Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/lTxvLXRw0Uv_xUcqh_iS1Cj4nOg.roa
File: lTxvLXRw0Uv_xUcqh_iS1Cj4nOg.roa (raw, json)
Hash identifier: 59jXCA9BpPAic/FwQuL2KgMfz8AQKaXrS9vRcDA/SC0=
Subject key identifier: 95:3C:6F:2D:74:70:D1:4B:FF:C5:47:2A:87:F8:92:D4:28:F8:9C:E8
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ECF12569AD3A4140B45EF4736BF05
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/lTxvLXRw0Uv_xUcqh_iS1Cj4nOg.roa
Signing time: Thu 02 Jan 2025 05:48:23 +0000
ROA not before: Thu 02 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198739
IP address blocks: 2a0e:aa07:e090::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:cf:12:56:9a:d3:a4:14:0b:45:ef:47:36:bf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=953c6f2d7470d14bffc5472a87f892d428f89ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:54:76:1a:04:10:cd:cd:80:46:6d:c9:32:
76:52:01:43:a3:ab:17:eb:8c:59:73:df:ae:7f:d8:
5b:5c:7c:64:18:57:78:6f:13:d0:e0:dc:d3:13:8b:
37:49:3d:27:4b:28:d8:36:06:10:f1:86:0b:3f:e4:
ff:63:8d:98:02:bf:89:0c:ef:aa:d3:4d:3d:3f:22:
e8:13:58:45:c7:6d:04:20:b4:a7:5a:74:64:01:d8:
f5:68:2f:5d:30:d4:87:23:b6:4c:3d:30:96:db:5b:
f2:e7:ba:87:56:47:a2:ca:61:b6:9c:04:89:af:9f:
6e:68:3a:9a:5c:e8:09:b7:f1:45:45:07:b3:e5:b0:
0a:b1:ba:98:be:c6:95:af:af:14:a6:3b:2d:e4:ad:
88:85:3d:0b:31:d2:4d:01:89:a4:de:8e:ae:65:8b:
fb:9e:f4:12:aa:c6:24:e1:77:52:36:61:fe:5a:07:
ff:ba:ab:0b:e1:b5:a0:3a:9a:39:a5:ec:ca:fc:63:
66:96:49:d4:fc:a7:9e:61:a3:12:b2:33:d4:67:e5:
ca:67:b8:08:2e:77:a2:26:81:47:62:dd:c0:d2:c4:
31:ec:e0:fd:95:2f:ce:9e:73:87:f0:9b:62:66:50:
83:38:c8:19:3b:83:2e:16:29:c8:8e:ef:d3:09:b5:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:6F:2D:74:70:D1:4B:FF:C5:47:2A:87:F8:92:D4:28:F8:9C:E8
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/lTxvLXRw0Uv_xUcqh_iS1Cj4nOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e090::/44
Signature Algorithm: sha256WithRSAEncryption
14:20:cf:72:70:92:c0:0e:55:0d:25:32:5a:d8:45:b8:95:18:
9b:c2:99:f0:b4:93:43:f4:be:98:44:2d:dc:82:c8:c1:42:6f:
ed:50:10:11:27:ba:ac:3d:b0:4b:0d:ad:03:d6:cc:45:64:2b:
76:87:d6:7c:98:9e:06:27:03:a4:17:e8:fd:c5:d5:7f:3f:1f:
6b:ea:3f:25:b9:58:6c:a4:60:3e:c8:fa:44:4f:32:91:5c:12:
44:3a:6f:82:89:88:92:7f:0b:db:fa:a1:be:f9:77:04:98:3f:
bb:19:f7:7e:d4:3f:ff:78:f4:b1:83:8a:16:3c:cf:71:31:5b:
2b:08:11:c1:ac:af:aa:8e:fd:25:81:1b:7a:98:f6:c7:8e:4f:
ac:c7:45:fb:68:d3:82:1a:fb:3b:b9:95:14:16:6b:49:cb:c0:
07:d9:1b:fe:0b:19:fb:e3:df:fc:fa:b3:4a:68:0c:91:43:18:
e9:1c:6a:2f:5e:f8:0a:4c:3f:1c:ee:3f:0e:9b:38:bc:a7:b8:
c0:6b:b0:72:7d:2a:ae:42:9e:54:01:ce:aa:95:60:bf:ec:c7:
7c:92:27:10:70:e7:79:cb:61:05:5b:62:21:28:45:8a:c1:56:
06:00:e1:e6:0e:2c:82:c4:b8:52:75:41:b6:f9:14:c7:84:5a:
12:87:ad:79
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljs8SVprTpBQLRe9HNr8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTNjNmYyZDc0NzBkMTRiZmZjNTQ3MmE4N2Y4OTJkNDI4Zjg5Y2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqstUdhoEEM3NgEZtyTJ2UgFDo6sX
64xZc9+uf9hbXHxkGFd4bxPQ4NzTE4s3ST0nSyjYNgYQ8YYLP+T/Y42YAr+JDO+q
0009PyLoE1hFx20EILSnWnRkAdj1aC9dMNSHI7ZMPTCW21vy57qHVkeiymG2nASJ
r59uaDqaXOgJt/FFRQez5bAKsbqYvsaVr68Upjst5K2IhT0LMdJNAYmk3o6uZYv7
nvQSqsYk4XdSNmH+Wgf/uqsL4bWgOpo5pezK/GNmlknU/KeeYaMSsjPUZ+XKZ7gI
LneiJoFHYt3A0sQx7OD9lS/OnnOH8JtiZlCDOMgZO4MuFinIju/TCbU0ywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJU8by10cNFL/8VHKof4ktQo+JzoMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvbFR4dkxYUncwVXZfeFVjcWhfaVMxQ2o0bk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+CQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAUIM9ycJLADlUNJTJa2EW4lRibwpnwtJND9L6Y
RC3cgsjBQm/tUBARJ7qsPbBLDa0D1sxFZCt2h9Z8mJ4GJwOkF+j9xdV/Px9r6j8l
uVhspGA+yPpETzKRXBJEOm+CiYiSfwvb+qG++XcEmD+7Gfd+1D//ePSxg4oWPM9x
MVsrCBHBrK+qjv0lgRt6mPbHjk+sx0X7aNOCGvs7uZUUFmtJy8AH2Rv+Cxn749/8
+rNKaAyRQxjpHGovXvgKTD8c7j8Omzi8p7jAa7ByfSquQp5UAc6qlWC/7Md8kicQ
cOd5y2EFW2IhKEWKwVYGAOHmDiyCxLhSdUG2+RTHhFoSh615
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:50 2025 by rpki-client