Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/jvgAj820BHmbS6dawcsjgknVHcI.roa
File: jvgAj820BHmbS6dawcsjgknVHcI.roa (raw, json)
Hash identifier: VTNVnGHAQYgawjDvftIaFAiMEhAvJNij67DPO7xbqJ4=
Subject key identifier: 8E:F8:00:8F:CD:B4:04:79:9B:4B:A7:5A:C1:CB:23:82:49:D5:1D:C2
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0195CEE2E0D5CA77B48A6794B52BC4EA8279
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/jvgAj820BHmbS6dawcsjgknVHcI.roa
Signing time: Tue 25 Mar 2025 19:58:49 +0000
ROA not before: Tue 25 Mar 2025 19:58:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 2a0c:ac3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:e2:e0:d5:ca:77:b4:8a:67:94:b5:2b:c4:ea:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Mar 25 19:58:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ef8008fcdb404799b4ba75ac1cb238249d51dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:ed:60:e5:37:c5:c0:31:3e:c4:e4:98:a6:
60:6f:bf:28:15:ff:c4:90:05:56:84:d0:a9:9b:c2:
7a:17:9d:2d:2c:7b:93:0a:0b:9e:fc:bc:4f:0a:ff:
04:2d:cd:24:ae:70:93:38:af:96:72:ae:80:6d:21:
65:9f:8a:53:2c:fd:34:90:d6:2b:14:18:81:6e:a3:
ca:9c:05:ae:48:d7:52:d1:37:14:0c:a2:f4:a2:6c:
c1:4c:f6:78:01:1e:80:2e:c9:cb:6a:7e:55:f4:b5:
3a:eb:71:62:6b:52:90:b9:5f:dc:66:3b:aa:55:5a:
c1:3b:22:38:cc:fb:fb:65:3a:55:16:1c:72:07:80:
a9:41:ba:a9:2a:62:60:b6:5e:f4:49:2f:3b:d0:23:
58:b6:90:61:32:9f:e2:17:f6:48:2f:6e:31:63:64:
83:9b:55:6a:58:6a:c1:b4:93:00:cd:11:fc:38:bd:
0c:2b:3d:18:44:18:7e:4d:da:f9:f0:31:04:5b:b5:
e3:dd:f9:60:89:b4:e4:ee:df:b1:bd:71:77:2e:fc:
d3:9f:ae:de:68:77:22:35:66:86:49:19:6a:fb:19:
33:11:7e:67:07:44:f3:c7:03:96:ed:3c:4b:fb:8a:
03:cc:e9:77:ad:12:85:eb:fa:e7:3c:c6:39:51:00:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F8:00:8F:CD:B4:04:79:9B:4B:A7:5A:C1:CB:23:82:49:D5:1D:C2
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/jvgAj820BHmbS6dawcsjgknVHcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ac3::/32
Signature Algorithm: sha256WithRSAEncryption
39:d5:ab:92:57:97:2b:8f:80:4f:99:7f:0d:d5:66:81:a5:28:
94:13:43:84:71:7e:96:32:22:cd:45:e2:3d:0d:f4:64:b8:26:
56:08:fe:4a:49:87:3b:98:fa:49:68:2d:08:55:3f:ab:36:ad:
a6:91:d0:5e:f6:1d:a7:d1:5e:09:35:b5:a8:73:8f:b5:f3:c2:
b7:e7:61:3b:35:45:fe:66:70:59:0f:93:83:23:a0:c1:21:04:
b4:cf:5d:5a:38:3a:8d:d6:52:e0:0b:a9:bb:34:db:20:16:1f:
61:3e:f6:56:02:ba:d0:4c:3b:dd:9b:b9:02:2e:aa:9f:b0:ba:
88:a7:43:97:f3:49:64:4d:dc:e0:cb:62:e0:ce:e8:e6:a3:b3:
21:ee:7f:17:0a:36:47:77:a0:c3:c1:d7:52:e4:78:3f:49:36:
64:2d:1c:de:0d:db:2f:11:39:ef:5e:3f:5b:24:b5:23:36:cb:
2c:75:22:07:a7:3b:10:c2:2f:3e:b3:43:ad:0e:53:c3:70:d2:
43:38:b4:47:fa:16:ee:a6:00:4e:8b:87:6f:c5:d0:d8:26:dd:
9e:26:65:ed:d4:a1:74:48:7d:6a:a3:ae:ad:1d:7c:9c:e3:67:
db:c6:3c:ef:ed:dd:43:fa:b8:25:30:b2:d3:ff:e1:38:78:c4:
38:bc:ae:71
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZXO4uDVyne0imeUtSvE6oJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2
OTQ5YjQwHhcNMjUwMzI1MTk1ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWY4MDA4ZmNkYjQwNDc5OWI0YmE3NWFjMWNiMjM4MjQ5ZDUxZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6vtYOU3xcAxPsTkmKZgb78oFf/E
kAVWhNCpm8J6F50tLHuTCgue/LxPCv8ELc0krnCTOK+Wcq6AbSFln4pTLP00kNYr
FBiBbqPKnAWuSNdS0TcUDKL0omzBTPZ4AR6ALsnLan5V9LU663Fia1KQuV/cZjuq
VVrBOyI4zPv7ZTpVFhxyB4CpQbqpKmJgtl70SS870CNYtpBhMp/iF/ZIL24xY2SD
m1VqWGrBtJMAzRH8OL0MKz0YRBh+Tdr58DEEW7Xj3flgibTk7t+xvXF3LvzTn67e
aHciNWaGSRlq+xkzEX5nB0TzxwOW7TxL+4oDzOl3rRKF6/rnPMY5UQBUKQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFI74AI/NtAR5m0unWsHLI4JJ1R3CMB8GA1UdIwQY
MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut
YTQ0MTBlMTBiNmY1LzEvanZnQWo4MjBCSG1iUzZkYXdjc2pna25WSGNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1
LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgwKwzAN
BgkqhkiG9w0BAQsFAAOCAQEAOdWrkleXK4+AT5l/DdVmgaUolBNDhHF+ljIizUXi
PQ30ZLgmVgj+SkmHO5j6SWgtCFU/qzatppHQXvYdp9FeCTW1qHOPtfPCt+dhOzVF
/mZwWQ+TgyOgwSEEtM9dWjg6jdZS4AupuzTbIBYfYT72VgK60Ew73Zu5Ai6qn7C6
iKdDl/NJZE3c4Mti4M7o5qOzIe5/Fwo2R3egw8HXUuR4P0k2ZC0c3g3bLxE5714/
WyS1IzbLLHUiB6c7EMIvPrNDrQ5Tw3DSQzi0R/oW7qYATouHb8XQ2CbdniZl7dSh
dEh9aqOurR18nONn28Y87+3dQ/q4JTCy0//hOHjEOLyucQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:55 2025 by rpki-client