Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/oAvN1_6hiieQBMBzMuJwWMtxWQY.roa
File: oAvN1_6hiieQBMBzMuJwWMtxWQY.roa (raw, json)
Hash identifier: Ufqe26+KSGfD6ghU+lbhTeuBQEq9bAaUFOV1A3uVZQs=
Subject key identifier: A0:0B:CD:D7:FE:A1:8A:27:90:04:C0:73:32:E2:70:58:CB:71:59:06
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422203FA52100E62EC2F5B3D2FC979054
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/oAvN1_6hiieQBMBzMuJwWMtxWQY.roa
Signing time: Wed 01 Jan 2025 13:48:46 +0000
ROA not before: Wed 01 Jan 2025 13:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211860
IP address blocks: 2a0e:8f02:2220::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3f:a5:21:00:e6:2e:c2:f5:b3:d2:fc:97:90:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a00bcdd7fea18a279004c07332e27058cb715906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:cc:bc:29:69:1d:1d:0e:a7:2b:22:18:90:
02:69:96:99:cb:de:18:3d:c3:4b:e2:7f:10:41:1d:
7e:9b:c5:28:f0:da:57:10:5a:ec:75:5b:6e:03:a4:
eb:d7:bc:20:d9:62:86:86:0a:c4:cc:0f:08:a0:1e:
63:87:73:f5:62:a4:4d:c8:4c:22:18:24:c0:e5:de:
ba:b1:b0:55:10:a2:6c:59:a7:9c:94:59:2c:f5:07:
6f:2f:ac:64:ec:1b:b5:8c:8a:05:ba:9d:04:56:6d:
79:9f:4b:9d:c0:c7:6a:2a:d8:52:62:8c:39:1d:6e:
30:d5:54:45:1a:ab:9a:66:ce:46:1e:46:56:a1:91:
4a:b0:aa:94:16:d7:0d:a8:12:1d:f9:c6:4e:04:33:
48:ce:e0:ce:eb:3e:6b:c2:56:e2:0d:1e:86:bf:60:
76:f6:55:57:8d:d6:8e:de:a9:e2:dd:03:1e:38:86:
5b:d2:10:1b:46:0f:e6:60:86:df:d7:82:c5:25:55:
2e:ef:7a:b9:a5:3d:a4:33:1f:46:14:93:cd:54:cc:
1d:d0:73:8c:70:ab:01:41:bf:64:09:cc:27:01:a5:
4d:87:fc:86:ff:97:e1:39:26:4c:6e:1a:89:6f:f6:
94:ee:72:e6:6f:72:60:66:58:38:1b:a7:6c:7d:6d:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:CD:D7:FE:A1:8A:27:90:04:C0:73:32:E2:70:58:CB:71:59:06
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/oAvN1_6hiieQBMBzMuJwWMtxWQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2220::/44
Signature Algorithm: sha256WithRSAEncryption
23:67:43:ab:58:47:09:7b:b2:64:f8:eb:7b:27:9e:56:93:68:
e5:5e:b8:c1:34:b0:a4:b4:b6:df:fe:c4:20:e5:7a:d7:42:56:
69:97:d1:58:8c:24:85:84:2a:19:cc:d5:46:a6:3c:4e:91:35:
8a:d1:81:80:cb:a4:a3:83:59:44:98:87:b9:79:96:a5:09:f9:
0d:b2:7d:2f:18:de:2f:e0:c1:01:1f:0f:30:c8:40:34:af:df:
a1:c6:bc:e1:42:f4:2e:6b:0b:e0:39:dd:07:1f:55:4c:a0:13:
5c:1f:79:2f:47:25:c3:57:05:25:16:e3:53:f0:77:f3:7d:84:
5c:d3:70:11:d9:fc:ff:d1:f7:d5:47:de:37:b0:00:46:4f:98:
39:60:2c:8f:a7:ee:fd:54:5b:a6:57:27:92:5b:35:82:7a:fb:
d0:d6:69:37:96:45:2f:1a:55:79:0c:7e:cc:bc:63:c5:73:c1:
44:c1:b9:e6:73:84:ab:7a:6c:ff:69:10:99:1d:5e:43:24:23:
ca:27:bc:9a:7a:a4:7a:c7:90:78:c3:f1:b1:c4:63:35:e3:09:
29:13:9d:45:1f:1a:fe:e4:35:27:7a:3a:b0:01:1b:ce:3b:8a:
2a:5c:58:e3:5e:b7:52:80:3f:4f:31:31:8e:6e:c6:ff:bd:3b:
8e:1d:1b:e3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiID+lIQDmLsL1s9L8l5BUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDBiY2RkN2ZlYTE4YTI3OTAwNGMwNzMzMmUyNzA1OGNiNzE1OTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNPMvClpHR0OpysiGJACaZaZy94Y
PcNL4n8QQR1+m8Uo8NpXEFrsdVtuA6Tr17wg2WKGhgrEzA8IoB5jh3P1YqRNyEwi
GCTA5d66sbBVEKJsWaeclFks9QdvL6xk7Bu1jIoFup0EVm15n0udwMdqKthSYow5
HW4w1VRFGquaZs5GHkZWoZFKsKqUFtcNqBId+cZOBDNIzuDO6z5rwlbiDR6Gv2B2
9lVXjdaO3qni3QMeOIZb0hAbRg/mYIbf14LFJVUu73q5pT2kMx9GFJPNVMwd0HOM
cKsBQb9kCcwnAaVNh/yG/5fhOSZMbhqJb/aU7nLmb3JgZlg4G6dsfW2iXQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKALzdf+oYonkATAczLicFjLcVkGMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvb0F2TjFfNmhpaWVRQk1Cek11SndXTXR4V1FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiIg
MA0GCSqGSIb3DQEBCwUAA4IBAQAjZ0OrWEcJe7Jk+Ot7J55Wk2jlXrjBNLCktLbf
/sQg5XrXQlZpl9FYjCSFhCoZzNVGpjxOkTWK0YGAy6Sjg1lEmIe5eZalCfkNsn0v
GN4v4MEBHw8wyEA0r9+hxrzhQvQuawvgOd0HH1VMoBNcH3kvRyXDVwUlFuNT8Hfz
fYRc03AR2fz/0ffVR943sABGT5g5YCyPp+79VFumVyeSWzWCevvQ1mk3lkUvGlV5
DH7MvGPFc8FEwbnmc4Sremz/aRCZHV5DJCPKJ7yaeqR6x5B4w/GxxGM14wkpE51F
Hxr+5DUnejqwARvOO4oqXFjjXrdSgD9PMTGObsb/vTuOHRvj
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:24 2025 by rpki-client