Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/d0Kd0-ap6UU0U6Mh5zhe6rr2Ffg.roa
File: d0Kd0-ap6UU0U6Mh5zhe6rr2Ffg.roa (raw, json)
Hash identifier: /tf5wOqnCzkX0EEJyP5X1JxsMkl5h2OcVA/OKnPzf/0=
Subject key identifier: 77:42:9D:D3:E6:A9:E9:45:34:53:A3:21:E7:38:5E:EA:BA:F6:15:F8
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBDE95104EBFCB59E15972A1FCCA4F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/d0Kd0-ap6UU0U6Mh5zhe6rr2Ffg.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204914
IP address blocks: 2a0c:9a40:8350::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:de:95:10:4e:bf:cb:59:e1:59:72:a1:fc:ca:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77429dd3e6a9e9453453a321e7385eeabaf615f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8a:55:43:f2:6d:10:2c:01:a5:e3:9b:0b:43:
b5:85:a0:f4:71:19:3f:a7:ff:b6:d9:25:b3:d9:e4:
c4:2f:f6:23:4b:a7:b4:75:2e:6f:8e:ed:65:a4:7b:
4c:68:1a:93:00:25:5d:12:34:6c:cc:e8:76:e6:2f:
49:d2:05:2f:4b:c1:14:63:33:0a:9f:a0:e3:ca:a6:
ea:55:38:de:5c:b0:89:23:84:27:77:c7:62:ad:51:
07:5c:7a:f8:04:86:88:d4:9f:20:a6:d3:82:c6:9b:
59:64:b8:9b:44:74:8e:17:bf:90:11:49:e5:d6:b8:
03:a5:7c:a8:1c:7b:c4:c1:f8:22:38:12:83:9e:dd:
68:79:bf:a4:dc:fb:f1:77:8f:c1:09:e9:37:61:22:
44:3b:b7:ad:76:bf:33:25:2d:20:ae:07:96:c0:ff:
9d:84:4c:8f:76:b9:09:2d:bd:26:c7:a5:ca:2d:f8:
54:9d:7e:83:a7:c6:85:56:fe:75:d9:26:31:5b:f5:
4e:97:32:28:9a:0f:43:ef:08:77:0e:b4:f4:40:a5:
9e:00:2a:1e:ee:03:d9:9f:59:30:57:bb:6a:f2:e5:
59:52:79:24:0b:3a:41:59:ef:65:30:46:b3:5d:2a:
c5:67:65:e5:1e:06:b9:2f:74:69:a0:2b:0b:94:59:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:9D:D3:E6:A9:E9:45:34:53:A3:21:E7:38:5E:EA:BA:F6:15:F8
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/d0Kd0-ap6UU0U6Mh5zhe6rr2Ffg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8350::/48
Signature Algorithm: sha256WithRSAEncryption
60:b9:c3:f5:a5:d5:48:a8:7b:4f:af:8c:a1:34:6f:57:f5:52:
fd:2f:82:41:a2:38:6e:f1:f1:b3:5a:07:44:0b:26:05:40:68:
d0:c4:1e:fb:01:cd:bb:36:0b:6b:f5:e3:d5:75:e0:37:b4:79:
6a:b5:2b:f9:05:3b:9c:c7:01:74:a6:33:4b:a2:40:ba:00:b4:
e3:82:ab:0d:c6:05:89:f3:88:ea:02:5c:ce:14:78:14:02:8c:
d4:85:b2:69:46:ec:59:75:85:fb:c0:36:8e:46:c9:e5:ff:d8:
ab:56:3c:d3:45:2f:7a:a6:05:94:fe:10:91:09:aa:cd:d7:e8:
3f:5a:b9:ca:16:a5:0d:6e:4a:6a:f4:28:0f:88:ce:e7:e2:ad:
94:01:f4:0d:5a:d1:d8:5e:33:b0:56:57:37:b8:c0:6f:2a:7d:
14:8f:bc:ba:4f:c8:b3:a4:cc:27:65:77:ab:99:bd:5d:39:3e:
d4:3b:b1:67:6c:4b:39:61:75:89:2d:93:c0:17:18:4b:4a:e8:
b6:81:7c:d2:77:28:0c:21:d9:8b:71:07:21:86:ea:60:fd:8d:
a0:4b:f2:31:0b:8c:10:cd:27:56:f7:41:24:fb:c9:29:c2:e1:
e7:d4:0b:65:e4:bd:08:3d:ae:f3:e2:40:61:b9:bc:47:c1:cf:
e2:8e:fc:32
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+96VEE6/y1nhWXKh/MpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzQyOWRkM2U2YTllOTQ1MzQ1M2EzMjFlNzM4NWVlYWJhZjYxNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YpVQ/JtECwBpeObC0O1haD0cRk/
p/+22SWz2eTEL/YjS6e0dS5vju1lpHtMaBqTACVdEjRszOh25i9J0gUvS8EUYzMK
n6DjyqbqVTjeXLCJI4Qnd8dirVEHXHr4BIaI1J8gptOCxptZZLibRHSOF7+QEUnl
1rgDpXyoHHvEwfgiOBKDnt1oeb+k3Pvxd4/BCek3YSJEO7etdr8zJS0grgeWwP+d
hEyPdrkJLb0mx6XKLfhUnX6Dp8aFVv512SYxW/VOlzIomg9D7wh3DrT0QKWeACoe
7gPZn1kwV7tq8uVZUnkkCzpBWe9lMEazXSrFZ2XlHga5L3RpoCsLlFmQ2QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHdCndPmqelFNFOjIec4Xuq69hX4MB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvZDBLZDAtYXA2VVUwVTZNaDV6aGU2cnIyRmZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQINQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBgucP1pdVIqHtPr4yhNG9X9VL9L4JBojhu8fGz
WgdECyYFQGjQxB77Ac27Ngtr9ePVdeA3tHlqtSv5BTucxwF0pjNLokC6ALTjgqsN
xgWJ84jqAlzOFHgUAozUhbJpRuxZdYX7wDaORsnl/9irVjzTRS96pgWU/hCRCarN
1+g/WrnKFqUNbkpq9CgPiM7n4q2UAfQNWtHYXjOwVlc3uMBvKn0Uj7y6T8izpMwn
ZXermb1dOT7UO7FnbEs5YXWJLZPAFxhLSui2gXzSdygMIdmLcQchhupg/Y2gS/Ix
C4wQzSdW90Ek+8kpwuHn1Atl5L0IPa7z4kBhubxHwc/ijvwy
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:44 2025 by rpki-client