Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/p5VeBb53f0-trs6dCEU052R8j6M.roa
File: p5VeBb53f0-trs6dCEU052R8j6M.roa (raw, json)
Hash identifier: Xnzai9MWsx1KpCjRV19PKhOCyTafRZxI8PEiad1933g=
Subject key identifier: A7:95:5E:05:BE:77:7F:4F:AD:AE:CE:9D:08:45:34:E7:64:7C:8F:A3
Certificate issuer: /CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Certificate serial: 019421B1A43A5484567F8BA219E73CA298E4
Authority key identifier: C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/p5VeBb53f0-trs6dCEU052R8j6M.roa
Signing time: Wed 01 Jan 2025 11:47:57 +0000
ROA not before: Wed 01 Jan 2025 11:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0f:ff40:c0f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a4:3a:54:84:56:7f:8b:a2:19:e7:3c:a2:98:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Validity
Not Before: Jan 1 11:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7955e05be777f4fadaece9d084534e7647c8fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:fa:bd:8f:31:2e:42:e1:a8:02:e6:f2:8a:
7c:9b:e7:46:23:09:93:ee:58:df:42:f2:5b:78:69:
9b:fb:62:2e:b6:7b:a9:44:36:9d:fb:4b:29:8e:26:
a0:4a:17:cd:a0:56:35:50:5c:b3:e4:6f:30:3e:31:
8b:69:5d:fe:c7:5d:f4:b8:47:11:c3:90:ec:ac:40:
27:4c:bf:a5:18:0d:64:d9:46:7e:7b:40:0f:ad:a2:
53:d2:4d:5d:25:85:f5:bb:d1:69:04:d4:b5:6b:58:
07:91:50:a5:c3:81:3f:1a:df:fe:70:fe:03:62:8b:
4b:85:8f:c2:b6:87:82:59:9a:ff:ce:3b:12:65:17:
24:7c:14:56:66:66:e4:a5:74:78:bc:25:8d:04:3d:
cd:39:f2:0d:c0:08:b8:ad:ae:21:44:f2:d4:90:7d:
3b:00:dc:e8:69:0b:5a:c1:53:79:f0:55:0b:7c:93:
ff:29:3b:6d:a7:26:98:87:8c:aa:c8:44:ae:78:e4:
17:81:19:9e:a9:95:0c:28:ef:0b:46:49:fd:01:d6:
cb:7f:21:82:47:8e:c7:b4:f5:06:f8:d8:a1:86:a9:
a4:4e:1d:0e:a3:65:40:58:85:3f:95:39:fb:8d:7b:
aa:fa:2a:ce:8a:ad:2c:36:89:82:7e:07:29:df:05:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:95:5E:05:BE:77:7F:4F:AD:AE:CE:9D:08:45:34:E7:64:7C:8F:A3
X509v3 Authority Key Identifier:
keyid:C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/p5VeBb53f0-trs6dCEU052R8j6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ff40:c0f3::/48
Signature Algorithm: sha256WithRSAEncryption
22:aa:b0:4e:bf:0f:24:40:ca:14:1c:3c:da:36:c0:10:ac:88:
46:65:dd:90:5d:9f:a2:65:03:40:71:d8:9c:e9:96:5e:33:a9:
36:e9:40:ba:a2:53:47:78:0b:ba:be:7d:58:9b:11:8b:d9:2e:
7d:f2:34:c0:c6:45:34:e7:2d:3c:95:e4:25:66:75:24:e3:66:
19:4d:18:9a:60:f4:c7:b6:51:da:b8:b4:5c:f4:62:54:80:3e:
05:8d:b8:64:59:4a:f8:5e:77:f1:5f:c5:8c:43:30:df:39:75:
a9:d6:61:40:24:82:df:d2:2a:ba:ff:57:80:da:41:01:84:03:
82:ae:df:dc:b8:36:41:91:4f:10:30:bc:fd:f3:00:94:66:35:
4a:85:33:d7:7e:07:45:c2:3d:09:c9:fd:2f:d5:35:2d:03:96:
4f:85:12:bc:54:99:3b:8a:37:63:48:5d:0f:8c:23:54:78:52:
fa:a9:50:bd:d7:a3:68:22:d0:a5:02:6b:60:47:b5:c0:87:60:
db:dc:cb:2b:6c:f4:27:36:73:c3:f5:a4:2e:6b:b1:bc:52:a3:
3b:21:75:0c:43:92:8c:7d:46:f7:0d:c1:52:76:97:6c:d0:86:
38:4b:5c:4f:9b:59:01:fe:7e:df:12:52:30:f4:91:9a:fb:de:
97:27:09:a4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQhsaQ6VIRWf4uiGec8opjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ODQ5MjMyZTM5NDNiZjI1N2M5ZGNhZWFiMGVmOTJkMzBh
NGNmYWQwHhcNMjUwMTAxMTE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzk1NWUwNWJlNzc3ZjRmYWRhZWNlOWQwODQ1MzRlNzY0N2M4ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3/6vY8xLkLhqALm8op8m+dGIwmT
7ljfQvJbeGmb+2IutnupRDad+0spjiagShfNoFY1UFyz5G8wPjGLaV3+x130uEcR
w5DsrEAnTL+lGA1k2UZ+e0APraJT0k1dJYX1u9FpBNS1a1gHkVClw4E/Gt/+cP4D
YotLhY/CtoeCWZr/zjsSZRckfBRWZmbkpXR4vCWNBD3NOfINwAi4ra4hRPLUkH07
ANzoaQtawVN58FULfJP/KTttpyaYh4yqyESueOQXgRmeqZUMKO8LRkn9AdbLfyGC
R47HtPUG+NihhqmkTh0Oo2VAWIU/lTn7jXuq+irOiq0sNomCfgcp3wWxowIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKeVXgW+d39Pra7OnQhFNOdkfI+jMB8GA1UdIwQY
MBaAFMWEkjLjlDvyV8ncrqsO+S0wpM+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlTU011T1VPX0pYeWR5dXF3NzVMVENrejYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NDAyMTktYmJjMy00MTg2LWIxYTYt
YWZhOTE3YmRmN2QxLzEvcDVWZUJiNTNmMC10cnM2ZENFVTA1MlI4ajZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80NDAyMTktYmJjMy00MTg2LWIxYTYtYWZhOTE3YmRmN2Qx
LzEveFlTU011T1VPX0pYeWR5dXF3NzVMVENrejYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg//QMDz
MA0GCSqGSIb3DQEBCwUAA4IBAQAiqrBOvw8kQMoUHDzaNsAQrIhGZd2QXZ+iZQNA
cdic6ZZeM6k26UC6olNHeAu6vn1YmxGL2S598jTAxkU05y08leQlZnUk42YZTRia
YPTHtlHauLRc9GJUgD4FjbhkWUr4XnfxX8WMQzDfOXWp1mFAJILf0iq6/1eA2kEB
hAOCrt/cuDZBkU8QMLz98wCUZjVKhTPXfgdFwj0Jyf0v1TUtA5ZPhRK8VJk7ijdj
SF0PjCNUeFL6qVC916NoItClAmtgR7XAh2Db3MsrbPQnNnPD9aQua7G8UqM7IXUM
Q5KMfUb3DcFSdpds0IY4S1xPm1kB/n7fElIw9JGa+96XJwmk
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:49 2025 by rpki-client