Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/t6B-JfXTpKOZbFzM-LqS-_sHF24.roa
File: t6B-JfXTpKOZbFzM-LqS-_sHF24.roa (raw, json)
Hash identifier: 7SKddwJSKK94e7pSld9+DPjMKkF5puSNS9w9snC4UMY=
Subject key identifier: B7:A0:7E:25:F5:D3:A4:A3:99:6C:5C:CC:F8:BA:92:FB:FB:07:17:6E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD20A8B3ECF2D5F6BCEB600009B49
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/t6B-JfXTpKOZbFzM-LqS-_sHF24.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198510
IP address blocks: 2a0c:9a40:8c80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d2:0a:8b:3e:cf:2d:5f:6b:ce:b6:00:00:9b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7a07e25f5d3a4a3996c5cccf8ba92fbfb07176e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:6b:1c:d6:88:46:88:99:f7:d1:a0:b1:4f:
91:b7:0e:bd:60:c6:79:3c:00:65:4c:8f:c3:31:63:
36:fe:4d:ec:5d:5a:fd:b3:45:b8:48:4f:31:67:ed:
97:19:77:09:dc:57:11:63:e4:f8:54:35:a2:5b:a6:
c2:0a:4e:c6:c5:89:a8:c5:a3:fb:bf:ca:55:c8:32:
b9:e4:b9:0b:d4:34:d5:82:ab:5c:44:a0:d7:14:ed:
78:48:54:81:63:a1:61:a5:ba:2c:c7:d1:8c:dc:75:
c4:4b:d7:c3:8d:93:b7:c2:f5:b5:31:7f:ec:8e:be:
94:77:a3:e0:a5:9c:3e:e2:82:72:68:a8:9f:b0:0c:
36:ef:2a:07:d5:96:b5:26:8c:29:a3:ea:98:fa:44:
5b:f3:3c:0a:62:7a:f3:62:6d:f0:f0:d0:83:9d:0a:
84:4e:5f:9e:f6:c2:30:63:f8:cd:e3:94:92:e4:cf:
79:0f:ee:ac:86:f2:ad:81:33:1b:c2:c9:22:00:ef:
e8:d2:e4:ec:d1:26:39:7d:e5:3a:04:de:89:c8:3e:
aa:11:00:cb:ba:d0:1f:36:16:54:b5:49:e1:dc:af:
61:6a:ad:e7:0a:21:08:11:57:ae:df:14:1f:26:d9:
e3:b2:ef:07:80:ae:a7:ca:20:a7:39:51:53:c7:f6:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A0:7E:25:F5:D3:A4:A3:99:6C:5C:CC:F8:BA:92:FB:FB:07:17:6E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/t6B-JfXTpKOZbFzM-LqS-_sHF24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c80::/44
Signature Algorithm: sha256WithRSAEncryption
03:09:99:f7:4d:5d:24:5e:ad:89:40:7d:aa:c2:0f:2c:28:72:
be:3c:48:bf:8a:51:c7:00:ce:ef:9c:7a:69:b5:60:dc:06:b8:
29:dd:2d:4d:6a:22:ff:77:87:5c:cb:7c:7d:55:3e:6a:1a:a1:
45:93:6e:08:10:0f:ae:e9:05:33:ae:04:48:f0:46:38:32:53:
5c:23:14:76:96:fb:52:6e:92:61:83:48:39:dd:11:c6:c7:4a:
63:72:95:26:bc:75:6f:5d:2e:c1:ea:e4:36:d5:5f:1e:55:ce:
09:00:b5:4b:c5:43:71:8d:1f:83:07:57:6e:24:c8:20:d2:9f:
54:8d:2e:75:12:aa:7d:75:e9:e7:20:46:97:0c:4b:dd:ca:3e:
73:39:c6:ac:18:1c:8d:07:4e:50:80:4b:6d:37:24:54:57:2c:
97:c5:62:ee:3a:ae:aa:e3:3e:25:96:1e:cd:cb:c2:2c:ce:01:
9b:82:f3:cb:2a:9c:d1:cb:64:a7:f0:09:73:9c:ae:65:8f:9d:
de:53:5f:04:51:5f:ac:10:44:8f:c8:51:b4:19:76:b5:06:a6:
6f:1e:ee:3f:88:9d:cd:25:f0:6e:bc:d0:70:70:e2:d7:24:a1:
b2:01:85:f9:ae:9f:68:86:67:11:77:cb:c0:ff:c0:d9:a5:04:
c1:88:b9:f7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+9IKiz7PLV9rzrYAAJtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2EwN2UyNWY1ZDNhNGEzOTk2YzVjY2NmOGJhOTJmYmZiMDcxNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLdrHNaIRoiZ99GgsU+Rtw69YMZ5
PABlTI/DMWM2/k3sXVr9s0W4SE8xZ+2XGXcJ3FcRY+T4VDWiW6bCCk7GxYmoxaP7
v8pVyDK55LkL1DTVgqtcRKDXFO14SFSBY6Fhpbosx9GM3HXES9fDjZO3wvW1MX/s
jr6Ud6PgpZw+4oJyaKifsAw27yoH1Za1Jowpo+qY+kRb8zwKYnrzYm3w8NCDnQqE
Tl+e9sIwY/jN45SS5M95D+6shvKtgTMbwskiAO/o0uTs0SY5feU6BN6JyD6qEQDL
utAfNhZUtUnh3K9haq3nCiEIEVeu3xQfJtnjsu8HgK6nyiCnOVFTx/aXZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLegfiX106SjmWxczPi6kvv7BxduMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvdDZCLUpmWFRwS09aYkZ6TS1McVMtX3NIRjI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIyA
MA0GCSqGSIb3DQEBCwUAA4IBAQADCZn3TV0kXq2JQH2qwg8sKHK+PEi/ilHHAM7v
nHpptWDcBrgp3S1NaiL/d4dcy3x9VT5qGqFFk24IEA+u6QUzrgRI8EY4MlNcIxR2
lvtSbpJhg0g53RHGx0pjcpUmvHVvXS7B6uQ21V8eVc4JALVLxUNxjR+DB1duJMgg
0p9UjS51Eqp9dennIEaXDEvdyj5zOcasGByNB05QgEttNyRUVyyXxWLuOq6q4z4l
lh7Ny8IszgGbgvPLKpzRy2Sn8AlznK5lj53eU18EUV+sEESPyFG0GXa1BqZvHu4/
iJ3NJfBuvNBwcOLXJKGyAYX5rp9ohmcRd8vA/8DZpQTBiLn3
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:39 2025 by rpki-client