Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/lHo6E8O3jVZPWE_3CSGUh-yWmns.roa
File: lHo6E8O3jVZPWE_3CSGUh-yWmns.roa (raw, json)
Hash identifier: EcydcckC44FXLMG0RzB+bDpZsk7fNTw0ZBUYetuTeMA=
Subject key identifier: 94:7A:3A:13:C3:B7:8D:56:4F:58:4F:F7:09:21:94:87:EC:96:9A:7B
Certificate issuer: /CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Certificate serial: 019421B214AF186CCEE1D521EFBB8441E010
Authority key identifier: 67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/lHo6E8O3jVZPWE_3CSGUh-yWmns.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 217.68.224.0/20 maxlen: 20
2a01:9320::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:14:af:18:6c:ce:e1:d5:21:ef:bb:84:41:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c25a41f1c5228e10ea941ce7078f43cd909b63
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=947a3a13c3b78d564f584ff709219487ec969a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:ed:25:94:0e:63:cd:f3:be:53:e4:f0:37:
b0:ad:47:ca:d3:28:6f:c9:cc:0c:94:da:42:ae:8e:
38:6c:bb:c2:cc:fa:bc:9d:2c:38:3f:f0:9e:1a:78:
7b:b4:71:a6:3f:8b:e4:c1:8f:23:da:59:88:b6:c5:
53:fd:a8:4c:9b:00:19:bd:87:47:f4:3a:68:26:6b:
1a:b0:3d:f2:51:71:30:d6:1d:8a:a4:f8:d8:70:ff:
c1:4f:a0:33:23:29:0a:c5:e1:e7:34:73:89:e3:71:
b6:ad:a7:8e:79:45:21:14:96:b1:f4:0c:39:90:70:
30:d7:0c:26:fd:95:2e:4d:30:bc:cd:d6:49:84:d1:
31:e0:58:1d:d6:41:8c:93:e1:b1:df:ac:d8:b4:c0:
6f:48:8a:eb:af:ff:5b:7f:d1:c0:a9:04:9c:36:a9:
ff:0b:43:41:e6:84:4b:8c:41:1c:2e:fc:c0:a8:e6:
46:e3:61:43:91:75:ae:35:d3:b2:63:51:19:aa:11:
9a:e1:27:6f:6d:2a:85:ab:fa:1a:62:ed:2d:55:6f:
82:a2:cd:1f:86:fc:2b:5b:53:14:a0:17:ae:5b:b8:
ae:b9:59:fc:ec:dc:e6:1d:ff:77:5f:15:64:74:9c:
2d:2d:1d:bb:9e:ff:1d:0a:19:f5:ff:6b:be:15:e8:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7A:3A:13:C3:B7:8D:56:4F:58:4F:F7:09:21:94:87:EC:96:9A:7B
X509v3 Authority Key Identifier:
keyid:67:C2:5A:41:F1:C5:22:8E:10:EA:94:1C:E7:07:8F:43:CD:90:9B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/lHo6E8O3jVZPWE_3CSGUh-yWmns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a1a6c2-d7c1-42e8-a38f-fc910c0b19ae/1/Z8JaQfHFIo4Q6pQc5wePQ82Qm2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.68.224.0/20
IPv6:
2a01:9320::/32
Signature Algorithm: sha256WithRSAEncryption
5c:13:90:01:da:5b:af:4a:7c:d6:cd:5b:0c:0c:6c:58:5d:34:
89:0c:71:b5:15:e2:a3:29:d6:5a:b8:24:c6:32:b6:d0:65:ac:
59:5a:14:b2:3a:31:55:67:e8:71:a6:d9:a7:31:7e:8a:af:da:
72:ce:0d:0b:41:fb:11:5d:8b:35:55:65:fd:c4:a9:6c:ad:b1:
4f:f5:bb:fd:8f:79:22:4f:75:95:48:e5:1f:73:ab:ce:cd:f0:
cb:0e:b1:a7:53:7a:e0:64:a5:3c:03:41:d6:e7:4c:8c:6b:60:
46:aa:bb:42:d9:87:51:38:57:77:f2:ac:f0:dd:7d:5a:74:64:
59:62:44:ec:d4:16:8a:17:5f:8c:f9:36:49:ec:f1:62:3a:88:
1e:70:51:ee:1f:53:aa:d0:fe:f2:f4:1f:ed:a9:dd:e8:cf:63:
e2:fa:7a:ab:be:40:a0:11:8d:2c:5c:fa:e9:eb:f0:a5:65:ac:
64:f6:7c:f4:0d:fc:d1:74:70:52:66:67:91:86:b4:9c:ac:57:
07:eb:f7:83:62:e7:58:27:78:3f:1b:0b:a0:aa:40:1c:c9:a3:
bc:5d:11:4c:22:0d:a1:b2:c3:55:52:57:ac:f0:0e:e4:a9:27:
22:b8:30:b0:aa:0e:ca:51:ea:79:90:c4:59:8c:e1:df:11:04:
9f:e1:18:31
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhshSvGGzO4dUh77uEQeAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzI1YTQxZjFjNTIyOGUxMGVhOTQxY2U3MDc4ZjQzY2Q5
MDliNjMwHhcNMjUwMTAxMTE0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDdhM2ExM2MzYjc4ZDU2NGY1ODRmZjcwOTIxOTQ4N2VjOTY5YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVztJZQOY83zvlPk8DewrUfK0yhv
ycwMlNpCro44bLvCzPq8nSw4P/CeGnh7tHGmP4vkwY8j2lmItsVT/ahMmwAZvYdH
9DpoJmsasD3yUXEw1h2KpPjYcP/BT6AzIykKxeHnNHOJ43G2raeOeUUhFJax9Aw5
kHAw1wwm/ZUuTTC8zdZJhNEx4Fgd1kGMk+Gx36zYtMBvSIrrr/9bf9HAqQScNqn/
C0NB5oRLjEEcLvzAqOZG42FDkXWuNdOyY1EZqhGa4SdvbSqFq/oaYu0tVW+Cos0f
hvwrW1MUoBeuW7iuuVn87NzmHf93XxVkdJwtLR27nv8dChn1/2u+FejuRwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJR6OhPDt41WT1hP9wkhlIfslpp7MB8GA1UdIwQY
MBaAFGfCWkHxxSKOEOqUHOcHj0PNkJtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYt
ZmM5MTBjMGIxOWFlLzEvbEhvNkU4TzNqVlpQV0VfM0NTR1VoLXlXbW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hMWE2YzItZDdjMS00MmU4LWEzOGYtZmM5MTBjMGIxOWFl
LzEvWjhKYVFmSEZJbzRRNnBRYzV3ZVBRODJRbTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2UTgMA0E
AgACMAcDBQAqAZMgMA0GCSqGSIb3DQEBCwUAA4IBAQBcE5AB2luvSnzWzVsMDGxY
XTSJDHG1FeKjKdZauCTGMrbQZaxZWhSyOjFVZ+hxptmnMX6Kr9pyzg0LQfsRXYs1
VWX9xKlsrbFP9bv9j3kiT3WVSOUfc6vOzfDLDrGnU3rgZKU8A0HW50yMa2BGqrtC
2YdROFd38qzw3X1adGRZYkTs1BaKF1+M+TZJ7PFiOogecFHuH1Oq0P7y9B/tqd3o
z2Pi+nqrvkCgEY0sXPrp6/ClZaxk9nz0DfzRdHBSZmeRhrScrFcH6/eDYudYJ3g/
GwugqkAcyaO8XRFMIg2hssNVUles8A7kqSciuDCwqg7KUep5kMRZjOHfEQSf4Rgx
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:35:21 2025 by rpki-client