Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/l6kKahUWsApqldNWkf32EcC9MJo.roa
File: l6kKahUWsApqldNWkf32EcC9MJo.roa (raw, json)
Hash identifier: ti/RdkotxJepYfjHDHW2/WznMjJ9kwR+ahNUek7Itlk=
Subject key identifier: 97:A9:0A:6A:15:16:B0:0A:6A:95:D3:56:91:FD:F6:11:C0:BD:30:9A
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067D019629393958DE68D282689FC75
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/l6kKahUWsApqldNWkf32EcC9MJo.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60190
IP address blocks: 212.243.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d0:19:62:93:93:95:8d:e6:8d:28:26:89:fc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97a90a6a1516b00a6a95d35691fdf611c0bd309a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:c5:82:db:07:ca:45:58:67:68:55:cd:d2:
88:1c:f4:40:a1:02:c6:52:a9:a2:15:6b:0a:ed:56:
f6:2d:b7:7d:db:d8:89:ea:7c:0e:c8:3e:cd:fd:0b:
d1:14:f4:99:da:86:d8:5e:29:53:20:51:71:b0:a8:
b0:be:d0:97:18:9c:3a:e6:b7:88:fa:01:3f:19:4b:
88:5f:65:c0:48:70:0a:71:98:af:de:f7:ea:bc:46:
74:bd:d9:58:05:80:a1:03:56:b4:ba:30:c2:ed:b0:
3e:e6:b0:c0:3c:75:d1:eb:4a:f5:d6:41:87:39:4d:
ad:99:6c:59:c5:f8:20:fd:b5:0f:97:04:c7:1c:b8:
ce:96:ec:b9:7d:c0:5b:b1:13:71:b2:5a:7c:dd:77:
b6:3e:12:0f:d7:97:32:b3:c6:5e:ef:64:f4:5b:01:
a5:9e:fa:24:69:97:b1:6d:28:1b:82:19:be:f7:8d:
6f:7d:2e:c3:2b:de:a7:c2:7c:10:ce:81:d3:d0:9b:
9e:e8:6c:28:70:f6:ca:88:8c:30:8f:39:2f:77:74:
6b:34:ce:e0:3a:8d:5c:fb:84:8c:d0:18:e6:0d:fa:
a7:ee:46:04:69:2c:16:4b:5b:dc:aa:27:ec:cf:14:
dc:0e:11:53:8e:b6:96:c8:0e:14:b5:65:d7:9f:80:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A9:0A:6A:15:16:B0:0A:6A:95:D3:56:91:FD:F6:11:C0:BD:30:9A
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/l6kKahUWsApqldNWkf32EcC9MJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4d:45:cc:8d:c3:65:91:f8:9a:d9:6e:6a:03:df:be:50:ad:
46:1d:7c:23:c7:c2:fb:7b:d2:61:75:f1:d0:b1:16:43:bc:f7:
6c:b8:92:e6:f9:41:8f:44:83:22:7b:e3:af:2a:d3:e4:d0:75:
6a:52:fd:77:f8:f3:00:d4:50:fa:d7:dd:b3:fd:66:10:53:22:
eb:d7:2e:14:69:0a:2f:32:a3:12:43:75:fc:23:2c:ff:d7:4e:
f0:58:d5:34:3f:dc:95:bf:c8:d4:4b:db:de:36:c5:7c:5d:7e:
8a:c5:df:48:21:32:f9:92:c8:1a:d5:21:db:81:e8:85:ca:f7:
82:9c:31:d2:22:b0:4c:81:5b:7c:72:32:ad:9f:f6:7d:bb:8b:
15:38:d5:be:03:75:a8:24:18:cb:ee:f4:a0:fb:0e:73:8d:26:
91:18:9e:09:08:d2:ca:75:f2:ca:a3:04:63:f6:8c:55:e3:bb:
72:4b:d5:51:3d:84:5c:4b:d8:ed:2c:a3:c8:f6:bf:c0:24:d0:
88:ef:1c:9a:70:67:0c:05:5f:0c:68:9d:60:0f:4d:8b:31:3e:
7e:30:8f:84:25:3e:b9:8d:4e:d8:cb:60:f2:7b:54:40:8d:0a:
61:0a:4e:10:e5:9c:f7:2a:32:75:89:a8:eb:a9:2d:22:d1:10:
4c:1a:a8:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9AZYpOTlY3mjSgmifx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2E5MGE2YTE1MTZiMDBhNmE5NWQzNTY5MWZkZjYxMWMwYmQzMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR3FgtsHykVYZ2hVzdKIHPRAoQLG
UqmiFWsK7Vb2Lbd929iJ6nwOyD7N/QvRFPSZ2obYXilTIFFxsKiwvtCXGJw65reI
+gE/GUuIX2XASHAKcZiv3vfqvEZ0vdlYBYChA1a0ujDC7bA+5rDAPHXR60r11kGH
OU2tmWxZxfgg/bUPlwTHHLjOluy5fcBbsRNxslp83Xe2PhIP15cys8Ze72T0WwGl
nvokaZexbSgbghm+941vfS7DK96nwnwQzoHT0Jue6GwocPbKiIwwjzkvd3RrNM7g
Oo1c+4SM0BjmDfqn7kYEaSwWS1vcqifszxTcDhFTjraWyA4UtWXXn4B1CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJepCmoVFrAKapXTVpH99hHAvTCaMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvbDZrS2FoVVdzQXBxbGROV2tmMzJFY0M5TUpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PN4MA0G
CSqGSIb3DQEBCwUAA4IBAQBKTUXMjcNlkfia2W5qA9++UK1GHXwjx8L7e9JhdfHQ
sRZDvPdsuJLm+UGPRIMie+OvKtPk0HVqUv13+PMA1FD6192z/WYQUyLr1y4UaQov
MqMSQ3X8Iyz/107wWNU0P9yVv8jUS9veNsV8XX6Kxd9IITL5ksga1SHbgeiFyveC
nDHSIrBMgVt8cjKtn/Z9u4sVONW+A3WoJBjL7vSg+w5zjSaRGJ4JCNLKdfLKowRj
9oxV47tyS9VRPYRcS9jtLKPI9r/AJNCI7xyacGcMBV8MaJ1gD02LMT5+MI+EJT65
jU7Yy2Dye1RAjQphCk4Q5Zz3KjJ1iajrqS0i0RBMGqja
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:33:15 2025 by rpki-client