Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/f_G6CeQbkSCONY_fCJUOgXggJ7A.roa
File: f_G6CeQbkSCONY_fCJUOgXggJ7A.roa (raw, json)
Hash identifier: Q+gqx7QpSNDUOuXN5DRLIhXzanHO+K1EBa6xMWIdpZk=
Subject key identifier: 7F:F1:BA:09:E4:1B:91:20:8E:35:8F:DF:08:95:0E:81:78:20:27:B0
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01958EBD06EB2EB9B3B4D18648280311610F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/f_G6CeQbkSCONY_fCJUOgXggJ7A.roa
Signing time: Thu 13 Mar 2025 09:01:47 +0000
ROA not before: Thu 13 Mar 2025 09:01:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57439
IP address blocks: 2a0c:b641:2d0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:06:eb:2e:b9:b3:b4:d1:86:48:28:03:11:61:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Mar 13 09:01:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ff1ba09e41b91208e358fdf08950e81782027b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:66:0b:ba:0a:29:ff:82:31:18:f3:80:65:1d:
3c:74:e7:63:08:b0:0f:69:49:39:7d:09:78:33:ed:
1b:46:b3:d0:11:1c:8e:9b:1b:62:60:6f:52:6c:a6:
14:ea:e9:7d:dc:30:ba:68:15:e1:64:64:fa:0c:4b:
fd:86:bb:26:c1:94:2f:85:81:d1:de:42:e8:6b:3a:
88:39:20:e7:e6:36:aa:89:35:83:c5:b4:8f:27:dd:
80:44:29:f9:d9:d9:9e:e2:ad:27:01:97:f6:30:dd:
26:da:87:bf:d0:a8:ca:06:70:8b:0e:d6:fa:4c:34:
26:aa:5f:3c:b9:85:4d:f0:c0:1e:f4:ec:63:62:8c:
8a:ec:7b:d5:3d:39:8f:7c:92:60:5a:b0:94:f7:a9:
dd:31:53:9c:1e:25:3d:1b:a6:ab:2c:98:69:8a:52:
3d:3e:df:0e:b4:be:45:0f:4e:6a:44:d5:1a:88:36:
03:70:f1:32:c5:f4:ff:88:e0:d1:10:45:1d:f6:7d:
81:29:12:42:d0:3d:88:b2:1a:6c:2c:ac:c5:35:e3:
a4:fd:5d:a5:83:0b:cf:83:ec:fb:6f:33:55:7c:b0:
57:f5:28:fb:93:93:a2:51:0d:77:97:55:e5:1a:a2:
33:3e:5e:79:8a:84:b1:8b:b6:fe:01:b6:1b:50:31:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F1:BA:09:E4:1B:91:20:8E:35:8F:DF:08:95:0E:81:78:20:27:B0
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/f_G6CeQbkSCONY_fCJUOgXggJ7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:2d0::/44
Signature Algorithm: sha256WithRSAEncryption
52:ae:de:c8:bd:73:06:52:cd:aa:8a:82:42:f2:83:d0:5a:02:
cc:71:29:87:4f:e4:91:b6:72:1f:e9:57:4a:7f:08:1a:1b:42:
cd:e8:96:16:e9:9e:75:7b:6d:4c:36:e5:1c:10:50:37:2d:57:
37:5e:2f:ab:46:06:6e:65:21:97:27:35:15:82:fb:30:e5:dd:
ea:e1:1d:d3:4c:03:d6:6b:37:5a:9d:53:e4:6a:ca:1d:c3:c6:
62:f4:12:85:fe:37:0c:31:29:c9:88:31:14:2a:af:fe:8c:2c:
d7:44:e6:6e:de:97:25:e3:19:e4:66:fc:d9:e6:a1:d2:a7:74:
b4:08:47:15:c9:f2:0f:c7:16:7c:71:04:37:10:ff:3e:b0:4d:
eb:bf:17:11:4e:85:53:af:0a:62:ba:9b:09:b4:9c:c9:a8:bd:
67:46:d7:24:0b:e9:4a:e5:48:30:d3:46:99:fc:24:a5:bc:e1:
6c:4e:19:d2:54:fd:a2:a6:b3:8e:db:6f:00:f0:1c:e5:c9:75:
22:81:ad:7e:e2:b0:6b:8e:44:48:6c:04:e0:de:68:54:97:aa:
31:c6:b9:c7:3d:3c:4c:cd:85:b8:7d:de:03:91:80:d0:7c:a7:
29:3e:60:97:dc:f9:0e:f8:f4:c3:4a:2a:ff:7f:64:03:59:42:
08:8b:d7:90
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZWOvQbrLrmztNGGSCgDEWEPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMzEzMDkwMTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmYxYmEwOWU0MWI5MTIwOGUzNThmZGYwODk1MGU4MTc4MjAyN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GYLugop/4IxGPOAZR08dOdjCLAP
aUk5fQl4M+0bRrPQERyOmxtiYG9SbKYU6ul93DC6aBXhZGT6DEv9hrsmwZQvhYHR
3kLoazqIOSDn5jaqiTWDxbSPJ92ARCn52dme4q0nAZf2MN0m2oe/0KjKBnCLDtb6
TDQmql88uYVN8MAe9OxjYoyK7HvVPTmPfJJgWrCU96ndMVOcHiU9G6arLJhpilI9
Pt8OtL5FD05qRNUaiDYDcPEyxfT/iODREEUd9n2BKRJC0D2IshpsLKzFNeOk/V2l
gwvPg+z7bzNVfLBX9Sj7k5OiUQ13l1XlGqIzPl55ioSxi7b+AbYbUDGoqwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH/xugnkG5EgjjWP3wiVDoF4ICewMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvZl9HNkNlUWJrU0NPTllfZkNKVU9nWGdnSjdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQLQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBSrt7IvXMGUs2qioJC8oPQWgLMcSmHT+SRtnIf
6VdKfwgaG0LN6JYW6Z51e21MNuUcEFA3LVc3Xi+rRgZuZSGXJzUVgvsw5d3q4R3T
TAPWazdanVPkasodw8Zi9BKF/jcMMSnJiDEUKq/+jCzXROZu3pcl4xnkZvzZ5qHS
p3S0CEcVyfIPxxZ8cQQ3EP8+sE3rvxcRToVTrwpiupsJtJzJqL1nRtckC+lK5Ugw
00aZ/CSlvOFsThnSVP2iprOO228A8BzlyXUiga1+4rBrjkRIbATg3mhUl6oxxrnH
PTxMzYW4fd4DkYDQfKcpPmCX3PkO+PTDSir/f2QDWUIIi9eQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:07 2025 by rpki-client