Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/48LNmY8hFlc6h6XBwv-1lHo_wLI.roa
File: 48LNmY8hFlc6h6XBwv-1lHo_wLI.roa (raw, json)
Hash identifier: AjQp32iGlB+1GsI+lJrVk1grrv63+W6EBzEdzr6CEC4=
Subject key identifier: E3:C2:CD:99:8F:21:16:57:3A:87:A5:C1:C2:FF:B5:94:7A:3F:C0:B2
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C73376D387234D57D52C9A69519BB
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/48LNmY8hFlc6h6XBwv-1lHo_wLI.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214534
IP address blocks: 2a14:67c1:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:73:37:6d:38:72:34:d5:7d:52:c9:a6:95:19:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3c2cd998f2116573a87a5c1c2ffb5947a3fc0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:35:64:47:05:e6:2d:28:fd:7f:1d:74:9a:4a:
ef:32:94:68:65:e7:85:ed:b6:25:98:74:06:fd:0f:
71:6d:51:e1:92:07:4b:b8:be:cd:c5:65:6e:c1:f4:
f5:df:64:3c:37:83:fb:be:eb:a6:fe:7b:94:9d:f9:
03:03:f1:f7:11:4c:53:26:1a:58:23:bb:81:1f:cb:
74:97:0d:1c:61:2c:a1:c7:bf:de:04:d2:73:5f:14:
40:33:ca:20:c2:f2:5c:b2:e2:af:00:42:b7:b7:65:
98:67:aa:a2:a3:50:52:d7:33:de:38:8c:fc:bf:2f:
76:6d:18:ce:31:3c:81:c1:0e:1c:10:5a:a3:9c:8d:
d8:92:a7:88:8d:f7:a3:2e:40:06:7e:cb:d8:8c:dd:
35:d5:18:ae:25:a9:fb:95:6d:bd:45:bc:67:ed:18:
b8:9c:ab:10:b6:3c:59:50:6c:eb:71:f6:4e:c6:fb:
12:ec:39:9b:47:0f:5e:75:0f:09:20:38:3c:d9:86:
25:7e:b1:3c:a7:e3:30:b1:40:ef:c9:ba:3e:6e:28:
11:a8:b9:5e:42:d7:7a:12:9b:5f:3e:60:e6:44:e0:
06:1a:50:e4:f2:d2:8e:7c:ef:51:18:b4:a8:a2:6e:
e2:e9:98:b6:22:65:c6:fd:eb:3d:34:2e:5b:c3:b0:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:CD:99:8F:21:16:57:3A:87:A5:C1:C2:FF:B5:94:7A:3F:C0:B2
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/48LNmY8hFlc6h6XBwv-1lHo_wLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:200::/40
Signature Algorithm: sha256WithRSAEncryption
0c:18:07:fe:f8:ef:de:cd:f3:5c:c7:90:76:56:2e:15:b9:4c:
7d:25:f0:09:04:f8:ca:e0:29:c4:88:84:22:c6:e4:90:1f:82:
d0:17:11:b2:98:30:07:e5:e9:a0:a3:d8:1d:22:fd:95:33:4a:
14:db:31:43:24:50:7e:07:d2:4e:1a:8e:9b:30:e6:5d:8b:c3:
47:f6:da:c3:6b:28:16:68:d5:c3:c5:1f:6e:f6:1b:a7:7f:cc:
93:2f:f0:58:37:b3:d7:09:1e:c0:58:75:e0:e3:c1:62:87:f9:
dc:85:35:00:8e:c0:e6:3d:f2:a4:f4:33:fd:52:b8:0c:26:60:
df:f0:82:0c:bf:14:ff:a9:88:71:39:01:0b:a5:c9:ec:5d:ce:
95:f3:ee:f4:2e:4b:04:f5:b1:c2:e8:a3:1b:d5:a0:64:b6:66:
0e:e9:46:01:d9:34:fd:3d:25:41:04:af:e3:01:e3:4c:fb:7e:
5a:d9:38:14:b0:b7:ad:3c:d5:87:e5:f0:8d:06:02:8d:45:da:
5a:25:4f:6a:a1:ab:13:47:c0:83:b8:3d:2e:d3:97:42:55:d7:
89:e5:fa:5d:b6:f1:0f:c6:a5:c0:b0:e9:fc:c9:a0:ca:15:51:
23:6a:31:3a:d1:20:7e:95:1b:d3:50:c4:cc:08:18:5a:3f:ff:
b5:d4:85:a1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQfjHM3bThyNNV9UsmmlRm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjUwMTAxMDE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2MyY2Q5OThmMjExNjU3M2E4N2E1YzFjMmZmYjU5NDdhM2ZjMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjVkRwXmLSj9fx10mkrvMpRoZeeF
7bYlmHQG/Q9xbVHhkgdLuL7NxWVuwfT132Q8N4P7vuum/nuUnfkDA/H3EUxTJhpY
I7uBH8t0lw0cYSyhx7/eBNJzXxRAM8ogwvJcsuKvAEK3t2WYZ6qio1BS1zPeOIz8
vy92bRjOMTyBwQ4cEFqjnI3YkqeIjfejLkAGfsvYjN011RiuJan7lW29Rbxn7Ri4
nKsQtjxZUGzrcfZOxvsS7DmbRw9edQ8JIDg82YYlfrE8p+MwsUDvybo+bigRqLle
Qtd6EptfPmDmROAGGlDk8tKOfO9RGLSoom7i6Zi2ImXG/es9NC5bw7BcqwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOPCzZmPIRZXOoelwcL/tZR6P8CyMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvNDhMTm1ZOGhGbGM2aDZYQnd2LTFsSG9fd0xJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwQIw
DQYJKoZIhvcNAQELBQADggEBAAwYB/74797N81zHkHZWLhW5TH0l8AkE+MrgKcSI
hCLG5JAfgtAXEbKYMAfl6aCj2B0i/ZUzShTbMUMkUH4H0k4ajpsw5l2Lw0f22sNr
KBZo1cPFH272G6d/zJMv8Fg3s9cJHsBYdeDjwWKH+dyFNQCOwOY98qT0M/1SuAwm
YN/wggy/FP+piHE5AQulyexdzpXz7vQuSwT1scLooxvVoGS2Zg7pRgHZNP09JUEE
r+MB40z7flrZOBSwt6081Yfl8I0GAo1F2lolT2qhqxNHwIO4PS7Tl0JV14nl+l22
8Q/GpcCw6fzJoMoVUSNqMTrRIH6VG9NQxMwIGFo//7XUhaE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:08 2025 by rpki-client