Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/yRPDQIAZVw5i0tWgAaueJZEEypk.roa
File: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (raw, json)
Hash identifier: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=
Subject key identifier: C9:13:C3:40:80:19:57:0E:62:D2:D5:A0:01:AB:9E:25:91:04:CA:99
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 01942444BE50F231DE089EFAFAB0160CAF8C
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/yRPDQIAZVw5i0tWgAaueJZEEypk.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2001:678:f8c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:be:50:f2:31:de:08:9e:fa:fa:b0:16:0c:af:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c913c3408019570e62d2d5a001ab9e259104ca99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:fc:f2:3a:a4:09:88:e1:2c:2b:8d:18:e2:
b0:0c:97:69:9d:2b:94:49:db:d5:4b:5a:02:4d:82:
33:b0:50:4e:29:43:bb:ef:a8:6d:2f:c9:db:4d:5d:
ec:2d:5d:34:92:d1:2c:93:43:7f:45:55:ec:a3:8f:
47:e0:80:e4:27:5e:ed:59:57:57:09:7f:5c:fb:05:
db:95:a3:36:8f:b8:57:d9:80:be:62:88:99:96:14:
68:a5:95:b0:98:89:ec:33:a1:ee:3f:54:df:66:38:
4c:98:70:d8:a1:7d:8d:01:b1:c3:a7:2b:12:e6:e0:
34:16:ef:fc:df:e0:2d:8b:35:8a:d4:13:6a:68:76:
b6:a4:3f:70:cb:19:ba:b4:df:eb:4f:36:0d:54:57:
a8:fe:48:af:66:74:f4:f0:11:3e:60:11:8a:5a:bb:
a8:35:89:0d:72:3e:98:38:a6:6d:86:54:01:c2:5b:
ed:08:7b:f0:18:a8:67:c4:15:60:15:6f:4d:87:27:
ed:56:e4:10:96:0f:30:f0:62:65:55:74:70:f3:bd:
3c:23:4f:1e:bd:b3:9c:14:8c:6f:dd:01:40:3c:d4:
39:d0:38:83:62:e7:28:bb:f6:1a:ba:b0:27:07:46:
0f:15:63:e2:ac:b3:5c:37:2c:d1:dd:91:f0:1c:d7:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:C3:40:80:19:57:0E:62:D2:D5:A0:01:AB:9E:25:91:04:CA:99
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/yRPDQIAZVw5i0tWgAaueJZEEypk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f8c::/48
Signature Algorithm: sha256WithRSAEncryption
3d:c0:b4:31:5f:8a:53:c0:0c:76:28:42:07:29:7b:c2:b3:b9:
70:10:f0:b4:0b:89:7c:28:f0:71:29:94:a3:94:8a:ac:2f:e0:
aa:60:5e:db:d7:22:0c:14:c4:30:ff:c4:54:69:fb:7b:44:a8:
83:e1:8a:e2:68:51:bc:cc:f5:33:32:96:68:33:88:56:59:31:
04:5b:df:8a:85:bd:0a:98:ed:b9:27:c4:af:5d:45:91:61:d1:
76:aa:f9:12:a8:67:25:a5:c9:63:9d:1b:ca:f6:89:35:a1:4f:
0a:0f:4e:6e:2a:60:2e:82:e2:05:ed:f8:a3:45:cc:12:83:e4:
59:80:74:84:e8:a9:12:f7:ac:df:ec:ed:2f:5e:38:3d:17:7d:
e2:be:94:48:ca:9f:b7:84:04:fa:6d:8a:c4:07:43:d6:66:f5:
56:43:a2:8a:f8:36:b9:c4:25:ce:8a:4d:c0:e0:fc:a9:6e:00:
7d:2f:7a:1c:a5:72:16:62:b0:c4:0c:1a:be:81:14:70:aa:2f:
35:bd:4a:ea:ea:6e:93:b4:1b:5b:f8:fd:5e:8b:1d:7b:1a:81:
17:62:dc:48:cd:8d:e2:a5:b6:33:97:e9:1b:c9:f3:a3:0a:9c:
54:a0:63:03:c5:6c:1d:f9:64:2e:84:2b:48:51:59:6f:ab:9f:
91:25:3d:88
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQkRL5Q8jHeCJ76+rAWDK+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1
YTU4MWEwHhcNMjUwMTAxMjM0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTEzYzM0MDgwMTk1NzBlNjJkMmQ1YTAwMWFiOWUyNTkxMDRjYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20n88jqkCYjhLCuNGOKwDJdpnSuU
SdvVS1oCTYIzsFBOKUO776htL8nbTV3sLV00ktEsk0N/RVXso49H4IDkJ17tWVdX
CX9c+wXblaM2j7hX2YC+YoiZlhRopZWwmInsM6HuP1TfZjhMmHDYoX2NAbHDpysS
5uA0Fu/83+AtizWK1BNqaHa2pD9wyxm6tN/rTzYNVFeo/kivZnT08BE+YBGKWruo
NYkNcj6YOKZthlQBwlvtCHvwGKhnxBVgFW9NhyftVuQQlg8w8GJlVXRw8708I08e
vbOcFIxv3QFAPNQ50DiDYucou/YaurAnB0YPFWPirLNcNyzR3ZHwHNdrRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMkTw0CAGVcOYtLVoAGrniWRBMqZMB8GA1UdIwQY
MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt
NmE2NWQ4MDQxODAzLzEveVJQRFFJQVpWdzVpMHRXZ0FhdWVKWkVFeXBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz
LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+M
MA0GCSqGSIb3DQEBCwUAA4IBAQA9wLQxX4pTwAx2KEIHKXvCs7lwEPC0C4l8KPBx
KZSjlIqsL+CqYF7b1yIMFMQw/8RUaft7RKiD4YriaFG8zPUzMpZoM4hWWTEEW9+K
hb0KmO25J8SvXUWRYdF2qvkSqGclpcljnRvK9ok1oU8KD05uKmAuguIF7fijRcwS
g+RZgHSE6KkS96zf7O0vXjg9F33ivpRIyp+3hAT6bYrEB0PWZvVWQ6KK+Da5xCXO
ik3A4PypbgB9L3ocpXIWYrDEDBq+gRRwqi81vUrq6m6TtBtb+P1eix17GoEXYtxI
zY3ipbYzl+kbyfOjCpxUoGMDxWwd+WQuhCtIUVlvq5+RJT2I
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:41 2025 by rpki-client