Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UYEtbp80doW-HpIMBeNCJkjoQkk.roa
File: UYEtbp80doW-HpIMBeNCJkjoQkk.roa (raw, json)
Hash identifier: f4P0HP74bPyPUqYFkA1X4hWvgzg21hIltTyh56FN3us=
Subject key identifier: 51:81:2D:6E:9F:34:76:85:BE:1E:92:0C:05:E3:42:26:48:E8:42:49
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ED97BBD20F7083C6877250CB590C4
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UYEtbp80doW-HpIMBeNCJkjoQkk.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208370
IP address blocks: 2a0e:aa07:e010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d9:7b:bd:20:f7:08:3c:68:77:25:0c:b5:90:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51812d6e9f347685be1e920c05e3422648e84249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:1a:1e:a2:5c:62:19:19:b3:88:55:71:19:
cd:b1:e5:b4:b4:62:b0:51:50:bd:5a:d4:3b:fe:51:
e1:be:2f:d2:46:7e:9c:7a:59:f6:df:74:c8:67:a7:
7c:3b:34:0c:77:99:48:11:82:32:81:ee:1b:d3:4f:
38:7b:65:6a:ab:b3:14:9c:f9:32:60:62:46:3d:83:
8d:58:ce:2d:f8:fe:e6:f1:77:74:e7:d3:bf:d8:ad:
4c:81:49:a4:92:48:4e:f6:2a:91:cf:2e:ba:34:2d:
18:ab:88:c3:17:29:3c:c9:12:53:ec:45:30:6f:f2:
54:d8:98:41:28:56:fb:47:84:a4:84:43:fd:fd:57:
8f:45:a0:63:19:f0:eb:67:60:c1:53:d3:64:a2:8a:
df:28:5e:48:cf:d9:94:26:5c:fe:47:6d:5f:ca:a5:
2e:86:50:af:ba:87:93:17:97:60:ed:69:a7:4c:b5:
7a:bd:dd:3f:cb:9d:cb:0d:54:7d:2d:17:b0:57:0f:
de:a1:8f:36:d3:81:a3:7f:c8:31:0c:fd:d0:b3:26:
9a:77:bd:ee:45:80:75:c5:d9:b8:af:40:97:e4:b7:
ed:a2:82:f9:bf:ab:d7:c9:d7:f6:39:a5:a6:f9:a8:
28:98:1f:70:f5:3a:be:e0:45:45:ab:20:2b:53:6e:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:81:2D:6E:9F:34:76:85:BE:1E:92:0C:05:E3:42:26:48:E8:42:49
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/UYEtbp80doW-HpIMBeNCJkjoQkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e010::/48
Signature Algorithm: sha256WithRSAEncryption
ac:aa:e7:c6:c9:dc:44:2b:12:91:67:aa:ac:08:a5:dd:f1:ab:
9b:7d:ee:58:82:ce:f8:6f:1c:61:2d:fb:b3:bf:4c:10:bf:4a:
32:e4:bd:10:a4:20:90:eb:63:49:46:30:f7:93:4e:bd:a4:b6:
aa:b8:c4:7f:72:be:c0:e0:55:0b:e9:dc:cd:6b:8e:e5:41:85:
c1:bc:77:65:f1:b3:c9:98:2d:13:68:76:ef:70:11:91:7b:c4:
82:5c:e3:db:d2:3c:89:91:73:9e:69:fa:f2:81:80:b0:e1:c2:
8e:53:12:26:d1:cd:ef:ad:f5:76:f0:2b:80:ff:d5:6c:a2:36:
8b:83:30:cd:e5:5a:ea:b5:47:7a:5c:e5:bf:bb:3f:ae:a1:40:
70:01:a1:c6:1f:5a:b3:80:cd:68:a1:7e:ff:23:10:68:ee:78:
5a:a5:b0:a0:5b:0d:44:10:c1:47:b8:6e:85:75:dc:ee:10:e2:
3d:8a:24:16:3e:b2:82:2f:f7:44:50:32:64:2e:20:5a:69:1e:
df:01:de:bb:a0:10:04:46:2a:f1:8c:c2:a6:a0:fd:a5:77:7c:
79:6a:5c:a3:5a:21:cd:b9:6b:ef:10:7b:fd:50:fc:fd:1b:91:
d1:cc:8a:56:26:eb:0c:66:24:4d:f0:45:ec:03:c8:90:e5:9a:
80:ea:41:0e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljtl7vSD3CDxodyUMtZDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTgxMmQ2ZTlmMzQ3Njg1YmUxZTkyMGMwNWUzNDIyNjQ4ZTg0MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkEaHqJcYhkZs4hVcRnNseW0tGKw
UVC9WtQ7/lHhvi/SRn6celn233TIZ6d8OzQMd5lIEYIyge4b0084e2Vqq7MUnPky
YGJGPYONWM4t+P7m8Xd059O/2K1MgUmkkkhO9iqRzy66NC0Yq4jDFyk8yRJT7EUw
b/JU2JhBKFb7R4SkhEP9/VePRaBjGfDrZ2DBU9NkoorfKF5Iz9mUJlz+R21fyqUu
hlCvuoeTF5dg7WmnTLV6vd0/y53LDVR9LRewVw/eoY8204Gjf8gxDP3Qsyaad73u
RYB1xdm4r0CX5LftooL5v6vXydf2OaWm+agomB9w9Tq+4EVFqyArU279vwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFGBLW6fNHaFvh6SDAXjQiZI6EJJMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvVVlFdGJwODBkb1ctSHBJTUJlTkNKa2pvUWtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+AQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCsqufGydxEKxKRZ6qsCKXd8aubfe5Ygs74bxxh
Lfuzv0wQv0oy5L0QpCCQ62NJRjD3k069pLaquMR/cr7A4FUL6dzNa47lQYXBvHdl
8bPJmC0TaHbvcBGRe8SCXOPb0jyJkXOeafrygYCw4cKOUxIm0c3vrfV28CuA/9Vs
ojaLgzDN5VrqtUd6XOW/uz+uoUBwAaHGH1qzgM1ooX7/IxBo7nhapbCgWw1EEMFH
uG6FddzuEOI9iiQWPrKCL/dEUDJkLiBaaR7fAd67oBAERirxjMKmoP2ld3x5alyj
WiHNuWvvEHv9UPz9G5HRzIpWJusMZiRN8EXsA8iQ5ZqA6kEO
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:06:05 2025 by rpki-client