Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/k8lkUNXkJfgLKxdnNkQeItf74mI.roa
File: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (raw, json)
Hash identifier: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=
Subject key identifier: 93:C9:64:50:D5:E4:25:F8:0B:2B:17:67:36:44:1E:22:D7:FB:E2:62
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 019427470B8D28D0C9F61B3ED1613F92F5B7
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/k8lkUNXkJfgLKxdnNkQeItf74mI.roa
Signing time: Thu 02 Jan 2025 13:49:14 +0000
ROA not before: Thu 02 Jan 2025 13:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215560
IP address blocks: 2a0f:6580:115::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:0b:8d:28:d0:c9:f6:1b:3e:d1:61:3f:92:f5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93c96450d5e425f80b2b176736441e22d7fbe262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:88:10:c4:25:a5:bc:88:79:c2:f0:b1:53:
0e:ec:87:12:7d:41:6c:f0:83:3e:da:b4:6b:7c:6a:
29:7f:c4:0f:0c:66:f2:f4:22:4d:bd:be:a7:6f:dd:
e0:fb:f6:ce:05:0c:db:c5:e7:28:72:73:c6:a8:3c:
4c:cf:05:21:58:b6:35:96:29:0d:2b:9a:2f:d1:60:
b0:d3:43:9f:61:31:2a:a4:8e:28:53:6b:22:75:c7:
db:54:a7:ca:d4:7a:b0:c6:99:1a:ea:a7:28:48:92:
25:67:52:80:cd:78:76:cf:3c:2e:e7:4c:73:5c:0a:
33:d9:77:a7:33:15:15:de:4c:f4:aa:c5:62:36:d2:
aa:6f:a4:f1:42:40:d2:64:69:44:32:23:78:a5:c0:
81:01:fa:3c:1c:42:ff:e4:2f:f8:bc:9e:28:ee:c7:
da:e1:9d:b9:10:5b:c1:71:ba:58:41:87:f0:d9:d5:
28:e2:12:6f:d7:d3:67:2a:d2:6f:d8:e7:dd:7f:7c:
cb:68:0e:d9:93:17:6c:67:98:5d:e3:9e:04:b6:a2:
b2:7f:58:58:27:1b:95:82:52:8f:b3:90:4a:14:3e:
02:65:62:e5:8e:bf:fd:4a:9d:fe:2e:8c:dc:90:b2:
b1:79:50:6f:93:50:bb:3c:f7:ae:ee:fc:c0:6c:ef:
20:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C9:64:50:D5:E4:25:F8:0B:2B:17:67:36:44:1E:22:D7:FB:E2:62
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/k8lkUNXkJfgLKxdnNkQeItf74mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:115::/48
Signature Algorithm: sha256WithRSAEncryption
81:a6:fe:8a:dc:c2:24:7d:08:e8:82:74:d4:d8:76:a3:99:ee:
b1:9b:e8:9a:f7:85:fa:5a:fa:e2:97:ce:09:d2:66:d7:ed:71:
d8:98:9e:e8:5d:66:bc:9b:6c:d1:8b:d5:8e:1e:91:c7:cc:2e:
c2:7b:a4:ca:55:58:3a:a1:12:e0:ee:ea:f3:45:1d:7f:79:f3:
c6:f9:63:69:57:70:85:3c:60:96:53:54:a8:bb:2c:ae:ce:52:
de:38:4a:ff:9d:8f:4e:71:b1:6a:3b:b0:de:b2:9f:cb:e7:fd:
6a:0c:ab:24:30:68:c7:4c:e5:e4:f9:13:3d:79:e7:23:ca:f7:
20:c7:0c:0b:61:96:a4:f4:bb:fb:8b:65:67:83:bb:21:a0:b4:
50:2e:a2:24:c4:90:21:72:0c:db:98:d8:aa:ae:02:ec:5c:57:
ec:45:92:8f:b6:75:f1:c6:63:5a:a9:a3:70:59:1e:d0:9b:e6:
5d:06:46:d3:60:9a:9f:45:85:a0:d1:e4:90:03:cf:87:5d:f2:
2e:69:a8:1d:63:c8:36:11:47:b2:11:aa:b7:6a:93:47:17:07:
c6:16:b6:1b:fb:5a:f5:c1:3c:24:76:5b:d1:43:10:08:7e:3d:
8c:73:7d:32:b7:29:db:c8:b0:76:45:b9:d6:64:5f:03:73:a6:
46:40:4b:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQnRwuNKNDJ9hs+0WE/kvW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1
N2E0OGIwHhcNMjUwMTAyMTM0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2M5NjQ1MGQ1ZTQyNWY4MGIyYjE3NjczNjQ0MWUyMmQ3ZmJlMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsECIEMQlpbyIecLwsVMO7IcSfUFs
8IM+2rRrfGopf8QPDGby9CJNvb6nb93g+/bOBQzbxecocnPGqDxMzwUhWLY1likN
K5ov0WCw00OfYTEqpI4oU2sidcfbVKfK1Hqwxpka6qcoSJIlZ1KAzXh2zzwu50xz
XAoz2XenMxUV3kz0qsViNtKqb6TxQkDSZGlEMiN4pcCBAfo8HEL/5C/4vJ4o7sfa
4Z25EFvBcbpYQYfw2dUo4hJv19NnKtJv2Ofdf3zLaA7ZkxdsZ5hd454EtqKyf1hY
JxuVglKPs5BKFD4CZWLljr/9Sp3+LozckLKxeVBvk1C7PPeu7vzAbO8g4QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJPJZFDV5CX4CysXZzZEHiLX++JiMB8GA1UdIwQY
MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt
YjIwZTI4ZjUxODhmLzEvazhsa1VOWGtKZmdMS3hkbk5rUWVJdGY3NG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm
LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9lgAEV
MA0GCSqGSIb3DQEBCwUAA4IBAQCBpv6K3MIkfQjognTU2Hajme6xm+ia94X6Wvri
l84J0mbX7XHYmJ7oXWa8m2zRi9WOHpHHzC7Ce6TKVVg6oRLg7urzRR1/efPG+WNp
V3CFPGCWU1SouyyuzlLeOEr/nY9OcbFqO7Desp/L5/1qDKskMGjHTOXk+RM9eecj
yvcgxwwLYZak9Lv7i2Vng7shoLRQLqIkxJAhcgzbmNiqrgLsXFfsRZKPtnXxxmNa
qaNwWR7Qm+ZdBkbTYJqfRYWg0eSQA8+HXfIuaagdY8g2EUeyEaq3apNHFwfGFrYb
+1r1wTwkdlvRQxAIfj2Mc30ytynbyLB2RbnWZF8Dc6ZGQEuj
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:32 2025 by rpki-client