Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/P0ey7pLn4kzIld58q6oCF6SwrK8.roa
File: P0ey7pLn4kzIld58q6oCF6SwrK8.roa (raw, json)
Hash identifier: PJvkJrLEyVcA8UHOJSaGePy6+WonTYaWofLea6FJPbo=
Subject key identifier: 3F:47:B2:EE:92:E7:E2:4C:C8:95:DE:7C:AB:AA:02:17:A4:B0:AC:AF
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01942220468507BBBE3FADBCC3874E3428E2
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/P0ey7pLn4kzIld58q6oCF6SwrK8.roa
Signing time: Wed 01 Jan 2025 13:48:47 +0000
ROA not before: Wed 01 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212666
IP address blocks: 2a0e:8f02:f009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:46:85:07:bb:be:3f:ad:bc:c3:87:4e:34:28:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f47b2ee92e7e24cc895de7cabaa0217a4b0acaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5a:a7:9c:7b:d4:38:d3:a8:dc:35:e2:56:0c:
87:35:8e:09:03:4f:15:58:de:5f:c5:cb:12:3b:98:
92:90:47:f3:6c:76:89:28:1d:8c:4d:cb:d4:72:0d:
92:0a:3c:c8:aa:ec:c8:c7:f9:b6:70:27:d4:ff:96:
45:ca:17:a5:f7:0c:76:fb:b1:25:c9:18:f3:16:42:
89:3c:83:e9:fc:59:ef:09:e9:13:b9:99:ab:55:c3:
71:30:a2:fb:23:63:72:8d:2e:71:58:e5:18:ee:4b:
d5:45:45:ce:6b:b5:2e:d5:2a:d9:81:5c:65:23:fc:
78:bd:33:6c:b0:59:b4:54:6e:3a:a1:64:da:43:12:
76:ae:85:0d:25:58:0c:a7:9b:4f:aa:10:d1:69:10:
df:53:e8:18:98:0a:d5:89:f6:2d:01:2f:14:25:40:
d5:16:75:9f:6c:02:2b:19:87:ff:01:2f:26:e5:66:
f7:7f:19:b6:fe:ca:bf:30:01:e1:04:61:bb:41:5f:
12:24:1b:3f:43:81:d1:71:d1:6d:81:12:e1:6a:88:
6f:d8:05:48:e0:3d:cf:16:e2:bc:5d:cf:84:c2:ea:
0d:14:5d:47:e9:ec:41:47:b9:3c:2e:c7:0b:59:c0:
d9:64:18:92:92:93:a1:4f:8b:49:7b:41:e6:b0:5b:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:47:B2:EE:92:E7:E2:4C:C8:95:DE:7C:AB:AA:02:17:A4:B0:AC:AF
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/P0ey7pLn4kzIld58q6oCF6SwrK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f009::/48
Signature Algorithm: sha256WithRSAEncryption
0d:d2:74:7b:ec:cb:27:a1:53:b1:fa:5c:16:2c:91:42:72:cd:
90:06:fc:c9:96:85:84:fd:d7:2b:6a:f6:4f:cd:18:e3:9f:54:
68:89:d7:85:c6:e2:fd:9f:35:66:2d:f1:b3:15:a5:84:c8:c6:
df:84:96:3d:ac:c5:12:1d:03:65:5c:b3:24:68:ae:08:5d:e8:
f0:67:96:4f:95:81:04:04:cd:f9:92:83:11:e3:0a:6d:ce:5f:
89:96:4c:af:69:b5:20:3f:4c:97:05:a6:12:96:1b:7a:2b:cb:
6a:f0:c6:5f:ad:aa:c9:b3:59:50:05:cf:62:8b:fa:81:4f:3b:
5a:dc:79:0a:7c:53:77:11:25:01:85:f4:33:56:8e:d7:1a:10:
46:aa:55:48:52:9a:a3:f3:f7:54:d1:6d:8b:f6:b8:cf:29:a9:
66:c7:53:54:d5:cc:bf:73:80:ba:c4:ad:b9:02:74:b9:b7:65:
b9:15:e9:c0:1a:e2:fc:e1:d0:96:ef:61:f6:54:72:f4:58:d3:
03:d0:a1:b3:57:3f:5c:dc:69:f2:0d:1b:08:37:f3:04:1b:fb:
96:a5:65:9a:c0:f1:7b:8e:f6:43:60:80:4e:bd:2a:b3:84:64:
4d:29:57:ca:4d:c4:e9:3c:34:96:b3:78:8b:8b:ca:e7:ee:79:
55:35:45:c1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiIEaFB7u+P628w4dONCjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjQ3YjJlZTkyZTdlMjRjYzg5NWRlN2NhYmFhMDIxN2E0YjBhY2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1qnnHvUONOo3DXiVgyHNY4JA08V
WN5fxcsSO5iSkEfzbHaJKB2MTcvUcg2SCjzIquzIx/m2cCfU/5ZFyhel9wx2+7El
yRjzFkKJPIPp/FnvCekTuZmrVcNxMKL7I2NyjS5xWOUY7kvVRUXOa7Uu1SrZgVxl
I/x4vTNssFm0VG46oWTaQxJ2roUNJVgMp5tPqhDRaRDfU+gYmArVifYtAS8UJUDV
FnWfbAIrGYf/AS8m5Wb3fxm2/sq/MAHhBGG7QV8SJBs/Q4HRcdFtgRLhaohv2AVI
4D3PFuK8Xc+EwuoNFF1H6exBR7k8LscLWcDZZBiSkpOhT4tJe0HmsFtL7QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD9Hsu6S5+JMyJXefKuqAheksKyvMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvUDBleTdwTG40a3pJbGQ1OHE2b0NGNlN3cks4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQAN0nR77MsnoVOx+lwWLJFCcs2QBvzJloWE/dcr
avZPzRjjn1RoideFxuL9nzVmLfGzFaWEyMbfhJY9rMUSHQNlXLMkaK4IXejwZ5ZP
lYEEBM35koMR4wptzl+JlkyvabUgP0yXBaYSlht6K8tq8MZfrarJs1lQBc9ii/qB
Tzta3HkKfFN3ESUBhfQzVo7XGhBGqlVIUpqj8/dU0W2L9rjPKalmx1NU1cy/c4C6
xK25AnS5t2W5FenAGuL84dCW72H2VHL0WNMD0KGzVz9c3GnyDRsIN/MEG/uWpWWa
wPF7jvZDYIBOvSqzhGRNKVfKTcTpPDSWs3iLi8rn7nlVNUXB
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:53:51 2025 by rpki-client