:39
X509v3 Authority Key Identifier:
keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/RXihHE1bk2rb6e8LsPR4sjHZpzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.11.0/24
IPv6:
2a0b:4740::/29
Signature Algorithm: sha256WithRSAEncryption
d1:e6:fa:05:9f:c8:df:87:cb:8b:73:f1:a6:55:03:a6:c6:2c:
05:b7:37:4e:f7:84:a1:f9:00:0a:ec:79:d8:a5:8c:d9:d0:0a:
25:b3:de:31:3e:40:d7:ae:ff:ab:d0:c3:fe:9f:58:b2:d0:69:
a8:65:68:d5:d5:0b:9a:33:aa:ab:c6:58:d6:31:23:22:db:79:
1b:17:0c:e2:b5:fb:09:16:e7:28:bb:92:84:0d:4f:9b:bc:b5:
1c:4b:b4:2c:e9:e1:f6:3c:be:0b:f3:a3:e6:bd:e4:f8:bc:50:
10:6b:54:da:52:31:a2:d1:55:e9:82:13:67:fa:53:9f:b7:43:
fd:69:3d:32:58:0d:8c:6d:09:81:b6:1c:13:c7:cb:e6:7d:7c:
24:21:4d:9a:ef:c2:6e:0b:8c:f5:07:81:86:46:82:94:ec:6b:
b0:2d:74:8f:37:a2:f2:b1:a0:79:98:1c:c6:c0:87:82:67:29:
7e:17:4c:ab:f1:c9:dc:1b:08:5a:88:2b:02:5c:c9:66:18:75:
43:d4:39:75:cc:27:b2:c2:e4:07:53:df:86:2f:2e:7a:4d:1b:
9a:7d:5b:57:96:51:01:5f:0c:e5:b8:09:5e:2a:d2:d1:c3:82:
0e:23:ac:3d:61:39:1e:e6:2b:75:a3:9b:8d:d2:dd:4b:0c:db:
6e:89:d9:d5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZZnccEcZfmAvSD8u39AckZlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk
Y2Y5OTYwHhcNMjUwNDI0MTA1NzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTc4YTExYzRkNWI5MzZhZGJlOWVmMGJiMGY0NzhiMjMxZDlhNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J1CvVZyMIW34fvTgfj9u9YlbWeo
TPLd3Mwtu3Snffu4Ap89J0SLykcNaRMOXvDTVnN4WPvQdCwQj5tYTyKd7jtgk4kA
FTeRvDWwak7vX40G9FwaLRnBEUo4BVCFAlBmE/srWQHvh/Wf127/YwARo/p6509/
SQSj8mpi7efLIyJ2fRBjOfG7+CN9JOn2h8sBaIkCJtiT/piSoOTK7H41Pgycveud
0XOnJTxK1NJMg1U4QOcfYzZGhXndkObJAmkOrXddf1S7Chz382HAemiXKtBeZfGC
w+5AM7Ws0O3sZhqqIDUwZxKti72e3AuzBmJisi0P2iuFtuxxoIEP7N5wxwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEV4oRxNW5Nq2+nvC7D0eLIx2ac5MB8GA1UdIwQY
MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt
NGQ1MzdjZjAxODA5LzEvUlhpaEhFMWJrMnJiNmU4THNQUjRzakhacHprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5
LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwTgLMA0E
AgACMAcDBQMqC0dAMA0GCSqGSIb3DQEBCwUAA4IBAQDR5voFn8jfh8uLc/GmVQOm
xiwFtzdO94Sh+QAK7HnYpYzZ0Aols94xPkDXrv+r0MP+n1iy0GmoZWjV1QuaM6qr
xljWMSMi23kbFwzitfsJFucou5KEDU+bvLUcS7Qs6eH2PL4L86PmveT4vFAQa1Ta
UjGi0VXpghNn+lOft0P9aT0yWA2MbQmBthwTx8vmfXwkIU2a78JuC4z1B4GGRoKU
7GuwLXSPN6LysaB5mBzGwIeCZyl+F0yr8cncGwhaiCsCXMlmGHVD1Dl1zCeywuQH
U9+GLy56TRuafVtXllEBXwzluAleKtLRw4IOI6w9YTke5it1o5uN0t1LDNtuidnV
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:43 2025 by rpki-client