Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/TY7JOycdOIrDu9qVXuSJBGiCelQ.roa
File: TY7JOycdOIrDu9qVXuSJBGiCelQ.roa (raw, json)
Hash identifier: QO6ptkQE2qMAS/b/+YKclVj3BbU8nrq7+qEWOrUQbCI=
Subject key identifier: 4D:8E:C9:3B:27:1D:38:8A:C3:BB:DA:95:5E:E4:89:04:68:82:7A:54
Certificate issuer: /CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Certificate serial: 01942521CF820541A3889C9B055B6F4AB119
Authority key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/TY7JOycdOIrDu9qVXuSJBGiCelQ.roa
Signing time: Thu 02 Jan 2025 03:49:20 +0000
ROA not before: Thu 02 Jan 2025 03:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2.57.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:cf:82:05:41:a3:88:9c:9b:05:5b:6f:4a:b1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d8ec93b271d388ac3bbda955ee4890468827a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:ec:23:1f:59:60:d6:1d:59:e6:70:10:81:
e5:96:ab:e2:d9:2d:d8:6c:e0:ec:d9:5c:b0:8d:26:
19:d4:8f:bd:58:72:e0:70:49:2a:d3:e8:12:5a:75:
98:a5:31:52:82:9d:fd:2b:1a:0b:08:dd:57:06:1e:
ea:44:7e:ff:cd:e7:ca:a7:e9:78:b0:3f:c5:ab:21:
6a:28:6d:4d:8c:3d:b5:59:a4:ea:6b:f0:01:f6:9c:
ab:cf:41:6a:6a:29:20:02:62:7a:ab:f7:03:f2:a7:
5e:7e:34:ff:1a:5c:e5:db:d9:cd:f6:a4:1e:e6:55:
76:e4:af:b6:76:27:17:5d:c9:cf:80:59:d0:ac:0e:
a1:a5:63:eb:90:b6:68:9f:08:74:0b:45:4d:73:7d:
f8:4c:a2:56:98:65:45:b8:27:bd:b5:4b:54:1e:62:
59:eb:3a:0b:39:52:19:cf:26:ae:70:3a:2e:a5:27:
3e:fa:e6:65:9c:1d:88:71:f2:8d:78:a8:ab:41:41:
96:23:c5:64:ba:18:f0:cb:2c:de:e8:a1:88:3b:4d:
fc:3c:1e:b4:43:70:3c:35:c1:de:7a:fb:05:e5:5d:
75:3c:ed:e0:f8:e3:83:15:16:af:b4:66:0a:a3:b2:
66:12:a8:21:49:8d:b6:6e:11:56:d8:40:6b:89:95:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8E:C9:3B:27:1D:38:8A:C3:BB:DA:95:5E:E4:89:04:68:82:7A:54
X509v3 Authority Key Identifier:
keyid:EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/TY7JOycdOIrDu9qVXuSJBGiCelQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e6:61:fa:bc:1e:73:95:19:47:7e:51:98:1c:b2:cc:8c:8f:
a9:84:9c:a6:1a:13:93:30:55:52:c3:5a:72:c7:e7:86:88:74:
92:56:de:21:b2:e9:9e:f9:16:3c:d2:34:41:95:a4:52:a5:26:
19:58:47:75:3a:d7:f0:58:19:cf:9d:87:f4:98:fd:6f:87:8a:
06:72:51:8d:25:f7:e0:8e:e6:4f:4c:f5:c8:25:22:ff:c7:4d:
62:a7:57:5e:52:5c:18:e5:3c:67:3d:38:8b:32:20:04:0a:eb:
38:24:00:4d:80:26:08:c9:3f:8e:7b:44:39:31:2c:cd:56:99:
50:af:62:84:a4:76:23:d3:02:b6:33:2e:06:c1:85:d9:9e:e4:
2b:04:06:b3:25:b1:b6:68:f0:7a:4c:ef:91:54:9c:d6:17:15:
1e:83:0c:11:a3:48:82:93:4d:dc:fc:41:02:a8:4c:a4:fb:2b:
d9:3c:ea:4c:98:46:b2:85:54:af:aa:74:07:49:6c:7a:b4:82:
61:c5:59:35:1b:c2:7d:92:c5:f2:5e:30:77:4d:f2:9a:9b:7d:
f8:79:1e:45:f4:93:8e:18:ae:28:e9:89:6c:76:70:6e:0b:7a:
ee:33:c6:28:5e:24:3f:f7:b1:ff:f4:84:b2:b6:d4:01:ae:62:
d4:62:ee:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIc+CBUGjiJybBVtvSrEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhZWVhMjBiYmJkYjlhNWQxY2RjNzExNGUyYWY1MThlNzZi
MTQyNmUwHhcNMjUwMTAyMDM0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDhlYzkzYjI3MWQzODhhYzNiYmRhOTU1ZWU0ODkwNDY4ODI3YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32jsIx9ZYNYdWeZwEIHllqvi2S3Y
bODs2VywjSYZ1I+9WHLgcEkq0+gSWnWYpTFSgp39KxoLCN1XBh7qRH7/zefKp+l4
sD/FqyFqKG1NjD21WaTqa/AB9pyrz0FqaikgAmJ6q/cD8qdefjT/Glzl29nN9qQe
5lV25K+2dicXXcnPgFnQrA6hpWPrkLZonwh0C0VNc334TKJWmGVFuCe9tUtUHmJZ
6zoLOVIZzyaucDoupSc++uZlnB2IcfKNeKirQUGWI8Vkuhjwyyze6KGIO038PB60
Q3A8NcHeevsF5V11PO3g+OODFRavtGYKo7JmEqghSY22bhFW2EBriZWGLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2OyTsnHTiKw7valV7kiQRognpUMB8GA1UdIwQY
MBaAFOruogu725pdHNxxFOKvUY52sUJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnU2aUM3dmJtbDBjM0hFVTRxOVJqbmF4UW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83ZGY4NTktMjg1MS00M2MzLWEzMmIt
YWIwNDcyMDkzMGNmLzEvVFk3Sk95Y2RPSXJEdTlxVlh1U0pCR2lDZWxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83ZGY4NTktMjg1MS00M2MzLWEzMmItYWIwNDcyMDkzMGNm
LzEvNnU2aUM3dmJtbDBjM0hFVTRxOVJqbmF4UW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjkMMA0G
CSqGSIb3DQEBCwUAA4IBAQA95mH6vB5zlRlHflGYHLLMjI+phJymGhOTMFVSw1py
x+eGiHSSVt4hsume+RY80jRBlaRSpSYZWEd1OtfwWBnPnYf0mP1vh4oGclGNJffg
juZPTPXIJSL/x01ip1deUlwY5TxnPTiLMiAECus4JABNgCYIyT+Oe0Q5MSzNVplQ
r2KEpHYj0wK2My4GwYXZnuQrBAazJbG2aPB6TO+RVJzWFxUegwwRo0iCk03c/EEC
qEyk+yvZPOpMmEayhVSvqnQHSWx6tIJhxVk1G8J9ksXyXjB3TfKam334eR5F9JOO
GK4o6YlsdnBuC3ruM8YoXiQ/97H/9ISyttQBrmLUYu7J
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:11 2025 by rpki-client