Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/1-ieyIqujcrCxJblAajzfComBT5M.roa
File: 1-ieyIqujcrCxJblAajzfComBT5M.roa (raw, json)
Hash identifier: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=
Subject key identifier: FA:27:B2:22:AB:A3:72:B0:B1:25:B9:40:6A:3C:DF:0A:89:81:4F:93
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 019427B5C2DC286AC3723F01CE0A4906EAE9
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/1-ieyIqujcrCxJblAajzfComBT5M.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215472
IP address blocks: 2001:678:b74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c2:dc:28:6a:c3:72:3f:01:ce:0a:49:06:ea:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa27b222aba372b0b125b9406a3cdf0a89814f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:43:48:dc:87:7c:7b:62:4f:80:03:45:45:
b5:06:6a:7f:88:86:ba:5b:a3:d3:92:4d:bb:d0:5e:
51:2a:7e:22:d3:12:50:89:50:4e:42:65:d5:1f:eb:
99:61:2b:2f:e4:59:77:7a:b8:a3:4d:02:7f:ad:a3:
8a:ba:fc:b0:e8:90:0d:d7:cf:25:0d:ae:99:f7:d8:
f6:7c:97:ce:39:ff:4e:97:9e:43:90:e1:b3:04:01:
56:85:61:8e:aa:bb:2b:68:d3:5e:f1:3d:29:e3:1e:
3b:04:c4:87:49:7c:47:3d:97:9f:a5:22:8c:77:64:
ab:6e:79:8d:d2:99:d6:5b:cc:8e:ad:4e:f8:b3:40:
44:fa:1a:0b:84:52:8e:95:35:b5:2c:56:8d:f3:af:
59:7f:63:bd:78:02:b2:a1:a4:de:00:45:bf:33:d9:
ca:a9:02:9a:35:db:12:c1:59:84:b5:6e:4f:e5:4c:
c7:a8:4e:02:77:e4:49:3c:08:ae:d0:d9:09:f0:84:
85:71:20:1b:58:3b:e7:92:aa:80:0f:db:4e:4b:68:
90:26:39:ff:34:03:e4:96:c1:92:60:71:d0:6f:f3:
3b:61:69:e8:88:74:ca:8e:b1:ca:51:59:5a:70:5d:
6e:eb:92:be:d2:75:78:1a:b1:43:c6:a2:27:ef:6c:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:27:B2:22:AB:A3:72:B0:B1:25:B9:40:6A:3C:DF:0A:89:81:4F:93
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/1-ieyIqujcrCxJblAajzfComBT5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b74::/48
Signature Algorithm: sha256WithRSAEncryption
4f:22:c7:23:cc:db:72:6f:e1:a3:ca:d9:b7:5d:a1:83:37:c7:
1a:ab:bc:24:72:c9:a4:1c:ee:02:87:67:63:cf:7b:1e:d6:51:
97:7b:05:95:e4:1e:9b:36:66:38:44:56:c9:1d:49:7b:95:a2:
2a:b4:83:d2:bd:d4:44:ca:67:5c:a7:da:d5:e5:d5:37:50:29:
86:0f:00:7d:14:16:82:69:c3:fc:93:1d:0b:77:3b:86:a5:4e:
12:f9:28:7e:b8:a1:62:cf:78:ef:3b:fe:77:d4:6d:b3:40:e9:
74:3a:5f:16:a1:a5:2e:a3:9a:95:65:4d:e5:2e:fb:52:cf:14:
4a:07:ab:4a:9f:9e:36:6d:3b:8d:ec:05:ec:2f:97:ec:d6:8b:
92:ac:2c:50:67:8b:52:99:e5:ef:2b:f7:0c:93:b5:dc:ce:e2:
df:e8:95:79:98:c2:ac:69:ae:2d:b9:4d:5b:82:a7:af:aa:d4:
20:e2:87:f7:09:de:09:5e:a8:67:f8:6e:59:11:53:7d:b9:da:
cc:e8:6c:9e:97:f5:a4:42:89:cd:c0:3f:ce:97:55:ad:aa:a0:
c6:2f:1d:25:78:c4:ce:6e:39:c8:f7:25:6b:9f:6a:f1:90:79:
05:5d:3a:4f:a9:2e:3a:0a:0c:4e:25:3f:2d:81:08:1f:ff:fb:
3c:91:12:ea
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZQntcLcKGrDcj8BzgpJBurpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOTAwYTU1NTE4YjY3OWVkYzc4ZmFhOTg4M2VjNmU2MDM1
YWU3MWMwHhcNMjUwMTAyMTU1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTI3YjIyMmFiYTM3MmIwYjEyNWI5NDA2YTNjZGYwYTg5ODE0ZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaNDSNyHfHtiT4ADRUW1Bmp/iIa6
W6PTkk270F5RKn4i0xJQiVBOQmXVH+uZYSsv5Fl3erijTQJ/raOKuvyw6JAN188l
Da6Z99j2fJfOOf9Ol55DkOGzBAFWhWGOqrsraNNe8T0p4x47BMSHSXxHPZefpSKM
d2SrbnmN0pnWW8yOrU74s0BE+hoLhFKOlTW1LFaN869Zf2O9eAKyoaTeAEW/M9nK
qQKaNdsSwVmEtW5P5UzHqE4Cd+RJPAiu0NkJ8ISFcSAbWDvnkqqAD9tOS2iQJjn/
NAPklsGSYHHQb/M7YWnoiHTKjrHKUVlacF1u65K+0nV4GrFDxqIn72wJjQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPonsiKro3KwsSW5QGo83wqJgU+TMB8GA1UdIwQY
MBaAFO2QClVRi2ee3Hj6qYg+xuYDWuccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1pBS1ZWR0xaNTdjZVBxcGlEN0c1Z05hNXh3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYmZhY2MtYTRmMC00YmRiLWFiYmIt
MGY3MzY2MWQ1ZjM1LzEvMS1pZXlJcXVqY3JDeEpibEFhanpmQ29tQlQ1TS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGEvZmJmYWNjLWE0ZjAtNGJkYi1hYmJiLTBmNzM2NjFkNWYz
NS8xLzdaQUtWVkdMWjU3Y2VQcXBpRDdHNWdOYTV4dy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBngL
dDANBgkqhkiG9w0BAQsFAAOCAQEATyLHI8zbcm/ho8rZt12hgzfHGqu8JHLJpBzu
AodnY897HtZRl3sFleQemzZmOERWyR1Je5WiKrSD0r3URMpnXKfa1eXVN1Aphg8A
fRQWgmnD/JMdC3c7hqVOEvkofrihYs947zv+d9Rts0DpdDpfFqGlLqOalWVN5S77
Us8USgerSp+eNm07jewF7C+X7NaLkqwsUGeLUpnl7yv3DJO13M7i3+iVeZjCrGmu
LblNW4Knr6rUIOKH9wneCV6oZ/huWRFTfbnazOhsnpf1pEKJzcA/zpdVraqgxi8d
JXjEzm45yPcla59q8ZB5BV06T6kuOgoMTiU/LYEIH//7PJES6g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:31:18 2025 by rpki-client