Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/yn1GwROcUgRKZlTBqW_F9Or69fY.roa
File: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (raw, json)
Hash identifier: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=
Subject key identifier: CA:7D:46:C1:13:9C:52:04:4A:66:54:C1:A9:6F:C5:F4:EA:FA:F5:F6
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019422FB661522C604F917BB9B2C2FBE2038
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/yn1GwROcUgRKZlTBqW_F9Or69fY.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210819
IP address blocks: 2a0e:4006::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:66:15:22:c6:04:f9:17:bb:9b:2c:2f:be:20:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca7d46c1139c52044a6654c1a96fc5f4eafaf5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:53:89:82:67:96:b5:c9:31:ee:d5:38:5d:
23:8c:f1:62:06:60:a5:55:46:5e:11:06:4d:3d:51:
b1:1e:9c:1f:d4:23:49:13:05:e7:15:09:f9:31:42:
84:6d:56:e8:83:ae:ed:2d:69:10:d8:70:2c:fb:d3:
b1:5d:d1:66:0a:b8:32:e4:ed:7f:69:1b:69:1c:98:
62:46:6d:f3:65:16:2a:ef:7b:84:5a:c2:21:c1:8f:
db:88:4a:61:f2:d5:e6:68:c2:02:d0:e9:43:98:35:
70:06:67:3a:96:01:3c:e8:f3:ea:d2:e8:30:24:69:
e9:18:a6:47:6a:ac:6e:24:4d:e9:49:10:80:55:ba:
22:d2:a9:9a:00:eb:3b:73:11:42:a8:6c:28:b8:3d:
23:a1:91:10:40:68:53:30:59:5d:fa:ce:c2:c3:e3:
ba:41:9d:34:52:da:59:76:a4:33:5d:be:36:8e:79:
94:23:f0:53:d8:8e:7d:a2:46:ce:e2:e6:eb:21:fb:
f9:24:bb:c7:66:94:e0:df:58:f2:05:fd:96:0f:da:
89:37:46:0d:8c:0a:84:49:fb:71:96:0b:41:1b:86:
26:c9:54:4a:a0:7c:79:5c:85:e0:24:ae:61:82:66:
ec:b4:de:75:9c:8b:3c:31:62:a5:c0:c3:b0:31:1b:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7D:46:C1:13:9C:52:04:4A:66:54:C1:A9:6F:C5:F4:EA:FA:F5:F6
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/yn1GwROcUgRKZlTBqW_F9Or69fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4006::/32
Signature Algorithm: sha256WithRSAEncryption
13:5b:ed:5d:ee:e5:6b:2b:1b:aa:51:fa:da:53:5b:eb:62:1d:
57:ca:b8:8d:db:0c:7a:bc:d0:66:45:4e:33:3e:f9:b1:eb:04:
7b:88:b7:3f:1b:9c:cd:71:80:5d:ca:4b:ea:0a:88:05:59:58:
06:df:d5:3b:03:7a:e8:27:d6:ef:ce:c8:42:d7:3b:26:7a:e2:
a0:a1:f1:01:20:fd:1d:d0:ab:05:dd:56:3c:24:59:73:f7:4b:
0d:10:9d:50:98:65:51:52:2f:f4:eb:1b:b2:12:8b:ff:a9:2b:
5e:fd:ab:a3:c3:82:68:14:39:42:75:65:dc:f3:2e:2a:6a:93:
c8:28:4d:7e:45:e0:68:30:95:27:4f:28:2a:a8:75:f0:90:3b:
3e:28:96:7e:af:8b:5e:09:d1:1b:ea:54:51:89:e0:97:00:cc:
f8:7f:ab:00:e2:a9:3f:e3:71:e8:7d:0e:1e:73:26:bc:73:e5:
fc:5f:54:fc:4c:08:c3:c6:1f:71:aa:5b:cf:16:39:2e:df:aa:
64:c6:38:90:1b:79:c7:c9:94:da:c7:52:3e:d2:ec:f6:8d:c6:
df:16:dd:07:79:da:3c:f7:6f:7e:71:b7:fc:68:e1:3a:5d:d0:
85:13:8f:a4:71:18:70:5d:57:79:a1:c9:da:d5:13:ae:e9:03:
2f:9b:9b:17
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQi+2YVIsYE+Re7mywvviA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjUwMTAxMTc0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTdkNDZjMTEzOWM1MjA0NGE2NjU0YzFhOTZmYzVmNGVhZmFmNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuRTiYJnlrXJMe7VOF0jjPFiBmCl
VUZeEQZNPVGxHpwf1CNJEwXnFQn5MUKEbVbog67tLWkQ2HAs+9OxXdFmCrgy5O1/
aRtpHJhiRm3zZRYq73uEWsIhwY/biEph8tXmaMIC0OlDmDVwBmc6lgE86PPq0ugw
JGnpGKZHaqxuJE3pSRCAVboi0qmaAOs7cxFCqGwouD0joZEQQGhTMFld+s7Cw+O6
QZ00UtpZdqQzXb42jnmUI/BT2I59okbO4ubrIfv5JLvHZpTg31jyBf2WD9qJN0YN
jAqESftxlgtBG4YmyVRKoHx5XIXgJK5hgmbstN51nIs8MWKlwMOwMRv6+wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMp9RsETnFIESmZUwalvxfTq+vX2MB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEveW4xR3dST2NVZ1JLWmxUQnFXX0Y5T3I2OWZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg5ABjAN
BgkqhkiG9w0BAQsFAAOCAQEAE1vtXe7laysbqlH62lNb62IdV8q4jdsMerzQZkVO
Mz75sesEe4i3PxuczXGAXcpL6gqIBVlYBt/VOwN66CfW787IQtc7JnrioKHxASD9
HdCrBd1WPCRZc/dLDRCdUJhlUVIv9OsbshKL/6krXv2ro8OCaBQ5QnVl3PMuKmqT
yChNfkXgaDCVJ08oKqh18JA7PiiWfq+LXgnRG+pUUYnglwDM+H+rAOKpP+Nx6H0O
HnMmvHPl/F9U/EwIw8YfcapbzxY5Lt+qZMY4kBt5x8mU2sdSPtLs9o3G3xbdB3na
PPdvfnG3/GjhOl3QhROPpHEYcF1XeaHJ2tUTrukDL5ubFw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:45:14 2025 by rpki-client