Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/E6amiYi53XMdG38KpjAggGoL-xU.roa
File: E6amiYi53XMdG38KpjAggGoL-xU.roa (raw, json)
Hash identifier: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=
Subject key identifier: 13:A6:A6:89:88:B9:DD:73:1D:1B:7F:0A:A6:30:20:80:6A:0B:FB:15
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 01941FFA04CFD279E9B73423372B5FD213A3
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/E6amiYi53XMdG38KpjAggGoL-xU.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57763
IP address blocks: 2001:67c:2c2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:04:cf:d2:79:e9:b7:34:23:37:2b:5f:d2:13:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13a6a68988b9dd731d1b7f0aa63020806a0bfb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:03:8f:3b:60:6e:d6:15:6d:f5:bc:13:04:
8e:18:9d:bb:29:68:7c:b7:12:98:ab:6e:b4:df:21:
45:27:f5:26:4b:8c:4b:18:38:d2:69:30:34:b8:95:
02:5e:f4:28:d2:e4:92:05:dc:21:2e:49:30:3e:51:
72:0b:d1:c3:72:29:03:a2:49:a1:a5:2d:43:ab:76:
cb:40:f4:48:8e:2b:17:bd:74:18:67:48:75:2a:1a:
80:fe:c6:cf:02:f5:3f:8c:ba:c1:65:7b:f7:74:f0:
ec:3c:f8:cd:f6:49:ab:dc:3c:08:03:9a:46:82:23:
ee:df:86:0f:d8:ea:2d:31:8d:be:55:28:4f:1f:48:
0d:f4:fa:aa:40:b7:25:0e:83:9a:a5:8e:19:fe:dd:
82:c9:a1:77:5e:3e:2c:f8:27:0b:cf:cd:b9:4f:67:
13:d6:a1:8b:08:c5:a4:e7:d5:13:ce:ce:4d:ec:c0:
e5:56:24:cb:6b:8b:c2:5b:3e:f1:c8:87:50:c0:a4:
8c:6f:2e:55:e6:6f:a8:2d:80:9e:ec:0a:89:8b:1c:
23:7b:1a:e6:bf:ce:ba:81:94:7b:0d:3c:bc:ba:5b:
09:78:c0:af:b1:55:49:c9:8e:13:e3:cc:a1:4e:7a:
b9:45:a9:c5:69:85:f4:38:55:de:51:3f:cb:5e:d4:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A6:A6:89:88:B9:DD:73:1D:1B:7F:0A:A6:30:20:80:6A:0B:FB:15
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/E6amiYi53XMdG38KpjAggGoL-xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c2c::/48
Signature Algorithm: sha256WithRSAEncryption
67:24:8f:23:50:18:22:05:60:f0:6c:1c:be:75:88:98:3b:ad:
5e:fd:fb:dc:40:e1:65:c0:d9:06:df:6f:c4:18:78:11:06:72:
af:ca:22:80:bb:fb:5b:6f:18:57:f5:93:19:9d:f7:c7:98:29:
9f:08:b6:f2:f1:0d:73:e0:d2:c5:0c:20:1d:0d:92:ca:b7:33:
a2:c9:49:f9:70:43:a6:bb:b8:c2:bc:ff:7d:75:96:41:21:fa:
b4:89:40:99:58:ea:f2:5b:b6:5b:c4:30:2d:b8:f5:d8:76:9e:
c7:5b:55:96:04:24:86:2d:67:2e:62:eb:59:16:a7:4d:a5:fb:
11:f0:b7:d8:bb:e0:bb:47:9f:8d:2c:63:56:4a:f7:65:f3:dc:
a7:05:c2:32:cb:e6:73:24:be:28:aa:46:6a:08:0d:99:51:8d:
08:13:cf:fb:e7:43:d5:25:d7:bc:28:a2:5e:13:e5:22:81:5b:
c1:3d:ec:40:23:77:0f:50:f1:0c:7f:0f:29:7c:c1:ef:d4:ce:
b3:ab:fa:e3:74:8c:3a:d1:0a:52:f2:d3:e5:71:74:92:fa:b9:
58:9d:4c:d0:96:75:65:f3:6b:7d:55:65:98:49:5a:db:ad:d5:
d3:c4:e8:21:bc:17:49:5a:2d:37:9b:38:91:dd:54:81:fa:de:
88:c4:58:1b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+gTP0nnptzQjNytf0hOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzE4YWY2YTM2ZjY2YTkxOTM5MzY0YWFmYzg2NDQ1YWI4
YTZlMGUwHhcNMjUwMTAxMDM0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2E2YTY4OTg4YjlkZDczMWQxYjdmMGFhNjMwMjA4MDZhMGJmYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYoDjztgbtYVbfW8EwSOGJ27KWh8
txKYq2603yFFJ/UmS4xLGDjSaTA0uJUCXvQo0uSSBdwhLkkwPlFyC9HDcikDokmh
pS1Dq3bLQPRIjisXvXQYZ0h1KhqA/sbPAvU/jLrBZXv3dPDsPPjN9kmr3DwIA5pG
giPu34YP2OotMY2+VShPH0gN9PqqQLclDoOapY4Z/t2CyaF3Xj4s+CcLz825T2cT
1qGLCMWk59UTzs5N7MDlViTLa4vCWz7xyIdQwKSMby5V5m+oLYCe7AqJixwjexrm
v866gZR7DTy8ulsJeMCvsVVJyY4T48yhTnq5RanFaYX0OFXeUT/LXtRrdQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBOmpomIud1zHRt/CqYwIIBqC/sVMB8GA1UdIwQY
MBaAFFRxivajb2apGTk2Sq/IZEWrim4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYt
YmVkNTVjNDdhNTc4LzEvRTZhbWlZaTUzWE1kRzM4S3BqQWdnR29MLXhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYtYmVkNTVjNDdhNTc4
LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCws
MA0GCSqGSIb3DQEBCwUAA4IBAQBnJI8jUBgiBWDwbBy+dYiYO61e/fvcQOFlwNkG
32/EGHgRBnKvyiKAu/tbbxhX9ZMZnffHmCmfCLby8Q1z4NLFDCAdDZLKtzOiyUn5
cEOmu7jCvP99dZZBIfq0iUCZWOryW7ZbxDAtuPXYdp7HW1WWBCSGLWcuYutZFqdN
pfsR8LfYu+C7R5+NLGNWSvdl89ynBcIyy+ZzJL4oqkZqCA2ZUY0IE8/750PVJde8
KKJeE+UigVvBPexAI3cPUPEMfw8pfMHv1M6zq/rjdIw60QpS8tPlcXSS+rlYnUzQ
lnVl82t9VWWYSVrbrdXTxOghvBdJWi03mziR3VSB+t6IxFgb
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:08:43 2025 by rpki-client