Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa
File: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (raw, json)
Hash identifier: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=
Subject key identifier: 0F:74:1A:FE:C0:31:27:84:00:5B:D0:60:B2:A0:3D:E6:AA:0D:76:85
Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial: 01941F8CA1132641F8DBE4AEC9EFE0FBFBCB
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa
Signing time: Wed 01 Jan 2025 01:48:17 +0000
ROA not before: Wed 01 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214368
IP address blocks: 2a01:ea05::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a1:13:26:41:f8:db:e4:ae:c9:ef:e0:fb:fb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f741afec0312784005bd060b2a03de6aa0d7685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fe:67:bf:dc:4c:9a:dd:14:ed:30:d7:92:f6:
aa:4b:0b:d0:09:7f:86:84:a6:d2:02:9e:06:6b:d4:
3f:ea:bb:e9:a6:f9:40:93:da:dc:c5:27:20:d0:89:
19:1c:f8:8a:21:43:7e:fa:6b:d2:e3:bc:16:24:b8:
4c:d3:8a:10:3c:01:3d:bc:4e:15:cc:44:a6:90:ae:
b1:90:49:67:31:a3:b1:7c:f1:59:eb:01:60:36:1a:
ae:98:ba:15:90:19:f2:55:34:f6:17:ba:0a:e4:8e:
d4:a8:23:81:e5:62:e5:10:3e:c5:69:38:35:43:04:
5a:95:fd:71:cc:3b:e2:96:bb:8b:92:4c:fe:8a:c7:
98:5f:51:d6:6d:94:33:9d:2e:fd:5f:0a:d9:78:81:
75:8b:2a:6c:9b:19:ab:12:ac:5f:6d:02:e2:67:45:
57:d3:76:18:b2:39:42:1e:16:f4:9b:05:e5:48:c7:
09:b3:e8:b9:d9:77:21:91:d8:b2:a5:4f:d3:4d:9c:
b2:08:a7:f3:92:37:22:6f:b2:fd:f2:5d:3a:5b:be:
71:e5:b1:20:0a:8c:48:eb:7c:b8:16:2e:48:58:70:
2f:24:65:3e:94:d2:50:12:fe:05:42:45:18:bc:d3:
7d:6d:9d:31:f9:1e:e9:ad:fe:53:5a:c7:b1:a0:74:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:74:1A:FE:C0:31:27:84:00:5B:D0:60:B2:A0:3D:E6:AA:0D:76:85
X509v3 Authority Key Identifier:
keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ea05::/32
Signature Algorithm: sha256WithRSAEncryption
38:5b:86:80:19:f7:1b:69:ea:3f:ae:cd:81:bd:3c:80:af:d0:
6b:78:bd:89:17:49:fe:c8:3a:5b:60:03:ce:6c:65:4f:ce:ac:
80:af:0d:8c:b5:7a:23:fb:a8:e7:10:1f:ea:04:58:ae:c1:44:
84:44:d6:90:4f:77:eb:72:bb:c9:f6:d3:ed:6e:d0:b4:f3:a5:
4d:09:91:b1:86:54:ae:c2:dd:b8:70:e9:79:1c:47:18:ca:4a:
42:6b:8b:26:a4:ae:5d:25:15:40:7a:27:14:d2:23:58:82:4d:
9c:6d:71:19:f0:b9:d0:86:ed:a1:12:99:ad:d2:0a:7d:e1:10:
59:11:bb:b5:8f:88:20:32:d5:82:82:5b:d9:7a:27:0c:b2:87:
22:2b:5f:cb:64:69:50:29:d8:79:b5:5e:28:7a:fc:8c:ca:ac:
fd:44:80:fe:5b:de:55:f5:78:a1:c2:d0:12:38:be:7b:d9:71:
83:47:3e:63:4a:71:91:9a:a7:57:20:f4:03:2f:fc:0b:1b:1c:
f6:e8:84:b7:40:60:c2:1f:ad:18:76:58:4e:22:8a:d4:51:f9:
ae:e6:6b:62:0c:7a:b9:9d:15:77:7c:68:b6:4a:6a:ba:e3:2d:
3f:9a:3b:1f:ea:81:0f:33:1d:30:e3:6d:f2:d7:18:b3:5e:24:
53:f2:62:6c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQfjKETJkH42+Suye/g+/vLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTVmMmU5MTQ5Y2UxYjQyOGM4ZjFlZGZjMDA5MjE1ZTI4
NDdmNTUwHhcNMjUwMTAxMDE0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjc0MWFmZWMwMzEyNzg0MDA1YmQwNjBiMmEwM2RlNmFhMGQ3Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/5nv9xMmt0U7TDXkvaqSwvQCX+G
hKbSAp4Ga9Q/6rvppvlAk9rcxScg0IkZHPiKIUN++mvS47wWJLhM04oQPAE9vE4V
zESmkK6xkElnMaOxfPFZ6wFgNhqumLoVkBnyVTT2F7oK5I7UqCOB5WLlED7FaTg1
QwRalf1xzDvilruLkkz+iseYX1HWbZQznS79XwrZeIF1iypsmxmrEqxfbQLiZ0VX
03YYsjlCHhb0mwXlSMcJs+i52XchkdiypU/TTZyyCKfzkjcib7L98l06W75x5bEg
CoxI63y4Fi5IWHAvJGU+lNJQEv4FQkUYvNN9bZ0x+R7prf5TWsexoHQHWQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFA90Gv7AMSeEAFvQYLKgPeaqDXaFMB8GA1UdIwQY
MBaAFNUV8ukUnOG0KMjx7fwAkhXihH9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTIt
MDA4OTk0NDk4MGNhLzEvRDNRYV9zQXhKNFFBVzlCZ3NxQTk1cW9OZG9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTItMDA4OTk0NDk4MGNh
LzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgHqBTAN
BgkqhkiG9w0BAQsFAAOCAQEAOFuGgBn3G2nqP67Ngb08gK/Qa3i9iRdJ/sg6W2AD
zmxlT86sgK8NjLV6I/uo5xAf6gRYrsFEhETWkE9363K7yfbT7W7QtPOlTQmRsYZU
rsLduHDpeRxHGMpKQmuLJqSuXSUVQHonFNIjWIJNnG1xGfC50IbtoRKZrdIKfeEQ
WRG7tY+IIDLVgoJb2XonDLKHIitfy2RpUCnYebVeKHr8jMqs/USA/lveVfV4ocLQ
Eji+e9lxg0c+Y0pxkZqnVyD0Ay/8Cxsc9uiEt0Bgwh+tGHZYTiKK1FH5ruZrYgx6
uZ0Vd3xotkpquuMtP5o7H+qBDzMdMONt8tcYs14kU/JibA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:37:47 2025 by rpki-client