Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/DXb8g5-PypIL6EwTwBa5JTnxBKo.roa
File: DXb8g5-PypIL6EwTwBa5JTnxBKo.roa (raw, json)
Hash identifier: tOPfESlkZC7S5BHJvSJ7lgd26XQAVlBllx5t/n2Rb7Y=
Subject key identifier: 0D:76:FC:83:9F:8F:CA:92:0B:E8:4C:13:C0:16:B9:25:39:F1:04:AA
Certificate issuer: /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial: 019427B5C049FB2A22893DD3DA07074670C3
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/DXb8g5-PypIL6EwTwBa5JTnxBKo.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 2001:67c:420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c0:49:fb:2a:22:89:3d:d3:da:07:07:46:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d76fc839f8fca920be84c13c016b92539f104aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:5a:43:26:05:87:77:e3:c8:01:88:ad:3e:
31:4f:76:5e:0e:ef:e2:76:35:55:7e:6e:fd:88:ad:
bb:49:da:74:bb:eb:de:0f:91:62:9f:47:6f:73:89:
e5:8c:1c:82:e2:30:10:e4:84:35:60:df:55:bd:80:
24:8a:53:35:be:57:07:c0:22:5b:6d:ca:03:2b:b8:
67:f5:e8:ec:83:dc:f0:c9:2c:cf:54:47:39:e1:44:
e0:70:47:7f:2f:0c:7b:48:2c:b1:e9:3f:03:74:b7:
9b:27:41:bd:a6:90:ea:0d:95:38:81:aa:95:20:8e:
6a:86:10:a6:67:f6:c8:06:eb:3b:99:90:a5:94:eb:
69:f0:a1:e8:b1:06:42:58:9f:1d:11:f0:4c:87:25:
81:40:c2:b9:8d:01:d3:a3:9d:3f:05:1d:35:fc:36:
51:6a:4e:89:bb:09:e3:ad:99:e7:13:06:df:a2:94:
2e:ef:19:fd:aa:f4:f6:81:65:97:f4:31:bd:97:cf:
bc:59:a5:0d:76:c4:bb:b8:b0:7c:ea:34:0b:3b:01:
d9:be:b1:eb:8d:70:92:94:73:98:41:26:d0:2e:c9:
03:59:43:17:f9:9a:49:93:36:40:01:27:7e:ac:20:
9a:84:9f:f9:25:81:72:61:22:02:2d:2f:14:b4:d4:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:FC:83:9F:8F:CA:92:0B:E8:4C:13:C0:16:B9:25:39:F1:04:AA
X509v3 Authority Key Identifier:
keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/DXb8g5-PypIL6EwTwBa5JTnxBKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:420::/48
Signature Algorithm: sha256WithRSAEncryption
0d:40:f4:76:17:5a:d7:15:29:2a:c2:60:a9:d0:20:69:ba:75:
0f:a7:a8:55:65:3f:5e:63:0d:d3:2e:cf:f6:af:20:f4:4e:b2:
61:65:e2:a3:6e:27:27:39:5f:4d:f1:31:30:7d:2f:17:24:dd:
3a:70:94:b5:0d:d6:d0:ac:27:61:7d:26:50:f5:ba:a3:93:d8:
91:fc:b0:0f:a0:35:c8:ef:d7:2b:93:cb:36:4e:55:1a:a4:48:
76:e8:25:1c:6b:9d:73:5a:0c:d0:62:0e:f1:68:3f:f5:86:ab:
9b:ee:d6:fb:b0:e9:97:78:b9:8a:38:1e:34:48:d6:51:f5:1e:
6a:bc:04:69:79:35:5e:47:50:28:fb:16:92:63:cf:b5:ee:17:
58:50:c3:23:fc:9e:52:af:5b:9b:56:33:02:f0:1c:9d:5a:17:
59:70:c6:b0:13:08:74:79:92:92:d2:72:b0:36:14:6e:57:75:
6c:de:52:7f:cf:d2:e4:a9:ba:34:5d:1b:5c:04:97:a4:8f:ab:
c4:16:77:73:7d:e1:f5:b8:85:07:85:61:fe:4a:95:98:bf:cf:
f6:f6:27:3b:53:b4:97:8b:de:b7:71:ac:1c:da:3c:d0:cd:7f:
83:99:7c:83:13:1c:99:4f:3c:19:0e:7e:c7:a4:d0:3c:3a:9d:
1f:c5:d6:68
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQntcBJ+yoiiT3T2gcHRnDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMjJhYjZiYmU0MmVkOWNmMzY3YmIwMzE3ZGY3ZTY0MGUy
ODM2ZGMwHhcNMjUwMTAyMTU1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDc2ZmM4MzlmOGZjYTkyMGJlODRjMTNjMDE2YjkyNTM5ZjEwNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjERaQyYFh3fjyAGIrT4xT3ZeDu/i
djVVfm79iK27Sdp0u+veD5Fin0dvc4nljByC4jAQ5IQ1YN9VvYAkilM1vlcHwCJb
bcoDK7hn9ejsg9zwySzPVEc54UTgcEd/Lwx7SCyx6T8DdLebJ0G9ppDqDZU4gaqV
II5qhhCmZ/bIBus7mZCllOtp8KHosQZCWJ8dEfBMhyWBQMK5jQHTo50/BR01/DZR
ak6JuwnjrZnnEwbfopQu7xn9qvT2gWWX9DG9l8+8WaUNdsS7uLB86jQLOwHZvrHr
jXCSlHOYQSbQLskDWUMX+ZpJkzZAASd+rCCahJ/5JYFyYSICLS8UtNSLBQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFA12/IOfj8qSC+hME8AWuSU58QSqMB8GA1UdIwQY
MBaAFOoiq2u+Qu2c82e7AxfffmQOKDbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUt
MDY1ZWQ0ZDg0NDFmLzEvRFhiOGc1LVB5cElMNkV3VHdCYTVKVG54QktvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWEzYTItYWQ1My00NmE1LThmZDUtMDY1ZWQ0ZDg0NDFm
LzEvNmlLcmE3NUM3Wnp6WjdzREY5OS1aQTRvTnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAQg
MA0GCSqGSIb3DQEBCwUAA4IBAQANQPR2F1rXFSkqwmCp0CBpunUPp6hVZT9eYw3T
Ls/2ryD0TrJhZeKjbicnOV9N8TEwfS8XJN06cJS1DdbQrCdhfSZQ9bqjk9iR/LAP
oDXI79crk8s2TlUapEh26CUca51zWgzQYg7xaD/1hqub7tb7sOmXeLmKOB40SNZR
9R5qvARpeTVeR1Ao+xaSY8+17hdYUMMj/J5Sr1ubVjMC8BydWhdZcMawEwh0eZKS
0nKwNhRuV3Vs3lJ/z9Lkqbo0XRtcBJekj6vEFndzfeH1uIUHhWH+SpWYv8/29ic7
U7SXi963cawc2jzQzX+DmXyDExyZTzwZDn7HpNA8Op0fxdZo
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:52 2025 by rpki-client