Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/IgamqUciVdLhTEl8qUlCv8gTk2M.roa
File: IgamqUciVdLhTEl8qUlCv8gTk2M.roa (raw, json)
Hash identifier: qputrlAgmF8QE3+FmBu/iwhtSGf2HPJS8f3o4AngQYQ=
Subject key identifier: 22:06:A6:A9:47:22:55:D2:E1:4C:49:7C:A9:49:42:BF:C8:13:93:63
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019425FC62A1771B4BE20BE1E5131EF3B70F
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/IgamqUciVdLhTEl8qUlCv8gTk2M.roa
Signing time: Thu 02 Jan 2025 07:48:04 +0000
ROA not before: Thu 02 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:4a40:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:62:a1:77:1b:4b:e2:0b:e1:e5:13:1e:f3:b7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jan 2 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2206a6a9472255d2e14c497ca94942bfc8139363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:0e:c5:0e:83:83:5a:cf:c6:e4:b0:80:71:
83:e0:3a:e2:a7:31:02:fa:6f:b8:e0:6c:aa:17:9d:
0b:ec:99:1b:ae:81:1b:06:8e:f7:d4:db:77:45:dc:
60:aa:1d:41:83:a7:a1:08:b2:77:6d:3e:d7:9b:98:
1c:3f:36:9d:63:42:a5:b2:17:93:21:af:5a:7e:0f:
87:48:2f:1a:ae:39:0d:dc:1d:8f:e6:2f:98:bb:a5:
02:c5:97:a9:14:14:da:b1:99:cc:87:34:09:4a:d5:
4f:1a:e1:60:e6:ca:53:f9:93:08:dd:c2:6c:ab:c6:
1c:2a:df:5f:c1:51:60:0d:28:42:3b:39:70:dd:a3:
5d:35:70:2f:1b:9d:81:08:5d:f0:2f:88:08:87:20:
6e:e0:f3:6e:73:b0:87:ea:48:97:96:e0:bd:ad:55:
c5:66:2c:6a:0a:4c:da:5c:46:64:22:38:cf:ec:58:
45:cf:95:3b:cd:1e:f7:ed:b0:b3:3a:b5:db:13:da:
e9:f3:13:88:8e:10:16:91:cd:1c:5d:7d:fa:c6:5a:
9d:d1:4b:7b:9b:46:ab:3c:1b:f9:84:f9:9c:09:c4:
24:f2:75:94:83:10:ec:10:70:17:87:aa:c2:9e:51:
2a:40:ec:fc:ee:58:11:48:20:e7:1b:3d:26:28:aa:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:A6:A9:47:22:55:D2:E1:4C:49:7C:A9:49:42:BF:C8:13:93:63
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/IgamqUciVdLhTEl8qUlCv8gTk2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4a40:10::/48
Signature Algorithm: sha256WithRSAEncryption
3c:78:69:d8:b7:2a:11:3d:f2:41:82:7f:46:cd:9f:d3:25:30:
16:ac:c4:f5:1d:e6:e6:2d:78:c9:4a:4c:94:23:35:54:ea:ba:
bf:f6:11:ce:4f:d0:ce:65:a4:98:41:7d:70:4c:bc:27:70:5f:
b9:62:88:aa:fe:82:17:e5:94:a2:f4:d1:cd:23:a5:f7:75:08:
3b:f0:0e:24:a7:5d:52:84:bf:c1:b3:41:14:4e:14:8b:7e:7d:
64:19:b0:b5:b0:04:e5:77:04:ec:43:79:5b:48:bc:4f:52:df:
ad:ed:6f:2d:cb:b7:37:95:31:0d:9e:35:82:31:37:17:49:c0:
ab:08:79:24:69:32:a8:af:f1:b7:ea:7d:1b:b8:18:80:99:44:
88:e1:3c:1c:88:98:0d:42:d5:31:a2:9c:67:2a:a8:21:2b:19:
a3:ac:b5:64:5c:80:c8:49:b0:f0:18:ee:af:fe:4a:80:cf:40:
b4:b9:08:20:9f:b3:78:45:82:bd:26:09:8b:a2:65:3a:6c:a7:
5c:48:85:b0:13:ec:fb:a2:ad:c0:d6:f4:e0:ba:fb:8e:03:a5:
b3:10:fe:c0:32:81:2d:7a:d5:1c:12:3d:76:81:32:0c:57:5d:
66:a8:d8:64:23:e3:49:39:dd:11:c0:d2:14:1b:b8:81:c0:30:
e0:2c:b1:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/GKhdxtL4gvh5RMe87cPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWEzMDA3NzIyM2MyNWM2ZjM3ZGNmNTk0ODA3NzhjMGI1
YjEwNjgwHhcNMjUwMTAyMDc0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjA2YTZhOTQ3MjI1NWQyZTE0YzQ5N2NhOTQ5NDJiZmM4MTM5MzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3gOxQ6Dg1rPxuSwgHGD4DripzEC
+m+44GyqF50L7JkbroEbBo731Nt3Rdxgqh1Bg6ehCLJ3bT7Xm5gcPzadY0KlsheT
Ia9afg+HSC8arjkN3B2P5i+Yu6UCxZepFBTasZnMhzQJStVPGuFg5spT+ZMI3cJs
q8YcKt9fwVFgDShCOzlw3aNdNXAvG52BCF3wL4gIhyBu4PNuc7CH6kiXluC9rVXF
ZixqCkzaXEZkIjjP7FhFz5U7zR737bCzOrXbE9rp8xOIjhAWkc0cXX36xlqd0Ut7
m0arPBv5hPmcCcQk8nWUgxDsEHAXh6rCnlEqQOz87lgRSCDnGz0mKKq5SQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCIGpqlHIlXS4UxJfKlJQr/IE5NjMB8GA1UdIwQY
MBaAFFIaMAdyI8Jcbzfc9ZSAd4wLWxBoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMt
MGY1ZjA5YjJlYjE0LzEvSWdhbXFVY2lWZExoVEVsOHFVbEN2OGdUazJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82YjExNTEtYjA1YS00YTAyLWE4ODMtMGY1ZjA5YjJlYjE0
LzEvVWhvd0IzSWp3bHh2Tjl6MWxJQjNqQXRiRUdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpKQAAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQA8eGnYtyoRPfJBgn9GzZ/TJTAWrMT1HebmLXjJ
SkyUIzVU6rq/9hHOT9DOZaSYQX1wTLwncF+5Yoiq/oIX5ZSi9NHNI6X3dQg78A4k
p11ShL/Bs0EUThSLfn1kGbC1sATldwTsQ3lbSLxPUt+t7W8ty7c3lTENnjWCMTcX
ScCrCHkkaTKor/G36n0buBiAmUSI4TwciJgNQtUxopxnKqghKxmjrLVkXIDISbDw
GO6v/kqAz0C0uQggn7N4RYK9JgmLomU6bKdcSIWwE+z7oq3A1vTguvuOA6WzEP7A
MoEtetUcEj12gTIMV11mqNhkI+NJOd0RwNIUG7iBwDDgLLEj
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:07 2025 by rpki-client