Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/zB4VR8eQ-BQowrZBeMtlvY4zfQ8.roa
File: zB4VR8eQ-BQowrZBeMtlvY4zfQ8.roa (raw, json)
Hash identifier: /Tu77k3GY/MF6l/555p9Pg+IHa6U4tx0rpsWT2I4Xao=
Subject key identifier: CC:1E:15:47:C7:90:F8:14:28:C2:B6:41:78:CB:65:BD:8E:33:7D:0F
Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial: 0194236A4B819017EDCE6B5969188AC72280
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/zB4VR8eQ-BQowrZBeMtlvY4zfQ8.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212580
IP address blocks: 2a11:e487:1::/48 maxlen: 48
2a11:e487:2::/48 maxlen: 48
2a11:e487:3::/48 maxlen: 48
2a11:e487:beef::/48 maxlen: 48
2a11:e487:fc01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4b:81:90:17:ed:ce:6b:59:69:18:8a:c7:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc1e1547c790f81428c2b64178cb65bd8e337d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0e:52:9d:32:9a:eb:02:86:26:b5:12:cf:1b:
ee:b2:7a:ab:90:86:95:47:ac:fa:26:e0:aa:98:ed:
0e:2e:d4:e3:6c:b8:34:e0:c4:b4:02:34:74:66:12:
cd:c3:86:42:55:bd:05:a6:5d:33:90:6f:d9:73:ba:
6d:45:4a:91:de:36:94:c7:ce:20:39:75:38:8a:9b:
df:ec:7d:63:33:96:7e:81:2a:70:f4:db:8a:25:35:
c9:2f:9a:64:c0:93:61:11:28:9f:99:a0:44:25:28:
13:6a:df:c0:78:3c:21:20:ee:73:e2:72:ee:6f:5f:
af:b6:1d:d8:bd:e5:c0:b6:e4:44:9e:aa:f2:19:7f:
4b:33:a0:6b:5d:8a:14:48:be:5b:58:76:d3:fb:c8:
4d:fc:f2:0f:64:02:66:0f:c6:5b:b0:1b:39:e7:d9:
46:e5:9d:d0:33:12:88:90:a9:42:6f:df:7b:43:79:
ab:7d:7f:04:05:d9:d7:14:4c:42:07:c9:d6:4a:1b:
3d:a2:57:c0:b4:fc:7c:e5:99:0b:b9:d7:62:b4:c5:
03:82:03:cf:7d:24:91:f1:b5:15:94:3c:1a:10:8f:
40:cc:16:90:13:25:73:8f:a1:0a:8d:8d:9e:f2:6f:
d3:fb:be:43:f9:7b:9c:62:a7:03:14:83:5a:e5:08:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:15:47:C7:90:F8:14:28:C2:B6:41:78:CB:65:BD:8E:33:7D:0F
X509v3 Authority Key Identifier:
keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/zB4VR8eQ-BQowrZBeMtlvY4zfQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e487:1::-2a11:e487:3:ffff:ffff:ffff:ffff:ffff
2a11:e487:beef::/48
2a11:e487:fc01::/48
Signature Algorithm: sha256WithRSAEncryption
88:b3:a4:c3:cd:ba:20:77:60:73:2f:d7:25:5c:20:74:c3:47:
7e:0c:4f:98:25:ef:a3:dd:de:09:14:13:6f:bd:45:7a:5a:1e:
55:16:f2:a0:5a:9c:45:fc:30:ef:fa:da:72:55:fc:12:13:f8:
a9:66:1d:f3:27:4a:50:99:4e:93:c3:ef:a3:94:46:33:cd:3b:
7e:cf:44:8e:4c:9e:b7:3d:03:93:07:89:b6:7f:ef:3e:3f:a2:
8b:d5:4b:81:e4:bd:2a:4c:7e:71:9b:d5:fb:da:57:69:ca:2d:
c7:1b:89:aa:17:62:7d:1d:ec:9f:ac:ab:4e:5b:c3:43:98:be:
d3:dc:dc:7f:b0:72:73:f9:c0:c7:6e:ff:bb:95:9e:17:e7:c6:
44:55:5d:8e:fe:a8:90:4c:9d:9c:f1:0c:1b:a5:85:b1:eb:fb:
1e:18:84:10:79:c6:9b:47:da:dd:7d:a9:64:9a:b6:af:44:63:
1b:d0:34:18:b0:da:bc:16:d9:94:1a:55:65:49:42:ce:05:9f:
c7:24:aa:0a:07:e9:45:04:c5:cc:2e:e8:d8:a8:8b:ff:e2:c8:
9e:17:67:56:95:c9:fa:6e:09:90:57:8e:97:18:ae:28:ab:5d:
96:53:7b:76:48:86:7f:25:01:f0:cb:63:90:2f:61:e8:2f:5b:
94:ff:b4:15
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQjakuBkBftzmtZaRiKxyKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWZjZDhmYjQwYWFlMWQyNDNjMmE4Y2UyNTQxYTY5OTg3
ZWVkMTMwHhcNMjUwMTAxMTk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzFlMTU0N2M3OTBmODE0MjhjMmI2NDE3OGNiNjViZDhlMzM3ZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g5SnTKa6wKGJrUSzxvusnqrkIaV
R6z6JuCqmO0OLtTjbLg04MS0AjR0ZhLNw4ZCVb0Fpl0zkG/Zc7ptRUqR3jaUx84g
OXU4ipvf7H1jM5Z+gSpw9NuKJTXJL5pkwJNhESifmaBEJSgTat/AeDwhIO5z4nLu
b1+vth3YveXAtuREnqryGX9LM6BrXYoUSL5bWHbT+8hN/PIPZAJmD8ZbsBs559lG
5Z3QMxKIkKlCb997Q3mrfX8EBdnXFExCB8nWShs9olfAtPx85ZkLudditMUDggPP
fSSR8bUVlDwaEI9AzBaQEyVzj6EKjY2e8m/T+75D+XucYqcDFINa5Qgy0QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFMweFUfHkPgUKMK2QXjLZb2OM30PMB8GA1UdIwQY
MBaAFFavzY+0Cq4dJDwqjOJUGmmYfu0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYt
MjM3YmU3NzMwMDdhLzEvekI0VlI4ZVEtQlFvd3JaQmVNdGx2WTR6ZlE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYtMjM3YmU3NzMwMDdh
LzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmMBIDBwAqEeSH
AAEDBwIqEeSHAAADBwAqEeSHvu8DBwAqEeSH/AEwDQYJKoZIhvcNAQELBQADggEB
AIizpMPNuiB3YHMv1yVcIHTDR34MT5gl76Pd3gkUE2+9RXpaHlUW8qBanEX8MO/6
2nJV/BIT+KlmHfMnSlCZTpPD76OURjPNO37PRI5Mnrc9A5MHibZ/7z4/oovVS4Hk
vSpMfnGb1fvaV2nKLccbiaoXYn0d7J+sq05bw0OYvtPc3H+wcnP5wMdu/7uVnhfn
xkRVXY7+qJBMnZzxDBulhbHr+x4YhBB5xptH2t19qWSatq9EYxvQNBiw2rwW2ZQa
VWVJQs4Fn8ckqgoH6UUExcwu6Nioi//iyJ4XZ1aVyfpuCZBXjpcYriirXZZTe3ZI
hn8lAfDLY5AvYegvW5T/tBU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:45:03 2025 by rpki-client