Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/tbJQrUh7Oh3fnrph8Ex5Cgm83AU.roa
File: tbJQrUh7Oh3fnrph8Ex5Cgm83AU.roa (raw, json)
Hash identifier: jzkTNF3fjnvFVeZS7bMoWBedUz2pY2/6JBmN2WaAzkQ=
Subject key identifier: B5:B2:50:AD:48:7B:3A:1D:DF:9E:BA:61:F0:4C:79:0A:09:BC:DC:05
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222050226CF24E27CC0D161F8E2A6FC5
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/tbJQrUh7Oh3fnrph8Ex5Cgm83AU.roa
Signing time: Wed 01 Jan 2025 13:48:50 +0000
ROA not before: Wed 01 Jan 2025 13:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214930
IP address blocks: 2a0e:8f02:f06f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:50:22:6c:f2:4e:27:cc:0d:16:1f:8e:2a:6f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5b250ad487b3a1ddf9eba61f04c790a09bcdc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:38:55:69:77:46:26:43:6d:2c:1b:c9:44:
b6:bf:3c:d9:50:b4:30:0d:d2:9f:6d:62:dd:cd:b3:
13:d6:20:e0:02:01:d9:51:49:10:df:9a:0b:f1:95:
3a:56:b8:8c:50:2f:a5:af:55:0d:c3:4c:5b:60:df:
a3:9c:66:c0:92:d0:c1:8c:f5:55:1e:5f:73:4d:49:
57:e5:35:9d:2d:19:f1:27:84:4d:6b:1b:30:e8:d8:
86:d0:76:f7:58:14:bb:51:c0:af:b8:37:bb:37:61:
82:44:5c:aa:a3:5f:17:b4:69:53:b0:5d:36:9f:a5:
3c:e3:be:60:e8:e7:b6:2e:8b:47:7a:63:f4:af:9e:
2d:5c:c9:bc:7c:b3:13:05:8a:9d:30:be:7a:ce:a6:
9d:03:b2:53:f1:63:9d:0a:5d:60:ed:84:60:c6:56:
71:27:d4:4c:12:a3:c8:85:99:74:c4:3d:8d:e3:15:
8c:a2:d1:ac:4e:1e:c1:95:ad:8b:98:02:35:a9:96:
0f:32:45:66:39:13:0b:64:fb:1e:5a:b9:3b:51:39:
ca:0d:c2:d6:75:e0:63:d6:9b:3e:1c:e9:8e:f6:6c:
90:0e:0a:2f:29:14:fc:57:7e:d8:61:c2:90:9f:48:
81:8b:88:15:48:c6:6f:e6:bc:60:18:2e:7c:93:98:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B2:50:AD:48:7B:3A:1D:DF:9E:BA:61:F0:4C:79:0A:09:BC:DC:05
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/tbJQrUh7Oh3fnrph8Ex5Cgm83AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f06f::/48
Signature Algorithm: sha256WithRSAEncryption
98:8c:29:d9:d1:7b:34:17:b8:e3:3a:94:8c:1d:47:f7:a1:7e:
12:58:09:b4:7c:13:ca:05:23:76:db:00:3a:d3:fb:bd:56:25:
18:94:a1:16:69:1c:0d:f6:b0:95:ba:71:2b:a6:45:30:07:b8:
f1:99:9a:6a:2b:3c:fd:52:d4:0f:69:6a:7a:bb:32:8d:5a:be:
9c:5c:68:83:cb:3e:8f:19:a5:ae:87:68:d6:a0:f5:4e:3f:cd:
20:ea:b8:e5:18:c7:7d:0d:2e:31:10:c0:0f:57:23:97:78:c6:
54:cf:83:b2:70:48:0f:29:97:65:0c:98:2d:04:06:ba:94:c4:
d2:f4:1d:f1:f5:70:df:40:9a:18:eb:dc:fc:e8:d9:e5:a0:58:
d1:d1:ac:90:57:ef:45:6b:8e:8a:b2:ea:35:35:42:d3:95:d3:
67:f2:9d:b8:71:7a:c1:43:f5:41:46:0a:1f:4b:58:59:4e:eb:
48:b2:8f:94:81:74:7c:d5:3c:94:27:9a:43:61:24:8c:64:ed:
0f:25:c4:71:a2:70:eb:0a:e9:c0:93:6e:d9:53:99:4c:30:fb:
d8:39:37:57:b2:02:5e:6a:55:40:34:c9:5f:ca:08:96:4b:90:
54:96:73:c1:eb:4e:a6:b8:ac:21:5a:c3:76:0f:87:3d:21:7f:
75:6d:96:66
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiIFAibPJOJ8wNFh+OKm/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWIyNTBhZDQ4N2IzYTFkZGY5ZWJhNjFmMDRjNzkwYTA5YmNkYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljQ4VWl3RiZDbSwbyUS2vzzZULQw
DdKfbWLdzbMT1iDgAgHZUUkQ35oL8ZU6VriMUC+lr1UNw0xbYN+jnGbAktDBjPVV
Hl9zTUlX5TWdLRnxJ4RNaxsw6NiG0Hb3WBS7UcCvuDe7N2GCRFyqo18XtGlTsF02
n6U8475g6Oe2LotHemP0r54tXMm8fLMTBYqdML56zqadA7JT8WOdCl1g7YRgxlZx
J9RMEqPIhZl0xD2N4xWMotGsTh7Bla2LmAI1qZYPMkVmORMLZPseWrk7UTnKDcLW
deBj1ps+HOmO9myQDgovKRT8V37YYcKQn0iBi4gVSMZv5rxgGC58k5hdkQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLWyUK1Iezod3566YfBMeQoJvNwFMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvdGJKUXJVaDdPaDNmbnJwaDhFeDVDZ204M0FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvBv
MA0GCSqGSIb3DQEBCwUAA4IBAQCYjCnZ0Xs0F7jjOpSMHUf3oX4SWAm0fBPKBSN2
2wA60/u9ViUYlKEWaRwN9rCVunErpkUwB7jxmZpqKzz9UtQPaWp6uzKNWr6cXGiD
yz6PGaWuh2jWoPVOP80g6rjlGMd9DS4xEMAPVyOXeMZUz4OycEgPKZdlDJgtBAa6
lMTS9B3x9XDfQJoY69z86NnloFjR0ayQV+9Fa46Ksuo1NULTldNn8p24cXrBQ/VB
RgofS1hZTutIso+UgXR81TyUJ5pDYSSMZO0PJcRxonDrCunAk27ZU5lMMPvYOTdX
sgJealVANMlfygiWS5BUlnPB606muKwhWsN2D4c9IX91bZZm
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:14 2025 by rpki-client