Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_h3dwa9zAnO1iDbRSbeB_8uTDVU.roa
File: _h3dwa9zAnO1iDbRSbeB_8uTDVU.roa (raw, json)
Hash identifier: f+p0NXhC5k2Twt52Zk4g+7zv0xOUh3i4es6flo/sXVA=
Subject key identifier: FE:1D:DD:C1:AF:73:02:73:B5:88:36:D1:49:B7:81:FF:CB:93:0D:55
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA843B84DF2DFA95A7FF804647FA03
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_h3dwa9zAnO1iDbRSbeB_8uTDVU.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201106
IP address blocks: 2a0c:b642:1a0a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:84:3b:84:df:2d:fa:95:a7:ff:80:46:47:fa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe1dddc1af730273b58836d149b781ffcb930d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:81:8a:63:0f:fc:cf:8a:33:b5:82:46:64:
24:f0:a4:6f:68:4e:cf:d9:d8:9a:95:0f:d3:a3:6f:
fb:1c:79:dc:fb:33:56:7b:11:b1:05:6d:bb:6c:6a:
e8:d8:42:2a:7c:cd:2e:1f:62:bb:88:db:3d:d6:4d:
e8:60:86:4c:c6:a7:b8:49:37:89:ed:b4:06:be:99:
e5:ec:a8:b7:06:e0:2e:a6:9e:bf:11:37:08:dc:36:
ff:d1:11:83:ae:34:bf:eb:8c:aa:b9:bc:30:33:25:
4b:d9:d2:2b:db:c6:de:1f:9d:ae:f0:5e:b6:08:e6:
a6:0d:cf:db:31:c6:2d:0c:06:94:f1:40:15:df:c5:
95:3c:61:c5:7b:67:57:24:0e:6d:36:83:cd:cb:62:
e7:82:21:ec:ed:94:b8:0a:55:b7:54:ef:2c:51:61:
fd:07:b2:b3:21:35:08:55:f3:b2:8a:b5:54:b6:75:
d2:c6:1e:e5:60:59:d2:82:70:8e:65:c6:21:ac:97:
19:a9:1f:bd:7a:59:dc:0e:77:e8:67:f2:1e:05:6d:
85:62:96:07:28:90:00:13:3f:72:e6:3c:38:6e:72:
aa:08:0c:81:b4:4e:20:a7:ec:31:78:36:1e:b0:84:
77:7d:27:ec:f6:6d:5a:67:51:36:43:c9:fd:e7:48:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:DD:C1:AF:73:02:73:B5:88:36:D1:49:B7:81:FF:CB:93:0D:55
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_h3dwa9zAnO1iDbRSbeB_8uTDVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a0a::/48
Signature Algorithm: sha256WithRSAEncryption
5b:b2:4d:25:f9:d9:34:9c:ab:d7:17:9b:8c:9e:6d:ee:8b:10:
0b:c5:ae:78:76:f3:12:5a:93:53:36:fa:47:63:ac:bb:af:b9:
86:b2:6a:a8:37:35:15:c9:4f:83:2c:9c:3a:16:d0:44:19:f7:
8d:81:93:97:2d:27:ec:76:d9:50:b4:75:e6:bb:4a:49:e0:ef:
44:db:b5:ad:46:b2:77:fa:59:b1:8b:2c:7d:24:d6:27:65:75:
1d:7b:88:4c:23:1b:00:92:73:81:6c:e0:d7:7c:4d:19:00:b0:
f4:ef:c8:7e:fc:a6:aa:dc:89:4d:72:29:dd:fc:81:af:d6:12:
5d:9c:82:e7:8e:5c:22:a0:46:5b:9a:dd:eb:c2:c9:97:92:7e:
fc:f8:1d:47:34:38:2e:1e:a0:24:72:2c:e6:14:ea:7a:44:c5:
ca:ab:13:1d:3e:35:b6:5b:5d:5d:10:eb:ee:d8:4f:d1:f4:d8:
72:bf:34:f4:21:dc:16:83:e0:ca:dd:09:69:0e:50:a4:c7:64:
0d:65:c4:e2:65:b2:cb:9d:ee:03:9f:c4:3a:3f:d4:3c:4f:13:
9f:db:da:db:b6:84:b0:74:1c:23:af:18:64:5e:5c:40:7c:90:
8b:d2:fa:de:ac:c2:3b:55:3e:0d:f3:2e:c7:0b:0a:33:7c:a8:
bb:61:6d:8c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+oQ7hN8t+pWn/4BGR/oDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTFkZGRjMWFmNzMwMjczYjU4ODM2ZDE0OWI3ODFmZmNiOTMwZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qCBimMP/M+KM7WCRmQk8KRvaE7P
2dialQ/To2/7HHnc+zNWexGxBW27bGro2EIqfM0uH2K7iNs91k3oYIZMxqe4STeJ
7bQGvpnl7Ki3BuAupp6/ETcI3Db/0RGDrjS/64yqubwwMyVL2dIr28beH52u8F62
COamDc/bMcYtDAaU8UAV38WVPGHFe2dXJA5tNoPNy2LngiHs7ZS4ClW3VO8sUWH9
B7KzITUIVfOyirVUtnXSxh7lYFnSgnCOZcYhrJcZqR+9elncDnfoZ/IeBW2FYpYH
KJAAEz9y5jw4bnKqCAyBtE4gp+wxeDYesIR3fSfs9m1aZ1E2Q8n950h2dQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP4d3cGvcwJztYg20Um3gf/Lkw1VMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvX2gzZHdhOXpBbk8xaURiUlNiZUJfOHVURFZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoK
MA0GCSqGSIb3DQEBCwUAA4IBAQBbsk0l+dk0nKvXF5uMnm3uixALxa54dvMSWpNT
NvpHY6y7r7mGsmqoNzUVyU+DLJw6FtBEGfeNgZOXLSfsdtlQtHXmu0pJ4O9E27Wt
RrJ3+lmxiyx9JNYnZXUde4hMIxsAknOBbODXfE0ZALD078h+/Kaq3IlNcind/IGv
1hJdnILnjlwioEZbmt3rwsmXkn78+B1HNDguHqAkcizmFOp6RMXKqxMdPjW2W11d
EOvu2E/R9NhyvzT0IdwWg+DK3QlpDlCkx2QNZcTiZbLLne4Dn8Q6P9Q8TxOf29rb
toSwdBwjrxhkXlxAfJCL0vrerMI7VT4N8y7HCwozfKi7YW2M
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:46 2025 by rpki-client