Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/F7hh6tizeQR3RJeBSuqlmrPGiA8.roa
File: F7hh6tizeQR3RJeBSuqlmrPGiA8.roa (raw, json)
Hash identifier: sCq2Ea5AEPgRB3+qAky8kUvz7/LFUNC7LVu3aqP0JYs=
Subject key identifier: 17:B8:61:EA:D8:B3:79:04:77:44:97:81:4A:EA:A5:9A:B3:C6:88:0F
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EF0AE7F6DACED0BBA260C2D942997
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/F7hh6tizeQR3RJeBSuqlmrPGiA8.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215019
IP address blocks: 2a0e:aa07:e190::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f0:ae:7f:6d:ac:ed:0b:ba:26:0c:2d:94:29:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17b861ead8b37904774497814aeaa59ab3c6880f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:ad:8b:a6:50:3d:0f:bb:48:68:58:f9:dd:
3d:f7:c8:fd:6f:f7:86:f9:32:6f:c5:71:83:cd:be:
62:60:16:ab:29:a8:59:a8:31:f0:e4:2e:f5:9a:b0:
5a:08:ad:26:41:9d:23:d7:ae:6d:58:0e:e0:82:e0:
8d:72:9d:1f:2b:16:21:55:da:1a:3a:60:e3:ef:14:
a9:c2:64:9d:bb:e0:cb:1c:21:e5:1b:7f:69:73:dd:
f0:4f:44:1f:b4:cc:e1:4b:58:63:9a:d2:0f:05:41:
8f:bb:06:a6:99:14:c7:42:fe:d1:f6:9c:f5:b5:56:
04:9c:b8:d4:ef:26:e8:48:cd:bb:78:f8:92:ac:b3:
b5:f3:95:b3:f6:71:9f:7f:bd:71:69:21:04:e6:c6:
d6:49:19:8c:d3:0c:7c:fe:4a:41:24:fb:e2:c1:70:
e2:d8:79:99:61:7d:ac:69:31:d0:98:0a:87:31:c9:
5f:70:14:45:24:f7:85:6e:de:1e:f7:ab:9d:c4:65:
7e:76:11:ee:d3:c3:68:2e:7d:bd:ba:3d:41:57:e0:
6f:a9:8e:50:1a:b1:9a:87:3e:3f:61:fc:07:44:85:
29:cf:06:7a:8e:35:5b:b4:ac:59:72:28:f5:de:ae:
12:29:59:05:3c:7e:f4:45:d3:81:61:35:f1:6f:52:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:61:EA:D8:B3:79:04:77:44:97:81:4A:EA:A5:9A:B3:C6:88:0F
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/F7hh6tizeQR3RJeBSuqlmrPGiA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e190::/44
Signature Algorithm: sha256WithRSAEncryption
c7:33:45:37:ee:21:c1:3c:6f:09:ee:64:e4:76:77:96:05:25:
6b:b3:65:5d:74:13:8a:e2:91:8e:31:42:49:66:15:98:28:a6:
b6:bc:3f:78:a0:e1:48:bf:4f:96:b8:c5:39:9c:d4:4b:64:b4:
e8:f7:5b:18:63:6b:e8:87:06:39:35:89:c0:c9:37:65:53:ef:
d2:54:10:11:85:e0:3c:9e:13:fd:4c:17:50:c1:19:8f:57:5e:
11:fa:fe:b9:fc:c3:e0:8b:3f:c2:4d:63:5e:1e:18:20:47:80:
84:6c:e2:7a:54:08:95:20:06:7f:8f:c4:a0:6a:ed:e7:61:17:
6a:91:ee:70:d7:01:6e:da:d6:99:52:a0:d2:cb:ce:80:92:f7:
91:25:7c:95:81:39:c3:cc:73:a1:27:71:5d:d4:a6:53:2e:3d:
74:93:68:1c:28:fb:7f:2a:1f:47:fc:d8:3f:21:b0:7e:86:74:
f0:82:4f:40:10:a2:14:f7:f8:27:43:17:41:5d:3d:84:f3:42:
6d:eb:74:c9:7d:77:16:40:7a:13:a4:29:d8:fd:c6:39:2c:ec:
6a:b5:5f:2c:60:93:e3:56:97:6b:43:a6:53:e0:31:e0:ec:55:
c7:30:50:5b:e9:86:53:d0:2a:3d:bb:3d:d3:3a:da:7f:f4:7d:
18:68:8a:13
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljvCuf22s7Qu6JgwtlCmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2I4NjFlYWQ4YjM3OTA0Nzc0NDk3ODE0YWVhYTU5YWIzYzY4ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn6ti6ZQPQ+7SGhY+d0998j9b/eG
+TJvxXGDzb5iYBarKahZqDHw5C71mrBaCK0mQZ0j165tWA7gguCNcp0fKxYhVdoa
OmDj7xSpwmSdu+DLHCHlG39pc93wT0QftMzhS1hjmtIPBUGPuwammRTHQv7R9pz1
tVYEnLjU7yboSM27ePiSrLO185Wz9nGff71xaSEE5sbWSRmM0wx8/kpBJPviwXDi
2HmZYX2saTHQmAqHMclfcBRFJPeFbt4e96udxGV+dhHu08NoLn29uj1BV+BvqY5Q
GrGahz4/YfwHRIUpzwZ6jjVbtKxZcij13q4SKVkFPH70RdOBYTXxb1JEAwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBe4YerYs3kEd0SXgUrqpZqzxogPMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvRjdoaDZ0aXplUVIzUkplQlN1cWxtclBHaUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+GQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDHM0U37iHBPG8J7mTkdneWBSVrs2VddBOK4pGO
MUJJZhWYKKa2vD94oOFIv0+WuMU5nNRLZLTo91sYY2vohwY5NYnAyTdlU+/SVBAR
heA8nhP9TBdQwRmPV14R+v65/MPgiz/CTWNeHhggR4CEbOJ6VAiVIAZ/j8Sgau3n
YRdqke5w1wFu2taZUqDSy86AkveRJXyVgTnDzHOhJ3Fd1KZTLj10k2gcKPt/Kh9H
/Ng/IbB+hnTwgk9AEKIU9/gnQxdBXT2E80Jt63TJfXcWQHoTpCnY/cY5LOxqtV8s
YJPjVpdrQ6ZT4DHg7FXHMFBb6YZT0Co9uz3TOtp/9H0YaIoT
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:33:18 2025 by rpki-client