Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa
File: D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa (raw, json)
Hash identifier: pLl10ejVKSmOKcwrzyb02NjjAckX++6l+yonzmG4CME=
Subject key identifier: 0F:A2:81:66:D7:61:02:9E:D1:D9:0D:58:8A:A1:12:65:0F:0E:79:70
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 0194258F9DCD07254CA84DA06508002180C0
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30736
IP address blocks: 82.103.128.0/18 maxlen: 18
2a00:9080::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9d:cd:07:25:4c:a8:4d:a0:65:08:00:21:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fa28166d761029ed1d90d588aa112650f0e7970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:fe:7d:57:46:d6:da:ad:54:4b:9b:8e:92:
db:83:7e:d5:24:79:c9:8c:d0:31:b2:cf:0f:08:e3:
b9:98:c0:1b:dd:29:96:41:d3:a8:f2:fa:bc:01:59:
09:f4:2c:1a:5d:e3:c3:b3:4f:91:e3:78:83:7c:2e:
e8:2b:83:ea:5e:53:59:81:ef:1c:8e:72:44:b1:3e:
41:ba:d3:d9:bf:4d:0a:7a:34:f6:93:3d:62:1c:c6:
10:1b:f6:a3:75:f1:3a:01:47:2c:15:14:b0:a9:53:
f8:80:4a:1a:38:39:ca:1f:9c:5b:f1:c5:b9:b2:e6:
62:28:b2:21:d7:fc:60:b5:63:25:be:42:42:1d:c3:
f7:3d:a3:7a:24:14:84:0a:49:5a:95:60:e8:a5:5e:
41:98:2e:90:a0:57:35:e6:eb:b2:24:7e:78:cd:c6:
45:41:2e:43:c0:af:a5:da:8a:32:36:b4:a6:7e:49:
41:55:f8:11:82:26:21:0e:be:3d:ea:42:2b:ab:1d:
17:01:76:d3:30:05:d9:2d:6b:7a:7d:1e:92:53:48:
9c:a7:0a:4d:75:d7:a2:9d:35:07:ce:3d:67:c1:4a:
b0:ca:c5:f5:f5:78:c5:6c:9d:f5:f0:44:0e:1b:f8:
ef:d2:30:80:e3:15:db:73:b4:86:7f:de:4e:d4:79:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:81:66:D7:61:02:9E:D1:D9:0D:58:8A:A1:12:65:0F:0E:79:70
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/D6KBZtdhAp7R2Q1YiqESZQ8OeXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.128.0/18
IPv6:
2a00:9080::/32
Signature Algorithm: sha256WithRSAEncryption
2f:1f:23:de:43:17:75:01:0c:a6:a5:ec:d9:dc:9a:00:b4:c3:
56:d1:78:44:23:68:42:2a:d2:66:58:8b:39:a6:34:2f:cb:c3:
72:eb:af:28:09:9b:bd:ce:f8:ae:a9:a5:ef:6b:0b:87:60:53:
07:4d:a5:7a:00:8c:d4:b9:27:98:ff:a6:3e:4f:c2:3e:a0:0a:
d5:93:8b:23:48:7d:53:54:13:f6:d5:ee:cd:0d:8d:b0:cc:6e:
10:9c:90:53:9e:e4:4e:43:7f:05:03:9f:09:1c:22:ad:7a:af:
3d:6d:f7:8a:56:d3:b6:cd:c5:de:ff:b0:ab:5d:ea:6e:8a:26:
96:dc:b0:4e:c1:db:d5:d7:40:f2:30:6c:13:1e:fb:50:f2:31:
5b:78:2b:03:05:67:5e:7f:8b:0c:0d:05:cc:0c:b3:bc:63:d2:
86:a2:d5:85:2b:2b:08:33:86:06:13:f8:45:43:60:d1:ae:7e:
a4:0d:53:cb:9a:0e:56:2e:67:91:02:59:ff:c1:a8:22:b2:9f:
3f:6f:f2:1c:7c:99:8f:e7:6c:49:65:57:d7:50:be:7b:92:b9:
df:b8:2e:a1:b9:f3:a9:54:18:b8:1a:a7:f1:16:4c:da:30:49:
06:0b:ff:19:1d:8c:54:87:a2:df:40:98:9d:37:90:66:51:c2:
ad:b6:bb:2a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlj53NByVMqE2gZQgAIYDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4
ZjQ3MGYwHhcNMjUwMTAyMDU0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmEyODE2NmQ3NjEwMjllZDFkOTBkNTg4YWExMTI2NTBmMGU3OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnD+fVdG1tqtVEubjpLbg37VJHnJ
jNAxss8PCOO5mMAb3SmWQdOo8vq8AVkJ9CwaXePDs0+R43iDfC7oK4PqXlNZge8c
jnJEsT5ButPZv00KejT2kz1iHMYQG/ajdfE6AUcsFRSwqVP4gEoaODnKH5xb8cW5
suZiKLIh1/xgtWMlvkJCHcP3PaN6JBSECklalWDopV5BmC6QoFc15uuyJH54zcZF
QS5DwK+l2ooyNrSmfklBVfgRgiYhDr496kIrqx0XAXbTMAXZLWt6fR6SU0icpwpN
ddeinTUHzj1nwUqwysX19XjFbJ318EQOG/jv0jCA4xXbc7SGf95O1HnHhwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA+igWbXYQKe0dkNWIqhEmUPDnlwMB8GA1UdIwQY
MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt
N2VlZGY0ZGQ2YzEzLzEvRDZLQlp0ZGhBcDdSMlExWWlxRVNaUThPZVhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz
LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGUmeAMA0E
AgACMAcDBQAqAJCAMA0GCSqGSIb3DQEBCwUAA4IBAQAvHyPeQxd1AQympezZ3JoA
tMNW0XhEI2hCKtJmWIs5pjQvy8Ny668oCZu9zviuqaXvawuHYFMHTaV6AIzUuSeY
/6Y+T8I+oArVk4sjSH1TVBP21e7NDY2wzG4QnJBTnuROQ38FA58JHCKteq89bfeK
VtO2zcXe/7CrXepuiiaW3LBOwdvV10DyMGwTHvtQ8jFbeCsDBWdef4sMDQXMDLO8
Y9KGotWFKysIM4YGE/hFQ2DRrn6kDVPLmg5WLmeRAln/wagisp8/b/IcfJmP52xJ
ZVfXUL57krnfuC6hufOpVBi4GqfxFkzaMEkGC/8ZHYxUh6LfQJidN5BmUcKttrsq
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:58:58 2025 by rpki-client