Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/61UyfBTunyCMJkhdliaNTEsRPqw.roa
File: 61UyfBTunyCMJkhdliaNTEsRPqw.roa (raw, json)
Hash identifier: zbFdplnY+4cU+fq+u+a7E4xaIdeplzTZkS5WW+avh1U=
Subject key identifier: EB:55:32:7C:14:EE:9F:20:8C:26:48:5D:96:26:8D:4C:4B:11:3E:AC
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222029BECDDA75175B6075DF6871A9E2
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/61UyfBTunyCMJkhdliaNTEsRPqw.roa
Signing time: Wed 01 Jan 2025 13:48:40 +0000
ROA not before: Wed 01 Jan 2025 13:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200160
IP address blocks: 2a0e:8f02:f057::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:29:be:cd:da:75:17:5b:60:75:df:68:71:a9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb55327c14ee9f208c26485d96268d4c4b113eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:3c:d1:c4:97:41:ae:c7:87:3b:48:e3:1e:
79:b9:36:bc:55:43:8e:38:6e:9f:62:4f:13:5f:96:
29:c1:70:1b:c9:50:c8:7d:14:fa:0f:81:d4:5c:99:
c3:96:79:23:5e:d5:bb:7f:f1:b6:5b:18:0c:22:d7:
e7:da:d8:96:8d:a0:a0:ad:00:c5:b5:b3:d5:ab:25:
7f:36:9f:1d:95:1e:97:88:a2:2c:4f:60:bf:d4:d3:
d3:66:ab:33:5f:cb:e4:54:09:bc:cf:6f:0a:68:91:
e7:35:65:86:de:68:51:42:00:b1:ae:a8:1f:e8:a3:
9f:b3:94:85:76:d8:b5:f0:c1:5f:a0:28:c4:70:29:
9f:45:fd:56:4c:9c:c3:28:00:b3:11:76:0c:69:f3:
d9:f4:bd:64:7e:31:a8:fe:f3:c6:b9:8e:47:9d:35:
a3:8e:3d:e8:97:2c:6e:d6:e5:79:65:2f:ac:f3:1c:
21:3a:7c:30:ac:a6:1f:ca:62:f1:65:17:1e:bd:ff:
0d:82:f3:9a:21:21:41:94:23:46:1d:3d:f6:e3:39:
e1:17:1a:bf:84:35:d0:90:88:87:f9:7e:00:60:14:
80:4e:4a:8d:bf:ca:c2:a8:60:91:b0:09:6b:53:97:
83:b9:f2:a8:98:a9:8c:29:bd:c1:2b:1c:56:e1:b7:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:32:7C:14:EE:9F:20:8C:26:48:5D:96:26:8D:4C:4B:11:3E:AC
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/61UyfBTunyCMJkhdliaNTEsRPqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f057::/48
Signature Algorithm: sha256WithRSAEncryption
6b:4b:85:89:69:ba:57:3c:02:82:38:95:3e:9f:84:a0:29:76:
1c:e7:a7:5f:bc:d3:cd:73:0e:2b:84:1f:5f:ad:a6:b2:15:4d:
82:67:c1:31:0e:f1:d6:ac:f1:d6:5b:34:3a:0b:4d:18:7f:c6:
75:d7:70:df:af:34:a0:cc:69:2c:dc:3e:4f:e0:84:f3:c2:7e:
02:3b:22:fc:b7:18:cb:6d:ab:ce:82:64:a4:4b:55:77:8c:2d:
9d:62:31:14:cb:aa:14:2b:35:e6:db:02:77:cd:a7:b7:42:f0:
7a:b7:4f:20:03:f8:d8:8c:fd:c1:cd:b7:3c:bd:bf:4d:5b:7f:
18:30:cd:5e:a5:50:69:cb:d4:11:e7:ef:a2:5b:84:df:b9:d8:
7b:69:e9:6a:5b:41:df:34:b3:1c:0f:6f:da:ce:64:f5:5e:b0:
7d:63:70:14:82:a8:4d:82:f2:e9:9f:7d:83:21:79:4c:a9:2c:
fc:19:df:4b:47:13:3e:1b:ed:df:4c:29:6e:53:ac:5c:61:92:
e6:10:2c:6f:3a:6e:b8:b5:50:ed:20:28:90:52:dc:92:0c:55:
05:25:88:4f:c3:6f:43:b5:d9:11:ba:a3:27:30:4c:93:18:7b:
c9:35:10:d5:46:87:99:b0:fb:c5:bd:01:d9:36:6d:da:3d:8e:
48:8f:fa:61
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiICm+zdp1F1tgdd9ocaniMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjU1MzI3YzE0ZWU5ZjIwOGMyNjQ4NWQ5NjI2OGQ0YzRiMTEzZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyug80cSXQa7HhztI4x55uTa8VUOO
OG6fYk8TX5YpwXAbyVDIfRT6D4HUXJnDlnkjXtW7f/G2WxgMItfn2tiWjaCgrQDF
tbPVqyV/Np8dlR6XiKIsT2C/1NPTZqszX8vkVAm8z28KaJHnNWWG3mhRQgCxrqgf
6KOfs5SFdti18MFfoCjEcCmfRf1WTJzDKACzEXYMafPZ9L1kfjGo/vPGuY5HnTWj
jj3olyxu1uV5ZS+s8xwhOnwwrKYfymLxZRcevf8NgvOaISFBlCNGHT324znhFxq/
hDXQkIiH+X4AYBSATkqNv8rCqGCRsAlrU5eDufKomKmMKb3BKxxW4bdreQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOtVMnwU7p8gjCZIXZYmjUxLET6sMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvNjFVeWZCVHVueUNNSmtoZGxpYU5URXNSUHF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvBX
MA0GCSqGSIb3DQEBCwUAA4IBAQBrS4WJabpXPAKCOJU+n4SgKXYc56dfvNPNcw4r
hB9fraayFU2CZ8ExDvHWrPHWWzQ6C00Yf8Z113DfrzSgzGks3D5P4ITzwn4COyL8
txjLbavOgmSkS1V3jC2dYjEUy6oUKzXm2wJ3zae3QvB6t08gA/jYjP3Bzbc8vb9N
W38YMM1epVBpy9QR5++iW4Tfudh7aelqW0HfNLMcD2/azmT1XrB9Y3AUgqhNgvLp
n32DIXlMqSz8Gd9LRxM+G+3fTCluU6xcYZLmECxvOm64tVDtICiQUtySDFUFJYhP
w29DtdkRuqMnMEyTGHvJNRDVRoeZsPvFvQHZNm3aPY5Ij/ph
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:12:36 2025 by rpki-client