Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/fl9cR0Hr0oLr8djRK-h6E2ObDr4.roa
File: fl9cR0Hr0oLr8djRK-h6E2ObDr4.roa (raw, json)
Hash identifier: 93CR6TY7DEqZVxX2jIz+No9D+VOTLrGIoOBFxhhep+M=
Subject key identifier: 7E:5F:5C:47:41:EB:D2:82:EB:F1:D8:D1:2B:E8:7A:13:63:9B:0E:BE
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 0194266BF775971D365048F839DC1E52784F
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/fl9cR0Hr0oLr8djRK-h6E2ObDr4.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60504
IP address blocks: 2a13:82c0::/32 maxlen: 32
2a13:82c1::/32 maxlen: 32
2a13:82c2::/32 maxlen: 32
2a13:82c3::/32 maxlen: 32
2a13:82c4:1::/48 maxlen: 48
2a13:82c4:2::/48 maxlen: 48
2a13:82c4:3::/48 maxlen: 48
2a13:82c4:f800::/40 maxlen: 40
2a13:82c4:f900::/40 maxlen: 48
2a13:82c4:fa00::/40 maxlen: 48
2a13:82c4:fb00::/40 maxlen: 48
2a13:82c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f7:75:97:1d:36:50:48:f8:39:dc:1e:52:78:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e5f5c4741ebd282ebf1d8d12be87a13639b0ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:e6:15:6c:1c:e8:44:1f:d1:89:99:80:c0:
4c:ac:9c:6b:0a:07:d0:70:9d:a9:19:b5:55:e7:03:
a5:78:9d:60:c6:58:3c:49:dd:0a:8d:7c:c1:da:f5:
30:b6:92:66:89:b8:b1:0c:61:f5:14:c5:5e:cb:b0:
18:50:1a:b2:94:a8:86:26:be:a8:77:51:2a:5f:4f:
29:bc:9e:d0:ce:30:61:4f:55:c0:73:dd:01:7f:6d:
11:f0:1f:1f:a8:40:c9:7a:af:ba:10:87:fd:31:43:
d5:ab:8e:60:9b:93:43:9c:0a:db:d0:16:bd:5a:72:
24:8f:1c:18:6a:05:6d:60:93:94:2d:54:95:ce:8d:
c5:1e:b2:5a:58:e3:35:a4:9f:10:0d:f1:01:e8:2f:
b9:d6:79:51:46:45:05:bc:c8:8b:d3:1d:0d:f3:ca:
e0:82:95:92:9f:12:0e:12:32:52:c8:8f:0a:64:52:
6c:38:9c:d8:17:f0:66:4d:77:0c:19:2c:ea:b6:25:
ac:be:cb:fe:e0:13:3c:9e:22:79:67:ec:b3:9c:f8:
c0:ef:c3:f9:6d:63:86:09:19:b0:68:62:0e:48:43:
5e:30:58:a1:4f:ba:2a:f6:aa:e0:dc:fe:e3:42:3f:
b0:e4:7a:54:4a:50:b9:1d:9c:0c:94:fd:ee:dc:17:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5F:5C:47:41:EB:D2:82:EB:F1:D8:D1:2B:E8:7A:13:63:9B:0E:BE
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/fl9cR0Hr0oLr8djRK-h6E2ObDr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c0::/30
2a13:82c4:1::-2a13:82c4:3:ffff:ffff:ffff:ffff:ffff
2a13:82c4:f800::/38
2a13:82c7::/32
Signature Algorithm: sha256WithRSAEncryption
a9:ea:b6:f4:f8:b3:fb:12:de:58:a5:da:f8:d9:73:2c:8c:9e:
64:e1:65:98:3b:80:31:2f:d5:fc:97:6b:ac:a7:97:98:ab:07:
61:cf:f4:d1:49:d3:3d:11:22:b2:fc:7a:c7:9b:87:d8:18:45:
71:15:3f:77:fe:86:b6:bb:91:37:03:89:50:92:a1:88:98:b0:
26:e2:5b:30:bb:95:b7:ff:8c:e9:ae:e3:7c:5b:17:51:45:37:
3a:71:17:d7:b7:12:3d:8e:d6:46:b7:d7:0f:0b:b3:30:44:b4:
c5:53:e5:21:15:f0:42:95:8c:1d:fb:ac:79:fa:a0:c3:98:35:
3c:96:ae:4e:42:7e:cb:8c:c6:2f:d3:0a:4f:c7:8d:b4:4f:46:
b0:27:4e:7a:d2:85:94:d6:4c:c6:da:4c:7b:e8:83:fa:86:35:
0a:b5:e8:22:b0:8a:64:09:a7:16:f0:ed:74:74:da:31:9c:b4:
2e:7e:a9:d8:5d:53:23:44:8f:2d:d4:b6:6d:87:f0:ea:69:96:
d0:f2:7e:02:e0:3b:a0:e2:e1:e2:f7:a1:d1:17:6d:52:28:24:
8a:ce:89:86:4a:5a:d6:97:cf:be:b9:0f:9d:c1:97:2a:95:c1:
71:e7:ac:97:5a:0d:d7:eb:ed:23:03:ca:a5:cd:ff:37:99:dd:
04:7f:0f:d1
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQma/d1lx02UEj4OdweUnhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkYzc2ZWI2ZjgxNGVkNjAxNTY4ZmRkMmM4MTEwZWRl
ZjhjMTcwHhcNMjUwMTAyMDk0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTVmNWM0NzQxZWJkMjgyZWJmMWQ4ZDEyYmU4N2ExMzYzOWIwZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOPmFWwc6EQf0YmZgMBMrJxrCgfQ
cJ2pGbVV5wOleJ1gxlg8Sd0KjXzB2vUwtpJmibixDGH1FMVey7AYUBqylKiGJr6o
d1EqX08pvJ7QzjBhT1XAc90Bf20R8B8fqEDJeq+6EIf9MUPVq45gm5NDnArb0Ba9
WnIkjxwYagVtYJOULVSVzo3FHrJaWOM1pJ8QDfEB6C+51nlRRkUFvMiL0x0N88rg
gpWSnxIOEjJSyI8KZFJsOJzYF/BmTXcMGSzqtiWsvsv+4BM8niJ5Z+yznPjA78P5
bWOGCRmwaGIOSENeMFihT7oq9qrg3P7jQj+w5HpUSlC5HZwMlP3u3Bd47QIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFH5fXEdB69KC6/HY0SvoehNjmw6+MB8GA1UdIwQY
MBaAFM/13Hbrb4FO1gFWj90sgRDt74wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjct
MDFkOWU5ZDMxOTQzLzEvZmw5Y1IwSHIwb0xyOGRqUkstaDZFMk9iRHI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84YzBjMDAtNWZjZS00NWNiLWJiYjctMDFkOWU5ZDMxOTQz
LzEvel9YY2R1dHZnVTdXQVZhUDNTeUJFTzN2akJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUCKhOCwDAS
AwcAKhOCxAABAwcCKhOCxAAAAwYCKhOCxPgDBQAqE4LHMA0GCSqGSIb3DQEBCwUA
A4IBAQCp6rb0+LP7Et5Ypdr42XMsjJ5k4WWYO4AxL9X8l2usp5eYqwdhz/TRSdM9
ESKy/HrHm4fYGEVxFT93/oa2u5E3A4lQkqGImLAm4lswu5W3/4zpruN8WxdRRTc6
cRfXtxI9jtZGt9cPC7MwRLTFU+UhFfBClYwd+6x5+qDDmDU8lq5OQn7LjMYv0wpP
x420T0awJ0560oWU1kzG2kx76IP6hjUKtegisIpkCacW8O10dNoxnLQufqnYXVMj
RI8t1LZth/DqaZbQ8n4C4Dug4uHi96HRF21SKCSKzomGSlrWl8++uQ+dwZcqlcFx
56yXWg3X6+0jA8qlzf83md0Efw/R
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:32:59 2025 by rpki-client