Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/qT5tUrp0ieWxjsIH98IvAEwbuX8.roa
File: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (raw, json)
Hash identifier: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=
Subject key identifier: A9:3E:6D:52:BA:74:89:E5:B1:8E:C2:07:F7:C2:2F:00:4C:1B:B9:7F
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019422FBB02F19255453413D0B9B0306855D
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/qT5tUrp0ieWxjsIH98IvAEwbuX8.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212895
IP address blocks: 2a11:6c7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b0:2f:19:25:54:53:41:3d:0b:9b:03:06:85:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a93e6d52ba7489e5b18ec207f7c22f004c1bb97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:f7:7d:33:b3:d9:4e:d6:46:51:bb:26:ee:
87:5e:2c:2b:1d:c5:58:e9:80:ae:f1:5d:53:8e:d6:
6f:56:f2:2e:c6:4e:08:c7:76:0e:be:a0:8b:c7:32:
e4:b1:a7:cd:4f:07:d0:86:04:f6:cd:67:b6:f9:df:
b4:ed:2d:ad:ce:7c:e2:5d:82:b1:93:6f:c5:ac:c9:
df:62:5c:01:1d:5b:26:71:1a:97:fb:0e:09:b6:21:
7f:b1:6c:8b:b0:9a:55:c6:29:30:1a:ed:cf:c7:59:
bd:2d:87:fc:04:9a:d6:ab:ea:61:a8:4d:c6:69:d2:
3b:5f:a3:be:54:13:67:6b:cd:de:b0:a0:3b:45:f9:
e7:b0:b8:4a:86:c6:3d:ae:73:60:be:b5:99:c4:5b:
3e:35:dd:90:23:b2:f9:1d:e1:98:3a:5d:66:48:4e:
36:d2:37:85:bf:28:36:e7:d0:c0:3b:40:91:1f:43:
26:f5:68:81:b2:79:a2:be:6c:5e:58:f1:25:14:12:
3f:cf:db:16:69:48:d1:0b:f0:10:43:b1:33:23:4f:
d5:9f:13:8a:ae:c4:c5:cb:78:0b:06:66:31:67:91:
8f:58:74:11:73:dd:23:74:48:f6:e8:af:f2:af:de:
66:4c:f2:ef:69:e9:00:57:1e:19:fc:39:13:8a:1a:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:6D:52:BA:74:89:E5:B1:8E:C2:07:F7:C2:2F:00:4C:1B:B9:7F
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/qT5tUrp0ieWxjsIH98IvAEwbuX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6c7::/32
Signature Algorithm: sha256WithRSAEncryption
01:69:4f:e4:c4:86:20:14:5b:be:8f:aa:6b:49:f9:56:2f:22:
54:9e:3f:f6:61:5c:1b:63:7f:24:6d:53:9a:eb:21:ff:9c:28:
58:f8:c9:0b:d7:fa:a0:33:dc:aa:e6:c4:a4:27:1e:b0:d0:9f:
2c:27:fd:64:5a:10:03:17:85:c0:7d:ea:e5:8e:3e:c7:8a:49:
88:22:c9:c5:f5:85:9c:d6:d3:52:d7:8b:17:7f:4d:07:70:7f:
55:02:e1:cc:5c:8c:d3:cf:de:53:d9:46:f5:8e:a4:e1:3b:3c:
85:f2:8f:7e:5a:2b:72:dd:3f:44:0d:eb:c2:51:88:28:ff:09:
42:d1:c8:64:ea:a7:0f:0c:76:12:3e:b8:71:a3:b0:98:7c:51:
58:8a:25:6a:3e:ff:9c:85:b6:29:92:2f:2f:17:b2:f7:9a:7e:
24:00:4a:44:a2:f0:97:d9:1d:de:91:be:2d:0b:5b:9e:dd:62:
25:d1:da:80:f4:ea:3c:52:1d:f2:53:2b:75:40:01:28:f3:0e:
ac:a6:60:93:36:4b:f2:01:ea:88:f9:3f:a7:3d:3a:57:80:b2:
2b:ed:11:cf:d5:6d:a6:04:20:bb:35:aa:05:40:5f:0d:76:5c:
2c:76:df:f9:d3:37:7f:78:2a:6d:b8:cb:ea:31:d1:fa:32:3b:
d5:d1:75:7a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQi+7AvGSVUU0E9C5sDBoVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzk5ZmJhOWFhZTlkMmQ2ZmZlNTJhZThjNzRhZTM4ZmM2
YzFhZjEwHhcNMjUwMTAxMTc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTNlNmQ1MmJhNzQ4OWU1YjE4ZWMyMDdmN2MyMmYwMDRjMWJiOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/z3fTOz2U7WRlG7Ju6HXiwrHcVY
6YCu8V1TjtZvVvIuxk4Ix3YOvqCLxzLksafNTwfQhgT2zWe2+d+07S2tznziXYKx
k2/FrMnfYlwBHVsmcRqX+w4JtiF/sWyLsJpVxikwGu3Px1m9LYf8BJrWq+phqE3G
adI7X6O+VBNna83esKA7RfnnsLhKhsY9rnNgvrWZxFs+Nd2QI7L5HeGYOl1mSE42
0jeFvyg259DAO0CRH0Mm9WiBsnmivmxeWPElFBI/z9sWaUjRC/AQQ7EzI0/VnxOK
rsTFy3gLBmYxZ5GPWHQRc90jdEj26K/yr95mTPLvaekAVx4Z/DkTihr5ZwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKk+bVK6dInlsY7CB/fCLwBMG7l/MB8GA1UdIwQY
MBaAFF45n7qarp0tb/5Srox0rjj8bBrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMt
YmQ4MDlkOWRlZGI5LzEvcVQ1dFVycDBpZVd4anNJSDk4SXZBRXdidVg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMtYmQ4MDlkOWRlZGI5
LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhEGxzAN
BgkqhkiG9w0BAQsFAAOCAQEAAWlP5MSGIBRbvo+qa0n5Vi8iVJ4/9mFcG2N/JG1T
mush/5woWPjJC9f6oDPcqubEpCcesNCfLCf9ZFoQAxeFwH3q5Y4+x4pJiCLJxfWF
nNbTUteLF39NB3B/VQLhzFyM08/eU9lG9Y6k4Ts8hfKPflorct0/RA3rwlGIKP8J
QtHIZOqnDwx2Ej64caOwmHxRWIolaj7/nIW2KZIvLxey95p+JABKRKLwl9kd3pG+
LQtbnt1iJdHagPTqPFId8lMrdUABKPMOrKZgkzZL8gHqiPk/pz06V4CyK+0Rz9Vt
pgQguzWqBUBfDXZcLHbf+dM3f3gqbbjL6jHR+jI71dF1eg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:42:38 2025 by rpki-client