Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/1CUYBHeno8DyBiBJk58s01Vn7kE.roa
File: 1CUYBHeno8DyBiBJk58s01Vn7kE.roa (raw, json)
Hash identifier: Ac/cK8Y5Q3k/sidFyKghklZaDLlcZdtQLnDhxt2bSNo=
Subject key identifier: D4:25:18:04:77:A7:A3:C0:F2:06:20:49:93:9F:2C:D3:55:67:EE:41
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 01941F8C44CE972A2DE1D5977DFFEF98CD6A
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/1CUYBHeno8DyBiBJk58s01Vn7kE.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215871
IP address blocks: 2a14:1f80::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:44:ce:97:2a:2d:e1:d5:97:7d:ff:ef:98:cd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d425180477a7a3c0f2062049939f2cd35567ee41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:36:5f:e3:38:e1:b4:82:76:d9:d3:48:7d:
a7:fa:70:6d:21:cb:ed:89:87:41:8c:f9:2a:ee:fd:
5d:11:8f:03:3a:22:76:bb:77:0d:bd:d3:25:dc:3c:
e0:25:14:33:b6:ec:90:27:18:43:41:df:7a:eb:51:
7d:e7:7d:bb:ae:9d:87:dd:9e:39:f2:8b:89:f3:75:
32:a0:c5:ba:89:36:f3:77:73:31:7b:6c:77:78:1f:
66:0e:35:88:c9:18:00:4f:bc:e0:47:46:31:f8:87:
24:92:e6:7c:d7:ce:5b:c8:58:dc:c0:ce:e4:f0:50:
dc:d9:0c:e7:aa:45:37:92:36:42:84:0c:85:54:cb:
2a:bb:e5:cb:b6:3a:6b:b6:57:cd:56:39:92:31:e8:
b3:c2:e0:96:80:e5:2e:8a:85:3c:2d:44:99:eb:ea:
cd:cd:e7:90:2c:15:46:89:23:f6:02:5d:3e:47:0b:
bf:a5:c3:b2:b0:54:c9:50:e7:71:49:91:3e:02:22:
2e:a5:29:f1:8c:48:2b:e8:bf:3c:bb:37:20:9c:c9:
4f:e8:3c:ef:48:f9:f1:28:14:31:9e:31:24:93:d8:
b2:82:61:1f:1d:4d:df:f1:9c:f7:a2:c3:42:87:76:
ce:2e:a7:cb:d9:18:2d:f9:4f:4d:3b:5e:e3:42:99:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:18:04:77:A7:A3:C0:F2:06:20:49:93:9F:2C:D3:55:67:EE:41
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/1CUYBHeno8DyBiBJk58s01Vn7kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
32:76:ca:21:22:e6:cc:4e:ef:0a:b3:54:34:83:96:07:d9:8a:
d1:1b:d6:85:ec:d4:77:06:5b:2b:e4:8c:44:67:73:87:bf:42:
85:44:c0:43:9e:0d:ad:e6:2a:c3:0c:a9:ed:8c:48:b4:a9:79:
9e:5e:cf:8b:7f:f8:44:2a:7c:be:1f:6c:33:7c:d0:a8:5d:aa:
4f:01:ae:99:8d:6c:a5:9c:16:94:5e:70:7d:9c:29:8a:ef:b3:
a8:fc:f5:3e:94:f1:75:8a:09:0b:87:53:04:49:76:af:ac:46:
29:f3:04:32:be:42:24:2b:2a:6a:63:aa:f7:97:73:0b:59:6e:
a7:0a:ed:8f:a5:25:ef:32:f1:63:f0:15:c2:d3:bc:6e:8f:d0:
86:ab:67:ec:ed:72:5b:1b:0c:cd:68:3a:b8:64:a4:2f:0a:19:
e2:74:88:d5:22:72:80:38:45:dd:ad:68:8e:5d:05:b6:88:f9:
fb:30:3c:63:11:e4:b8:35:e4:03:fc:c1:3a:23:6c:58:31:57:
98:5b:99:0a:13:fb:99:73:52:b8:09:fb:7f:1d:28:de:e2:0b:
61:1d:93:2a:c9:25:0f:01:8d:38:09:20:c3:f3:62:26:53:47:
8a:ea:fc:3b:70:2e:17:00:d4:d5:09:4f:a7:34:a6:6f:ef:87:
84:ce:e5:b0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQfjETOlyot4dWXff/vmM1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj
ZWYzMTEwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDI1MTgwNDc3YTdhM2MwZjIwNjIwNDk5MzlmMmNkMzU1NjdlZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyg2X+M44bSCdtnTSH2n+nBtIcvt
iYdBjPkq7v1dEY8DOiJ2u3cNvdMl3DzgJRQztuyQJxhDQd9661F95327rp2H3Z45
8ouJ83UyoMW6iTbzd3Mxe2x3eB9mDjWIyRgAT7zgR0Yx+IckkuZ8185byFjcwM7k
8FDc2QznqkU3kjZChAyFVMsqu+XLtjprtlfNVjmSMeizwuCWgOUuioU8LUSZ6+rN
zeeQLBVGiSP2Al0+Rwu/pcOysFTJUOdxSZE+AiIupSnxjEgr6L88uzcgnMlP6Dzv
SPnxKBQxnjEkk9iygmEfHU3f8Zz3osNCh3bOLqfL2Rgt+U9NO17jQpmXnQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNQlGAR3p6PA8gYgSZOfLNNVZ+5BMB8GA1UdIwQY
MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct
YzhmMTgyZTk1ZWE1LzEvMUNVWUJIZW5vOER5QmlCSms1OHMwMVZuN2tFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1
LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQfgDAN
BgkqhkiG9w0BAQsFAAOCAQEAMnbKISLmzE7vCrNUNIOWB9mK0RvWhezUdwZbK+SM
RGdzh79ChUTAQ54NreYqwwyp7YxItKl5nl7Pi3/4RCp8vh9sM3zQqF2qTwGumY1s
pZwWlF5wfZwpiu+zqPz1PpTxdYoJC4dTBEl2r6xGKfMEMr5CJCsqamOq95dzC1lu
pwrtj6Ul7zLxY/AVwtO8bo/Qhqtn7O1yWxsMzWg6uGSkLwoZ4nSI1SJygDhF3a1o
jl0Ftoj5+zA8YxHkuDXkA/zBOiNsWDFXmFuZChP7mXNSuAn7fx0o3uILYR2TKskl
DwGNOAkgw/NiJlNHiur8O3AuFwDU1QlPpzSmb++HhM7lsA==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:02:19 2025 by rpki-client