Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/erDVaMBTiTrWhf-2w2HCCVWQuQM.roa
File: erDVaMBTiTrWhf-2w2HCCVWQuQM.roa (raw, json)
Hash identifier: O8iiyE4Trb3jK6Q2NWw0y9o0NVA0WFl7mFCRup5GLY4=
Subject key identifier: 7A:B0:D5:68:C0:53:89:3A:D6:85:FF:B6:C3:61:C2:09:55:90:B9:03
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422204DEBDAE5D6FCA58F4E0277A62B6E
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/erDVaMBTiTrWhf-2w2HCCVWQuQM.roa
Signing time: Wed 01 Jan 2025 13:48:49 +0000
ROA not before: Wed 01 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214242
IP address blocks: 2a0e:8f02:2290::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4d:eb:da:e5:d6:fc:a5:8f:4e:02:77:a6:2b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ab0d568c053893ad685ffb6c361c2095590b903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:19:14:e7:51:da:b9:e1:a9:06:70:2a:2e:
6e:20:5f:c7:ed:e2:aa:af:8e:6d:80:d0:04:fe:61:
14:29:61:29:30:67:e4:b2:33:37:c7:e0:51:05:ee:
78:b9:2b:23:ae:a8:a7:31:22:2b:2a:45:20:0e:67:
ac:9c:66:42:3f:f9:05:3d:78:7f:2c:94:c3:7f:ee:
50:fb:ba:82:22:6a:db:57:d7:22:c7:74:e2:19:c9:
8b:6c:e9:41:ad:2a:3c:f3:c3:43:c2:7c:89:e4:ad:
4c:f2:a1:a1:aa:a9:48:ea:5c:51:77:c9:97:3a:b6:
5c:6d:41:cc:25:ae:38:2a:30:e3:cf:5a:71:e4:8e:
44:c3:b0:8a:6a:1c:d9:9c:dd:36:82:64:f2:7a:e8:
6e:21:42:50:9b:35:b4:83:19:e2:a4:d6:70:db:f7:
39:e0:0c:22:a3:5e:ab:e9:19:d8:fd:f5:2d:dc:a7:
5a:b9:b8:78:6a:fc:3e:ef:b3:d1:1d:65:8e:b4:c4:
ff:29:b2:db:bb:4a:54:0d:34:c9:22:21:22:89:35:
f1:7a:ca:47:1d:40:94:67:5b:14:9e:dd:c1:ec:eb:
f9:d1:86:24:75:47:e5:ff:fe:6b:4d:3b:98:ac:8b:
9c:f2:17:67:38:c2:7b:8b:0c:fe:2e:68:c6:43:6e:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B0:D5:68:C0:53:89:3A:D6:85:FF:B6:C3:61:C2:09:55:90:B9:03
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/erDVaMBTiTrWhf-2w2HCCVWQuQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2290::/44
Signature Algorithm: sha256WithRSAEncryption
0d:e2:eb:6e:81:ae:1b:e0:f2:5e:31:3a:b3:5a:2d:a0:02:27:
68:85:39:39:e0:cc:fe:03:64:19:c5:31:e2:cd:f5:6e:28:28:
32:84:d0:30:2f:a2:3a:c1:07:6d:5f:5b:80:ee:f1:9f:dd:ae:
38:5b:0c:94:3c:41:c7:b9:c8:56:3f:d8:64:ed:b1:ef:48:6f:
63:bc:76:ff:a0:7f:47:9e:0c:28:22:90:91:81:1e:c6:d9:1e:
14:36:bc:04:47:49:c1:fe:99:7e:68:fc:c6:16:8d:a6:1d:2a:
87:23:25:eb:b5:7c:0e:05:e7:6c:c8:e2:ed:01:93:90:5e:f2:
03:0e:9f:22:78:5a:f4:ed:32:f8:8c:21:de:13:90:51:fb:b8:
86:f3:b7:ce:8c:67:95:3e:ac:ec:2c:b0:44:21:5c:7b:bf:ff:
03:7a:eb:da:3f:3c:3a:54:05:76:af:15:78:e8:b7:8e:08:02:
b8:78:60:d3:4a:40:da:6c:50:38:d7:f9:71:1a:56:2e:fc:8b:
4a:33:d4:ed:8a:2d:d8:85:63:71:fb:25:68:f0:42:54:07:2f:
33:bb:79:2e:7e:0c:c6:4d:53:33:95:5d:26:78:6f:76:fc:85:
25:7f:56:c1:4c:39:21:c1:e5:55:e1:a3:13:22:0a:b5:bf:a1:
70:d9:44:01
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiIE3r2uXW/KWPTgJ3pituMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWIwZDU2OGMwNTM4OTNhZDY4NWZmYjZjMzYxYzIwOTU1OTBiOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqScZFOdR2rnhqQZwKi5uIF/H7eKq
r45tgNAE/mEUKWEpMGfksjM3x+BRBe54uSsjrqinMSIrKkUgDmesnGZCP/kFPXh/
LJTDf+5Q+7qCImrbV9cix3TiGcmLbOlBrSo888NDwnyJ5K1M8qGhqqlI6lxRd8mX
OrZcbUHMJa44KjDjz1px5I5Ew7CKahzZnN02gmTyeuhuIUJQmzW0gxnipNZw2/c5
4Awio16r6RnY/fUt3Kdaubh4avw+77PRHWWOtMT/KbLbu0pUDTTJIiEiiTXxespH
HUCUZ1sUnt3B7Ov50YYkdUfl//5rTTuYrIuc8hdnOMJ7iwz+LmjGQ25/4QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHqw1WjAU4k61oX/tsNhwglVkLkDMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvZXJEVmFNQlRpVHJXaGYtMncySENDVldRdVFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiKQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAN4utuga4b4PJeMTqzWi2gAidohTk54Mz+A2QZ
xTHizfVuKCgyhNAwL6I6wQdtX1uA7vGf3a44WwyUPEHHuchWP9hk7bHvSG9jvHb/
oH9HngwoIpCRgR7G2R4UNrwER0nB/pl+aPzGFo2mHSqHIyXrtXwOBedsyOLtAZOQ
XvIDDp8ieFr07TL4jCHeE5BR+7iG87fOjGeVPqzsLLBEIVx7v/8DeuvaPzw6VAV2
rxV46LeOCAK4eGDTSkDabFA41/lxGlYu/ItKM9Ttii3YhWNx+yVo8EJUBy8zu3ku
fgzGTVMzlV0meG92/IUlf1bBTDkhweVV4aMTIgq1v6Fw2UQB
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:01:16 2025 by rpki-client