Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1LeadEOqTQl-zu0MIjneEtReuSM.roa
File: 1LeadEOqTQl-zu0MIjneEtReuSM.roa (raw, json)
Hash identifier: pW7gpHXWxlPZ9JdwCWwsM5zTVjqPmA9C/0YAeg4OAWI=
Subject key identifier: D4:B7:9A:74:43:AA:4D:09:7E:CE:ED:0C:22:39:DE:12:D4:5E:B9:23
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD0E04ABCB0CD67E72B83D9A8C8EB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1LeadEOqTQl-zu0MIjneEtReuSM.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198005
IP address blocks: 2a0c:9a40:83d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d0:e0:4a:bc:b0:cd:67:e7:2b:83:d9:a8:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4b79a7443aa4d097eceed0c2239de12d45eb923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:b2:53:4b:e8:f5:ee:c2:41:fc:d1:67:af:
06:d0:b7:3c:d1:01:a2:f2:ae:9f:6f:f5:09:8e:1a:
f1:19:02:49:9f:cf:25:84:88:18:5a:88:9c:f8:45:
f5:2f:e5:40:fb:cf:c9:05:7f:1b:f1:49:0c:37:c4:
39:e8:89:37:67:8f:f5:08:d8:6c:4b:be:98:d1:8b:
9a:f8:6d:55:a3:12:d2:ba:d1:01:27:9a:8a:c3:79:
62:65:85:e4:98:f6:9d:48:bb:7d:77:97:9e:21:1e:
e5:03:d4:14:60:3f:aa:fc:37:f6:6e:10:30:67:21:
7f:4c:96:3a:f7:c0:5a:ab:55:1f:ea:7a:c1:8f:fa:
24:6e:d7:02:cb:51:6b:6e:3f:63:a1:13:ce:3d:ab:
6d:c8:31:29:32:91:d1:5a:aa:bf:c9:5f:50:7d:21:
39:7c:3a:2f:69:e2:89:c0:34:23:d1:ec:52:d3:ab:
5d:01:28:e3:b2:9d:b0:37:61:d1:db:35:64:85:d8:
bf:c6:c2:89:1f:a8:fb:75:2b:e4:54:ad:d0:a2:f8:
b3:e9:c0:29:3e:51:f3:4f:ae:9a:04:5f:77:b0:6e:
c2:2d:64:f5:50:42:75:9f:67:c0:26:e8:07:f7:d7:
45:7f:69:ac:36:c4:5a:38:3d:4b:52:4e:94:cf:54:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B7:9A:74:43:AA:4D:09:7E:CE:ED:0C:22:39:DE:12:D4:5E:B9:23
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1LeadEOqTQl-zu0MIjneEtReuSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:83d0::/48
Signature Algorithm: sha256WithRSAEncryption
b7:73:d8:36:d1:c2:8d:53:fd:6d:ec:6e:f2:45:61:6c:6b:64:
a0:b9:da:cd:d4:92:ae:56:32:bd:86:c3:ef:bb:98:9c:87:f4:
0b:4b:fe:19:4c:4f:c7:99:14:6e:56:d3:95:fe:fd:5c:a5:03:
fb:33:46:60:ad:2e:34:07:2e:68:66:4a:bf:62:bd:8a:d7:49:
03:36:73:17:9f:6f:63:f9:ce:0a:f9:92:f3:1c:c4:c3:09:ed:
62:a0:d0:af:86:1e:55:14:87:a6:b6:37:6e:5b:5f:4d:2b:6a:
c6:11:10:f9:fd:e1:5f:d3:1a:49:80:54:8d:ec:b4:96:46:f3:
ff:0a:4d:42:cc:67:17:91:2b:73:df:45:1a:1e:6d:3a:76:fc:
a1:8b:61:c8:6b:69:9f:1a:f2:c6:b0:49:51:e0:75:46:3b:6b:
0f:32:89:97:d9:ed:86:cd:33:49:73:cb:44:a4:bf:70:e8:bc:
09:eb:12:19:99:28:5f:2f:e0:9f:71:ef:a4:5d:07:ab:3f:e6:
15:73:05:b8:8d:a5:de:6d:8e:ba:b4:31:ba:78:94:3a:b6:be:
73:bb:60:05:cb:d9:a2:c2:03:92:76:c9:66:ba:51:29:cc:5c:
41:7f:24:36:77:a2:f8:eb:6d:06:f0:33:79:68:83:b5:20:c5:
72:26:4b:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+9DgSrywzWfnK4PZqMjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGI3OWE3NDQzYWE0ZDA5N2VjZWVkMGMyMjM5ZGUxMmQ0NWViOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7+yU0vo9e7CQfzRZ68G0Lc80QGi
8q6fb/UJjhrxGQJJn88lhIgYWoic+EX1L+VA+8/JBX8b8UkMN8Q56Ik3Z4/1CNhs
S76Y0Yua+G1VoxLSutEBJ5qKw3liZYXkmPadSLt9d5eeIR7lA9QUYD+q/Df2bhAw
ZyF/TJY698Baq1Uf6nrBj/okbtcCy1Frbj9joRPOPattyDEpMpHRWqq/yV9QfSE5
fDovaeKJwDQj0exS06tdASjjsp2wN2HR2zVkhdi/xsKJH6j7dSvkVK3Qoviz6cAp
PlHzT66aBF93sG7CLWT1UEJ1n2fAJugH99dFf2msNsRaOD1LUk6Uz1TaeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNS3mnRDqk0Jfs7tDCI53hLUXrkjMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvMUxlYWRFT3FUUWwtenUwTUlqbmVFdFJldVNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIPQ
MA0GCSqGSIb3DQEBCwUAA4IBAQC3c9g20cKNU/1t7G7yRWFsa2SgudrN1JKuVjK9
hsPvu5ich/QLS/4ZTE/HmRRuVtOV/v1cpQP7M0ZgrS40By5oZkq/Yr2K10kDNnMX
n29j+c4K+ZLzHMTDCe1ioNCvhh5VFIemtjduW19NK2rGERD5/eFf0xpJgFSN7LSW
RvP/Ck1CzGcXkStz30UaHm06dvyhi2HIa2mfGvLGsElR4HVGO2sPMomX2e2GzTNJ
c8tEpL9w6LwJ6xIZmShfL+Cfce+kXQerP+YVcwW4jaXebY66tDG6eJQ6tr5zu2AF
y9miwgOSdslmulEpzFxBfyQ2d6L4620G8DN5aIO1IMVyJksx
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:12 2025 by rpki-client