Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Jc1Er62r9YkYm0dPliyZXSGxK3Y.roa
File: Jc1Er62r9YkYm0dPliyZXSGxK3Y.roa (raw, json)
Hash identifier: UbW5alHjvCWfK4mGP52QY/5Cw1TBZUdhFD4uPM+C1hI=
Subject key identifier: 25:CD:44:AF:AD:AB:F5:89:18:9B:47:4F:96:2C:99:5D:21:B1:2B:76
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EEED2A640068C291FB00DA7101092
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Jc1Er62r9YkYm0dPliyZXSGxK3Y.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214871
IP address blocks: 2a0e:aa06:520::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ee:d2:a6:40:06:8c:29:1f:b0:0d:a7:10:10:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25cd44afadabf589189b474f962c995d21b12b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:bd:3a:50:00:e7:f8:35:79:80:26:50:56:
33:a1:1c:c9:e3:b5:4a:f1:cb:3b:c6:c4:a3:4c:18:
ef:90:21:24:82:27:aa:ae:6c:51:0d:5f:1f:1d:67:
0b:26:1f:a8:9c:91:7d:1f:00:3f:5a:29:0b:d8:f4:
ba:ce:d0:ba:50:c2:6e:ba:3a:b5:86:8a:16:62:65:
d6:05:8f:27:41:1b:df:c7:7f:77:4a:64:14:ad:ef:
b6:fa:48:30:12:8e:dd:dc:b6:f3:ab:97:c1:9c:bd:
9a:58:1a:88:a5:a7:56:de:e3:9c:80:68:8c:40:ff:
0a:5c:a6:33:22:8a:b8:29:7c:b0:7e:58:cd:29:57:
5b:aa:f0:53:ab:a5:31:60:01:68:c0:c9:e2:94:81:
bf:5a:4d:42:a9:0d:0f:87:db:d3:0b:f7:9c:47:41:
68:26:72:93:cd:77:c8:e8:d2:b0:09:57:93:89:a3:
fe:d2:74:94:e6:73:67:36:43:ab:30:9b:c5:65:3a:
bd:70:7e:2b:57:06:7a:e0:0b:e9:46:87:2e:62:b9:
52:82:8b:06:88:98:4e:69:52:b1:d4:63:40:4a:db:
5b:6a:09:53:c6:06:d0:2d:cd:80:ba:84:01:59:d9:
9f:53:6b:fd:97:c6:a0:2b:ea:8b:06:8c:5e:64:77:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:44:AF:AD:AB:F5:89:18:9B:47:4F:96:2C:99:5D:21:B1:2B:76
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Jc1Er62r9YkYm0dPliyZXSGxK3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:520::/44
Signature Algorithm: sha256WithRSAEncryption
49:32:e5:cf:06:92:48:88:da:0f:ec:c9:8a:61:bc:d5:23:69:
5b:b6:26:a5:84:ee:8e:85:9a:33:5d:6a:0c:e9:62:99:44:ba:
12:21:c8:e9:b1:d1:5b:27:e7:e6:fe:61:80:a5:38:f5:88:47:
79:3d:70:a5:1d:3f:47:a8:d9:50:94:2a:8b:1e:55:ea:c0:70:
1b:93:88:e3:f1:8c:83:49:10:2a:e6:33:08:40:12:4e:b6:06:
b7:27:6a:d6:a9:3a:00:09:c6:73:c4:a5:12:e6:2e:88:3e:22:
13:e4:87:0b:84:47:40:34:c8:db:a4:60:bf:e0:a6:ac:76:95:
b5:56:13:2d:f1:82:5d:26:98:a0:31:65:b9:20:10:fc:a7:e9:
c5:b0:fa:61:43:da:57:1d:4b:00:e1:8c:f2:be:fd:93:96:6a:
e2:87:aa:b6:fd:c7:63:e7:24:e5:b9:25:41:c2:67:9a:c3:d8:
0a:9e:41:25:2c:3f:3d:80:17:bd:3c:b0:f4:5e:e4:c5:01:db:
8c:ab:04:c7:92:5b:ef:d1:bc:30:5d:3e:86:3e:1c:71:fd:7e:
95:df:4e:4d:76:4e:07:98:4f:1b:5e:99:55:4d:ce:6d:67:d8:
af:05:6d:1c:d9:a7:78:e9:29:3c:bb:14:a7:50:5c:d2:0d:9c:
58:40:bf:27
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlju7SpkAGjCkfsA2nEBCSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWNkNDRhZmFkYWJmNTg5MTg5YjQ3NGY5NjJjOTk1ZDIxYjEyYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmC9OlAA5/g1eYAmUFYzoRzJ47VK
8cs7xsSjTBjvkCEkgieqrmxRDV8fHWcLJh+onJF9HwA/WikL2PS6ztC6UMJuujq1
hooWYmXWBY8nQRvfx393SmQUre+2+kgwEo7d3Lbzq5fBnL2aWBqIpadW3uOcgGiM
QP8KXKYzIoq4KXywfljNKVdbqvBTq6UxYAFowMnilIG/Wk1CqQ0Ph9vTC/ecR0Fo
JnKTzXfI6NKwCVeTiaP+0nSU5nNnNkOrMJvFZTq9cH4rVwZ64AvpRocuYrlSgosG
iJhOaVKx1GNASttbaglTxgbQLc2AuoQBWdmfU2v9l8agK+qLBoxeZHfEXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCXNRK+tq/WJGJtHT5YsmV0hsSt2MB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvSmMxRXI2MnI5WWtZbTBkUGxpeVpYU0d4SzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgUg
MA0GCSqGSIb3DQEBCwUAA4IBAQBJMuXPBpJIiNoP7MmKYbzVI2lbtialhO6OhZoz
XWoM6WKZRLoSIcjpsdFbJ+fm/mGApTj1iEd5PXClHT9HqNlQlCqLHlXqwHAbk4jj
8YyDSRAq5jMIQBJOtga3J2rWqToACcZzxKUS5i6IPiIT5IcLhEdANMjbpGC/4Kas
dpW1VhMt8YJdJpigMWW5IBD8p+nFsPphQ9pXHUsA4Yzyvv2Tlmrih6q2/cdj5yTl
uSVBwmeaw9gKnkElLD89gBe9PLD0XuTFAduMqwTHklvv0bwwXT6GPhxx/X6V305N
dk4HmE8bXplVTc5tZ9ivBW0c2ad46Sk8uxSnUFzSDZxYQL8n
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:42:03 2025 by rpki-client