Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa
File: uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa (raw, json)
Hash identifier: br5Lt3idKAa3r0A/AYPd7r0VCPVHp7gxtlokiM1B+jU=
Subject key identifier: B9:20:78:43:D9:59:E4:DF:EF:51:32:BB:7D:8D:A3:6F:DC:36:83:86
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01954B987E156ABBAB893B7EA04A4C7D9B43
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa
Signing time: Fri 28 Feb 2025 08:07:19 +0000
ROA not before: Fri 28 Feb 2025 08:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215443
IP address blocks: 2a0d:d940:9005::/48 maxlen: 48
2a0d:d940:9006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4b:98:7e:15:6a:bb:ab:89:3b:7e:a0:4a:4c:7d:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Feb 28 08:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9207843d959e4dfef5132bb7d8da36fdc368386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:ef:e7:2f:c7:7f:f9:90:5c:f4:59:64:d4:
71:11:7b:55:2c:bd:b7:54:01:eb:68:bb:0b:6a:74:
f3:ca:6b:03:4c:2f:6f:72:09:f3:7f:3f:8e:ac:82:
ed:a9:6d:6b:45:d6:0c:9a:0d:29:4b:bb:43:e8:b8:
d1:a5:b3:60:87:04:37:8b:fb:b7:b3:9a:05:2f:b3:
5c:87:67:0e:3e:67:50:5f:9f:68:19:23:f7:f0:d5:
8e:42:a4:65:ae:30:39:07:f5:1a:af:56:ae:3b:77:
4c:78:4e:aa:7d:3f:87:62:de:c5:45:c9:61:5e:1d:
56:0a:b3:e8:0d:51:36:5f:75:7f:78:06:ee:9d:80:
53:42:20:cd:38:48:ac:fe:63:fc:51:ab:91:70:a8:
dd:e8:f7:76:f1:ee:b6:f0:8b:01:41:42:ff:9d:1f:
bc:92:96:38:fa:9f:b3:b0:88:e9:fa:9a:a8:be:15:
26:dd:98:f0:3c:c2:8a:a2:5e:1a:0a:25:5c:bf:ea:
8c:18:f5:65:8e:88:f9:85:8d:16:58:cb:9f:7f:98:
e4:cb:76:83:cb:5c:1f:a0:0a:96:20:48:57:58:51:
6a:21:d7:4d:9b:d2:da:f2:ef:2e:4b:ff:7a:14:a6:
fe:8d:a5:e1:b0:2e:f5:1c:8c:d6:74:74:63:1c:db:
28:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:20:78:43:D9:59:E4:DF:EF:51:32:BB:7D:8D:A3:6F:DC:36:83:86
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:9005::-2a0d:d940:9006:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
68:88:f8:87:a6:47:f4:41:d5:d9:8b:12:59:40:69:7e:62:36:
af:ad:f3:ad:d5:da:08:7f:e8:c5:2b:29:4c:de:82:7d:79:3c:
b4:38:4c:92:0a:ce:b2:03:06:3b:09:9d:05:82:e4:b0:34:de:
ad:93:86:df:9a:2b:51:31:78:b4:15:eb:2a:a5:ef:e5:61:55:
16:82:7b:f6:dd:2d:32:35:c8:a2:98:76:47:cc:93:0e:f1:6e:
c2:6e:84:5d:d5:6b:b9:df:f5:9a:ed:46:9c:f7:aa:a9:5e:78:
3f:c5:2e:7e:6a:8f:6c:e9:a0:12:b1:ec:fa:fd:de:65:b0:7c:
52:51:3c:f1:da:0b:c4:08:66:7f:b7:e3:b9:88:83:07:62:ef:
3f:02:b0:36:9d:ff:aa:da:26:de:c7:c0:ef:59:8d:ff:31:90:
7f:88:6a:bf:5a:af:45:fe:ac:49:91:a1:d0:65:27:b5:2b:ca:
1c:5e:4d:b3:e1:c2:38:d2:de:01:d0:af:c6:40:f9:ee:f2:9d:
19:66:ee:d5:5a:03:7b:f5:ac:29:f2:36:2a:34:50:0e:89:a2:
fb:46:e5:8b:c8:4f:be:36:f5:48:e7:50:06:c5:f6:a0:84:a5:
01:e0:05:c1:cc:37:a8:57:7d:41:bb:0f:b3:2b:79:b5:58:8a:
5d:ab:df:af
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZVLmH4VaruriTt+oEpMfZtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUwMjI4MDgwNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTIwNzg0M2Q5NTllNGRmZWY1MTMyYmI3ZDhkYTM2ZmRjMzY4Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubDv5y/Hf/mQXPRZZNRxEXtVLL23
VAHraLsLanTzymsDTC9vcgnzfz+OrILtqW1rRdYMmg0pS7tD6LjRpbNghwQ3i/u3
s5oFL7Nch2cOPmdQX59oGSP38NWOQqRlrjA5B/Uar1auO3dMeE6qfT+HYt7FRclh
Xh1WCrPoDVE2X3V/eAbunYBTQiDNOEis/mP8UauRcKjd6Pd28e628IsBQUL/nR+8
kpY4+p+zsIjp+pqovhUm3ZjwPMKKol4aCiVcv+qMGPVljoj5hY0WWMuff5jky3aD
y1wfoAqWIEhXWFFqIddNm9La8u8uS/96FKb+jaXhsC71HIzWdHRjHNsoYwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLkgeEPZWeTf71Eyu32No2/cNoOGMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvdVNCNFE5bFo1Tl92VVRLN2ZZMmpiOXcyZzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDdlA
kAUDBwAqDdlAkAYwDQYJKoZIhvcNAQELBQADggEBAGiI+IemR/RB1dmLEllAaX5i
Nq+t863V2gh/6MUrKUzegn15PLQ4TJIKzrIDBjsJnQWC5LA03q2Tht+aK1ExeLQV
6yql7+VhVRaCe/bdLTI1yKKYdkfMkw7xbsJuhF3Va7nf9ZrtRpz3qqleeD/FLn5q
j2zpoBKx7Pr93mWwfFJRPPHaC8QIZn+347mIgwdi7z8CsDad/6raJt7HwO9Zjf8x
kH+Iar9ar0X+rEmRodBlJ7UryhxeTbPhwjjS3gHQr8ZA+e7ynRlm7tVaA3v1rCny
Nio0UA6JovtG5YvIT7429UjnUAbF9qCEpQHgBcHMN6hXfUG7D7MrebVYil2r368=
-----END CERTIFICATE-----
Generated at Sat Apr 12 19:04:56 2025 by rpki-client