Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/9Qp1lz6gdlmei4XDqjlb77aIr4c.roa
File: 9Qp1lz6gdlmei4XDqjlb77aIr4c.roa (raw, json)
Hash identifier: /GHn25dkvuTMHnSPHF1/eiqXw/UVrF8KRTTdkWjQJCk=
Subject key identifier: F5:0A:75:97:3E:A0:76:59:9E:8B:85:C3:AA:39:5B:EF:B6:88:AF:87
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 019423D6FB3628F8241675AFBF061EB90045
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/9Qp1lz6gdlmei4XDqjlb77aIr4c.roa
Signing time: Wed 01 Jan 2025 21:47:59 +0000
ROA not before: Wed 01 Jan 2025 21:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216157
IP address blocks: 2a12:39c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fb:36:28:f8:24:16:75:af:bf:06:1e:b9:00:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 1 21:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f50a75973ea076599e8b85c3aa395befb688af87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:6d:c6:21:ee:c9:f8:af:8d:a0:ff:26:ed:
d1:b2:a4:92:f7:cd:b4:9e:90:da:23:c8:46:0e:55:
3c:d1:d2:cb:73:d9:2f:a5:e0:04:b8:8c:7d:fa:29:
ae:45:dc:d9:7f:35:a8:65:74:53:66:ba:20:fd:4d:
db:58:50:b1:07:08:d7:ad:64:41:39:fb:85:79:43:
66:8a:3e:42:8f:8e:59:ec:b3:75:22:82:84:fa:2d:
15:c2:c8:10:93:f3:3a:c7:06:17:f9:91:5b:46:fd:
4f:3c:11:96:6b:b9:42:40:77:04:e3:3d:03:fd:e1:
dc:2d:a4:5b:c8:10:f1:7d:39:53:f3:95:c0:40:2c:
03:24:08:45:52:19:73:f4:88:9f:cc:69:f6:e0:5d:
bd:e9:9d:af:9f:4a:f3:83:96:e9:68:19:01:a1:d9:
d1:cd:6b:b4:f2:50:99:32:bd:8e:c1:db:98:95:41:
97:2f:ab:b1:fe:e3:a4:00:cc:b2:a9:6b:69:60:a2:
55:d1:17:c7:5a:ef:a7:68:55:ed:e5:bd:76:86:4c:
a6:4c:b0:96:2e:b4:09:b6:6c:ef:38:b9:fd:2f:6d:
f0:45:28:ef:b5:03:72:6e:d4:05:01:ae:0d:e3:2f:
e8:da:57:79:c7:15:3a:47:a8:38:07:f0:51:24:23:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0A:75:97:3E:A0:76:59:9E:8B:85:C3:AA:39:5B:EF:B6:88:AF:87
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/9Qp1lz6gdlmei4XDqjlb77aIr4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:3c:40:0d:0d:64:72:bf:66:84:4b:59:9f:da:b2:b5:b6:58:
0e:21:bc:c6:f0:26:42:e2:37:d2:86:f2:18:0d:d5:3a:03:f8:
59:92:f8:36:ed:3d:81:76:66:9a:d4:4c:d3:a1:82:f6:e6:59:
cc:4a:4b:24:51:2e:29:84:4f:63:04:64:9d:83:14:ed:65:35:
e2:7f:3d:e7:d7:3d:bc:6e:08:33:38:4f:45:14:36:4f:20:03:
8e:cc:72:c7:47:fd:a5:e4:39:52:fb:0d:24:bd:dd:47:28:ca:
e5:16:15:b3:d3:9c:45:5d:6f:bf:d4:07:5b:d6:98:d4:e0:21:
91:c4:5e:20:7c:c7:e6:44:27:a3:6e:ed:4c:67:23:55:7a:d7:
e3:15:db:1a:89:8e:20:2b:5f:3a:d8:a2:e4:1f:a0:8e:a1:09:
d5:5a:01:a6:43:25:6f:dd:ad:ef:86:d7:ae:4d:77:a9:2e:28:
c1:56:a0:1b:21:f4:ac:f5:0b:82:a2:83:ab:1c:d4:fe:9b:bf:
22:bf:c3:ae:cd:dc:47:45:d7:85:65:dc:0a:26:36:4a:85:a2:
68:5e:50:2c:95:65:49:46:0e:5e:22:47:40:94:9c:00:c2:e2:
fd:4e:b0:0d:8c:30:0e:4e:7c:74:8f:52:04:a1:2e:de:37:e8:
8a:63:af:e4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQj1vs2KPgkFnWvvwYeuQBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi
YTA5MjAwHhcNMjUwMTAxMjE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTBhNzU5NzNlYTA3NjU5OWU4Yjg1YzNhYTM5NWJlZmI2ODhhZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi29txiHuyfivjaD/Ju3RsqSS9820
npDaI8hGDlU80dLLc9kvpeAEuIx9+imuRdzZfzWoZXRTZrog/U3bWFCxBwjXrWRB
OfuFeUNmij5Cj45Z7LN1IoKE+i0VwsgQk/M6xwYX+ZFbRv1PPBGWa7lCQHcE4z0D
/eHcLaRbyBDxfTlT85XAQCwDJAhFUhlz9IifzGn24F296Z2vn0rzg5bpaBkBodnR
zWu08lCZMr2OwduYlUGXL6ux/uOkAMyyqWtpYKJV0RfHWu+naFXt5b12hkymTLCW
LrQJtmzvOLn9L23wRSjvtQNybtQFAa4N4y/o2ld5xxU6R6g4B/BRJCM4DwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPUKdZc+oHZZnouFw6o5W++2iK+HMB8GA1UdIwQY
MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt
MTdlNjZjMWZkM2QxLzEvOVFwMWx6NmdkbG1laTRYRHFqbGI3N2FJcjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx
LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhI5wDAN
BgkqhkiG9w0BAQsFAAOCAQEAljxADQ1kcr9mhEtZn9qytbZYDiG8xvAmQuI30oby
GA3VOgP4WZL4Nu09gXZmmtRM06GC9uZZzEpLJFEuKYRPYwRknYMU7WU14n8959c9
vG4IMzhPRRQ2TyADjsxyx0f9peQ5UvsNJL3dRyjK5RYVs9OcRV1vv9QHW9aY1OAh
kcReIHzH5kQno27tTGcjVXrX4xXbGomOICtfOtii5B+gjqEJ1VoBpkMlb92t74bX
rk13qS4owVagGyH0rPULgqKDqxzU/pu/Ir/Drs3cR0XXhWXcCiY2SoWiaF5QLJVl
SUYOXiJHQJScAMLi/U6wDYwwDk58dI9SBKEu3jfoimOv5A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:57:02 2025 by rpki-client