Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa
File: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (raw, json)
Hash identifier: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=
Subject key identifier: 8F:53:91:E9:C2:D5:E0:01:51:43:F4:3C:01:80:82:E2:3B:04:01:8C
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B65095F969474E40B2C51DB9DA1E9F
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397514
IP address blocks: 2a01:488:bb15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:50:95:f9:69:47:4e:40:b2:c5:1d:b9:da:1e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f5391e9c2d5e0015143f43c018082e23b04018c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:ea:90:de:38:cd:14:75:48:ec:ec:d9:ca:
7d:07:30:89:c7:05:57:9f:71:52:f3:ad:5e:c8:9c:
ce:35:97:51:30:12:3d:9a:60:22:4e:3f:84:82:fb:
a0:44:01:44:f5:e0:1e:24:5a:58:44:8a:4e:25:b7:
09:40:c9:e1:26:87:bc:52:2e:3f:c2:bd:9b:ed:bc:
04:a7:47:c5:a1:f0:dc:52:bf:fe:05:3b:b3:a6:6f:
db:3f:8c:18:77:22:f4:eb:78:8d:3b:30:af:3f:ce:
a3:45:76:99:38:49:de:13:04:08:82:35:df:15:a2:
09:67:1b:a9:6c:81:66:b0:a1:12:d8:6c:8a:56:3b:
5e:38:41:f7:b6:e5:e2:30:33:2c:a8:3c:be:96:b0:
df:bf:bf:14:d5:02:45:d8:90:5d:4d:b4:1c:78:0b:
c8:bd:d4:13:f6:97:9e:37:d8:4f:a7:02:da:73:d3:
af:35:b3:53:18:60:9b:00:92:ee:89:d0:7b:89:3b:
bc:93:c1:50:bf:0f:7f:a6:9c:22:c8:03:ea:52:76:
07:9d:a8:18:e9:ad:61:ee:78:d4:a7:cc:8e:81:64:
9e:35:f1:8e:b5:dc:72:21:89:45:d9:11:e7:2a:b2:
d7:4e:33:be:d2:67:01:0e:6e:dd:07:ca:b0:11:53:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:53:91:E9:C2:D5:E0:01:51:43:F4:3C:01:80:82:E2:3B:04:01:8C
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb15::/48
Signature Algorithm: sha256WithRSAEncryption
9e:d4:55:22:14:97:8c:24:5e:21:b4:6c:9c:7d:12:9f:4c:54:
aa:a4:84:6b:4b:aa:25:1c:e7:c0:44:3b:c7:c9:c8:22:cb:b8:
64:56:3b:38:5f:73:2d:6c:f3:98:49:e0:b1:a1:35:c6:ef:d2:
15:bb:1a:4b:41:04:2d:e8:e7:b1:1b:83:a0:41:cb:41:91:2c:
5f:1a:a6:c3:6a:77:7c:a5:0c:3c:20:6a:ed:61:6f:73:26:7e:
af:e5:d5:89:75:0b:d1:fa:91:a6:65:00:75:da:92:d9:cc:5f:
75:59:fc:3e:04:f7:8f:b1:b9:5c:f6:58:f2:0c:08:d1:4e:ce:
bf:51:f0:be:69:0b:28:03:46:97:be:b7:d8:0b:c3:69:ec:fd:
95:3e:b8:79:77:d8:3c:02:2a:24:a8:dc:67:b8:1b:b4:a2:42:
86:c8:5d:ae:a0:8d:94:47:f3:ab:1f:87:c0:cb:e3:fe:f1:86:
d5:09:7d:39:26:ec:ab:6c:0b:b9:8b:d7:75:0c:d6:b8:b4:60:
f1:95:09:1d:84:1d:0c:9d:6b:24:cc:9a:61:48:93:fd:93:9f:
c9:2a:17:09:d6:15:da:96:6f:f1:1f:80:ba:70:36:02:04:92:
ce:c5:79:1a:b7:91:48:85:9f:b5:cb:39:5d:81:7c:fd:4f:9e:
89:ce:0e:4f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQntlCV+WlHTkCyxR252h6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUwMTAyMTU1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjUzOTFlOWMyZDVlMDAxNTE0M2Y0M2MwMTgwODJlMjNiMDQwMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwrqkN44zRR1SOzs2cp9BzCJxwVX
n3FS861eyJzONZdRMBI9mmAiTj+EgvugRAFE9eAeJFpYRIpOJbcJQMnhJoe8Ui4/
wr2b7bwEp0fFofDcUr/+BTuzpm/bP4wYdyL063iNOzCvP86jRXaZOEneEwQIgjXf
FaIJZxupbIFmsKES2GyKVjteOEH3tuXiMDMsqDy+lrDfv78U1QJF2JBdTbQceAvI
vdQT9peeN9hPpwLac9OvNbNTGGCbAJLuidB7iTu8k8FQvw9/ppwiyAPqUnYHnagY
6a1h7njUp8yOgWSeNfGOtdxyIYlF2RHnKrLXTjO+0mcBDm7dB8qwEVNAtQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFI9TkenC1eABUUP0PAGAguI7BAGMMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvajFPUjZjTFY0QUZSUV9ROEFZQ0M0anNFQVl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEEiLsV
MA0GCSqGSIb3DQEBCwUAA4IBAQCe1FUiFJeMJF4htGycfRKfTFSqpIRrS6olHOfA
RDvHycgiy7hkVjs4X3MtbPOYSeCxoTXG79IVuxpLQQQt6OexG4OgQctBkSxfGqbD
and8pQw8IGrtYW9zJn6v5dWJdQvR+pGmZQB12pLZzF91Wfw+BPePsblc9ljyDAjR
Ts6/UfC+aQsoA0aXvrfYC8Np7P2VPrh5d9g8AiokqNxnuBu0okKGyF2uoI2UR/Or
H4fAy+P+8YbVCX05JuyrbAu5i9d1DNa4tGDxlQkdhB0MnWskzJphSJP9k5/JKhcJ
1hXalm/xH4C6cDYCBJLOxXkat5FIhZ+1yzldgXz9T56Jzg5P
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:57 2025 by rpki-client