Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/Egh3cL0v2_H-TY-QEmnrWnX0arg.roa
File: Egh3cL0v2_H-TY-QEmnrWnX0arg.roa (raw, json)
Hash identifier: uAUHTXbdFEHAhORw9S54HkonrjueALJUqc4yeHLWHu8=
Subject key identifier: 12:08:77:70:BD:2F:DB:F1:FE:4D:8F:90:12:69:EB:5A:75:F4:6A:B8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 0194258F4BD04AA161B0738D713E6EC814A6
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/Egh3cL0v2_H-TY-QEmnrWnX0arg.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202272
IP address blocks: 2a0f:4900::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4b:d0:4a:a1:61:b0:73:8d:71:3e:6e:c8:14:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12087770bd2fdbf1fe4d8f901269eb5a75f46ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:91:fa:bb:51:03:ac:25:20:99:94:a7:d4:
b2:86:05:08:27:d1:c5:d0:f0:11:20:c6:03:a9:e1:
cf:75:69:50:9f:56:e1:66:d8:a7:24:38:a5:1e:cd:
6d:af:ab:d7:0b:f9:a9:38:91:ae:34:2e:0a:f9:ad:
5f:d1:21:4b:c3:e0:5a:fb:a3:e5:30:b2:b9:fe:e7:
f6:37:fa:6e:29:95:06:a3:19:b0:bf:f2:e6:05:76:
39:f2:a4:e3:24:74:ab:8b:35:1a:70:5d:91:e9:79:
f0:10:31:70:4f:7c:f3:91:85:81:09:d8:99:eb:57:
ae:a5:07:be:09:7d:55:3b:46:b7:42:2f:5b:60:7a:
39:5d:9c:66:73:77:4f:f7:ae:53:13:09:70:55:1c:
b6:b8:33:54:44:1f:f3:e2:64:84:65:f9:f1:cd:e3:
de:75:f4:20:de:f9:6b:39:1b:8e:f3:20:84:b0:93:
3d:58:8e:4b:f3:94:4d:78:79:51:48:ba:ae:bc:ff:
fe:39:ed:26:2c:6e:c6:23:4e:39:19:db:ef:03:3a:
4c:40:55:f7:92:ae:90:44:62:af:da:b7:93:f2:68:
2e:29:3d:64:ac:06:b8:59:57:d3:6c:02:0a:b6:ce:
c2:03:ed:f6:6c:7f:71:23:3c:73:bc:94:3d:d5:be:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:08:77:70:BD:2F:DB:F1:FE:4D:8F:90:12:69:EB:5A:75:F4:6A:B8
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/Egh3cL0v2_H-TY-QEmnrWnX0arg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4900::/44
Signature Algorithm: sha256WithRSAEncryption
96:c9:c1:98:dd:09:42:42:67:38:56:ac:1b:51:80:4a:3b:3c:
4b:cc:28:92:4b:10:5d:d9:b2:fc:c8:bc:af:41:f3:da:08:3a:
9b:dc:2f:da:c9:57:4b:5c:d8:dc:b3:57:5d:38:e2:ed:37:ab:
02:e2:ef:2d:27:99:ca:e3:fb:87:af:51:40:8d:66:af:07:e8:
f8:88:53:83:d5:17:53:65:0b:2c:aa:3c:65:d5:19:b4:32:ee:
e1:e8:60:9a:f1:ad:31:de:e5:bc:d8:be:d5:61:0d:cd:1f:f4:
cf:c7:87:68:5a:96:a8:25:d4:62:d8:41:a1:6d:78:f3:dc:2d:
4a:83:7d:03:2b:44:f7:ea:7a:a1:1d:27:d2:45:7d:fd:8a:8c:
d4:33:2f:9f:5c:1f:31:e5:15:49:41:ec:20:08:1d:09:5f:28:
cf:cf:65:69:8a:17:d7:6c:6d:a3:f8:27:54:31:8e:de:f5:81:
46:3c:35:2b:d0:f2:a8:c2:d8:b2:13:53:06:d6:aa:d2:4e:e0:
e4:0c:1e:07:82:f7:73:92:cd:34:95:ba:12:d7:4d:8d:31:88:
72:cc:25:95:11:9f:a0:70:49:b5:35:f9:34:cb:9b:16:32:cf:
69:63:7c:09:3f:bc:99:ff:03:3c:f6:03:3c:60:b6:b8:19:dc:
af:7f:e0:0b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlj0vQSqFhsHONcT5uyBSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZjQ5Njk4NDJkZTljNGMxZTFhNTc1OWQ5OGQxZWQ1YzBk
NjJlZjgwHhcNMjUwMTAyMDU0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjA4Nzc3MGJkMmZkYmYxZmU0ZDhmOTAxMjY5ZWI1YTc1ZjQ2YWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKCR+rtRA6wlIJmUp9SyhgUIJ9HF
0PARIMYDqeHPdWlQn1bhZtinJDilHs1tr6vXC/mpOJGuNC4K+a1f0SFLw+Ba+6Pl
MLK5/uf2N/puKZUGoxmwv/LmBXY58qTjJHSrizUacF2R6XnwEDFwT3zzkYWBCdiZ
61eupQe+CX1VO0a3Qi9bYHo5XZxmc3dP965TEwlwVRy2uDNURB/z4mSEZfnxzePe
dfQg3vlrORuO8yCEsJM9WI5L85RNeHlRSLquvP/+Oe0mLG7GI045GdvvAzpMQFX3
kq6QRGKv2reT8mguKT1krAa4WVfTbAIKts7CA+32bH9xIzxzvJQ91b7WOQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBIId3C9L9vx/k2PkBJp61p19Gq4MB8GA1UdIwQY
MBaAFKr0lphC3pxMHhpXWdmNHtXA1i74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjct
ZjgxZmRmNzRlNjU1LzEvRWdoM2NMMHYyX0gtVFktUUVtbnJXblgwYXJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjctZjgxZmRmNzRlNjU1
LzEvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9JAAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCWycGY3QlCQmc4VqwbUYBKOzxLzCiSSxBd2bL8
yLyvQfPaCDqb3C/ayVdLXNjcs1ddOOLtN6sC4u8tJ5nK4/uHr1FAjWavB+j4iFOD
1RdTZQssqjxl1Rm0Mu7h6GCa8a0x3uW82L7VYQ3NH/TPx4doWpaoJdRi2EGhbXjz
3C1Kg30DK0T36nqhHSfSRX39iozUMy+fXB8x5RVJQewgCB0JXyjPz2VpihfXbG2j
+CdUMY7e9YFGPDUr0PKowtiyE1MG1qrSTuDkDB4Hgvdzks00lboS102NMYhyzCWV
EZ+gcEm1Nfk0y5sWMs9pY3wJP7yZ/wM89gM8YLa4Gdyvf+AL
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:12:11 2025 by rpki-client