Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa
File: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (raw, json)
Hash identifier: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=
Subject key identifier: 4F:74:F4:66:41:50:14:F5:1C:D8:11:1D:D2:8A:7B:B1:80:33:F1:70
Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140
Certificate serial: 0194221FC0D003B42F934CD030148B860177
Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa
Signing time: Wed 01 Jan 2025 13:48:13 +0000
ROA not before: Wed 01 Jan 2025 13:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8772
IP address blocks: 2a0a:e140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c0:d0:03:b4:2f:93:4c:d0:30:14:8b:86:01:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140
Validity
Not Before: Jan 1 13:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f74f466415014f51cd8111dd28a7bb18033f170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2c:f2:7a:5f:8a:90:6c:82:aa:10:0d:69:33:
7a:17:fe:11:8e:45:2b:dc:63:d6:0f:c1:dc:d8:bb:
a7:7b:a5:e9:e2:12:f1:57:73:e7:b5:9c:ba:d4:27:
47:28:da:f9:2c:94:92:c2:c4:94:de:04:5d:d7:95:
d6:98:8f:c0:a7:e3:30:56:0f:47:18:9b:9d:c5:9e:
e7:f8:95:0c:3c:d5:e7:58:b0:73:65:ae:cf:2d:51:
b1:28:2d:c1:53:c8:97:1b:4c:70:3b:e7:bb:a0:3e:
1b:87:a8:64:a6:d7:24:12:06:65:3c:8d:f8:45:26:
2c:fc:f1:f6:ca:cf:ff:9e:5d:ee:0d:ad:47:13:8c:
99:3d:ef:1f:9b:5e:00:7f:f3:f2:93:84:6c:ad:40:
9e:d2:92:7a:3a:8b:03:2e:ba:14:bc:1c:f1:1a:2e:
6d:aa:85:5d:56:c7:62:b5:df:89:fc:ba:56:84:c0:
1e:ef:e0:29:45:3f:77:c7:ef:74:70:be:8d:00:75:
bb:4c:7a:e4:5b:6b:5e:33:5d:2f:ec:1e:17:71:bd:
82:4d:a9:57:dd:5d:01:de:5a:e1:c1:bb:6b:53:de:
82:97:13:ae:26:3d:fc:83:7a:b4:4d:52:d7:b6:65:
a1:d3:e1:1c:36:77:36:54:c8:72:82:e2:67:8d:8b:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:74:F4:66:41:50:14:F5:1C:D8:11:1D:D2:8A:7B:B1:80:33:F1:70
X509v3 Authority Key Identifier:
keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e140::/29
Signature Algorithm: sha256WithRSAEncryption
31:05:92:d7:92:8b:f9:52:c5:9e:28:70:c7:f3:71:3b:1c:34:
80:40:74:29:39:28:7a:1a:f7:9e:e5:da:1c:d9:ed:ca:e2:bc:
c4:85:ec:41:a0:7f:fb:67:cc:d9:5e:3c:e6:67:b2:38:c9:cc:
f2:0e:3b:f3:53:75:01:87:a5:d3:35:9d:a2:db:77:59:77:b7:
db:65:60:80:ff:cc:c4:5c:94:d7:bd:8b:ed:a8:ca:36:1f:e1:
9d:fe:f7:4d:c0:69:26:1a:9a:83:9d:92:7b:a8:f9:02:e2:39:
45:62:8d:bb:dc:b9:a9:eb:d5:13:4b:81:28:d1:9a:0d:44:c8:
cf:4a:61:72:bb:76:48:23:22:2f:a5:b2:7a:72:c3:d7:e8:9a:
79:ae:57:7d:ac:a3:23:8d:78:a5:19:fb:49:86:48:70:c6:cf:
9d:e1:43:ec:5d:d8:4e:28:13:41:49:83:60:6c:4c:98:6f:3e:
22:cc:b3:ee:4a:1d:93:c6:ca:cf:b8:ca:31:2e:1d:f5:6d:ff:
7d:bf:d7:60:82:0f:d8:38:49:fd:be:ab:e9:b7:1c:b8:ff:cf:
a1:3d:07:e7:09:9f:45:f5:91:ee:bf:76:cc:34:71:34:e0:29:
29:20:75:fa:2d:9b:2b:c5:d2:e2:27:ba:29:a6:07:e9:13:ad:
f8:48:c6:11
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQiH8DQA7Qvk0zQMBSLhgF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGNiNTc0MWUyOTM1MmRkZDQyNDY5MjcwMTc4NTA2MDA4
YTQxNDAwHhcNMjUwMTAxMTM0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Zjc0ZjQ2NjQxNTAxNGY1MWNkODExMWRkMjhhN2JiMTgwMzNmMTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSzyel+KkGyCqhANaTN6F/4RjkUr
3GPWD8Hc2Lune6Xp4hLxV3PntZy61CdHKNr5LJSSwsSU3gRd15XWmI/Ap+MwVg9H
GJudxZ7n+JUMPNXnWLBzZa7PLVGxKC3BU8iXG0xwO+e7oD4bh6hkptckEgZlPI34
RSYs/PH2ys//nl3uDa1HE4yZPe8fm14Af/Pyk4RsrUCe0pJ6OosDLroUvBzxGi5t
qoVdVsditd+J/LpWhMAe7+ApRT93x+90cL6NAHW7THrkW2teM10v7B4Xcb2CTalX
3V0B3lrhwbtrU96ClxOuJj38g3q0TVLXtmWh0+EcNnc2VMhyguJnjYurBQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFE909GZBUBT1HNgRHdKKe7GAM/FwMB8GA1UdIwQY
MBaAFPTctXQeKTUt3UJGknAXhQYAikFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQt
ZjgzMDc3Nzk5NDViLzEvVDNUMFprRlFGUFVjMkJFZDBvcDdzWUF6OFhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQtZjgzMDc3Nzk5NDVi
LzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrhQDAN
BgkqhkiG9w0BAQsFAAOCAQEAMQWS15KL+VLFnihwx/NxOxw0gEB0KTkoehr3nuXa
HNntyuK8xIXsQaB/+2fM2V485meyOMnM8g4781N1AYel0zWdott3WXe322VggP/M
xFyU172L7ajKNh/hnf73TcBpJhqag52Se6j5AuI5RWKNu9y5qevVE0uBKNGaDUTI
z0phcrt2SCMiL6WyenLD1+iaea5XfayjI414pRn7SYZIcMbPneFD7F3YTigTQUmD
YGxMmG8+Isyz7kodk8bKz7jKMS4d9W3/fb/XYIIP2DhJ/b6r6bccuP/PoT0H5wmf
RfWR7r92zDRxNOApKSB1+i2bK8XS4ie6KaYH6ROt+EjGEQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:28 2025 by rpki-client