Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/pobSRqB4Q1gZ4DXOZf4V9pVZrL4.roa
File: pobSRqB4Q1gZ4DXOZf4V9pVZrL4.roa (raw, json)
Hash identifier: jRPTi+5Lw+W7BzK3Rqd36iIkpmMkM0yVpsHfYrztv94=
Subject key identifier: A6:86:D2:46:A0:78:43:58:19:E0:35:CE:65:FE:15:F6:95:59:AC:BE
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 01941F8C2804A7F24409844D57C45C44D48E
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/pobSRqB4Q1gZ4DXOZf4V9pVZrL4.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3308
IP address blocks: 2a03:3b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:28:04:a7:f2:44:09:84:4d:57:c4:5c:44:d4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a686d246a078435819e035ce65fe15f69559acbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:09:c2:14:21:a5:ed:6d:a9:bc:86:d9:79:
ca:97:6b:ce:0f:58:bd:c2:b5:10:df:46:83:a2:dc:
8d:e4:2c:86:6b:6e:16:73:90:6f:83:67:bb:37:4a:
c2:7d:0a:80:0e:db:bf:b1:c2:aa:d0:2c:c1:72:76:
4b:ac:6b:67:59:40:5a:0c:63:10:23:cd:a8:5f:14:
a9:c6:32:8e:98:e1:9e:5a:e0:5e:52:a0:ce:37:e2:
b3:5f:68:7a:a6:3b:f9:8d:a1:98:04:e1:e1:3f:d3:
1c:6c:27:87:29:3b:53:22:0e:03:a0:8f:eb:d0:a7:
96:86:77:fd:60:51:32:b8:42:61:6a:1c:93:bb:2c:
3c:e3:43:96:13:0c:95:34:6c:de:1e:11:50:ff:71:
17:1f:de:6a:ab:a0:c7:8d:e7:36:76:df:ec:55:d7:
39:c5:f9:fa:1c:13:51:b8:7e:6d:49:c9:9a:98:53:
a1:37:ad:dd:de:9b:7e:a1:ba:e6:ba:a5:8c:f1:9e:
f2:94:f8:41:79:ed:dd:52:e2:92:f7:6f:0a:b8:8c:
7c:f4:ea:2d:cf:9d:ba:9d:cc:de:9f:b7:20:9c:dc:
55:f2:58:31:77:80:58:19:6c:85:1d:6b:6c:15:00:
5f:bb:1d:de:a9:18:ca:7e:dc:74:90:49:4b:67:8b:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:86:D2:46:A0:78:43:58:19:E0:35:CE:65:FE:15:F6:95:59:AC:BE
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/pobSRqB4Q1gZ4DXOZf4V9pVZrL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:3b80::/32
Signature Algorithm: sha256WithRSAEncryption
4e:80:71:61:ef:e4:56:ab:33:8b:b4:e0:bc:10:c9:83:85:b7:
65:5b:25:17:47:b9:a9:d0:7d:4f:da:34:3b:04:12:f9:55:cd:
a6:00:3b:0c:6a:e3:66:c9:bc:3d:e0:0d:7c:61:7e:49:07:46:
c2:cc:82:41:47:f4:03:64:be:11:19:44:9c:64:0a:ce:ec:74:
2c:a3:8e:15:04:e2:3b:e8:38:8a:3c:90:8e:17:86:f6:d8:2c:
5c:59:aa:9e:86:39:7a:76:26:95:6a:03:30:cc:1b:3e:20:d7:
f9:8e:94:75:f7:84:ae:c1:a5:04:e5:9e:c4:9e:4c:ee:88:ca:
a7:e8:74:80:a2:8f:c1:67:2f:9d:a5:63:15:02:6f:8a:64:b2:
dc:8a:c8:d3:d7:c4:6a:a0:63:64:67:12:17:8b:bc:24:59:43:
ac:ab:f5:8a:e3:73:ce:41:6a:7e:77:dd:d5:ca:49:a8:b5:a3:
d4:d8:44:08:5e:fa:64:6e:a6:65:c8:61:6b:b5:fe:66:cf:a4:
eb:62:03:98:12:5b:7f:62:f3:08:86:fa:e8:75:26:88:1e:92:
52:6b:09:ab:5d:8f:6e:f7:84:2c:1d:1a:ce:5d:12:95:65:a4:
06:39:90:1b:41:42:b2:19:da:f4:e1:8f:55:ad:33:95:3a:e6:
f4:56:98:ca
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQfjCgEp/JECYRNV8RcRNSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODMwNzMwNzZlNjczYTMyYjdkZDZiY2RjMGZiY2MxNmYz
N2I2YTEwHhcNMjUwMTAxMDE0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjg2ZDI0NmEwNzg0MzU4MTllMDM1Y2U2NWZlMTVmNjk1NTlhY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiMJwhQhpe1tqbyG2XnKl2vOD1i9
wrUQ30aDotyN5CyGa24Wc5Bvg2e7N0rCfQqADtu/scKq0CzBcnZLrGtnWUBaDGMQ
I82oXxSpxjKOmOGeWuBeUqDON+KzX2h6pjv5jaGYBOHhP9McbCeHKTtTIg4DoI/r
0KeWhnf9YFEyuEJhahyTuyw840OWEwyVNGzeHhFQ/3EXH95qq6DHjec2dt/sVdc5
xfn6HBNRuH5tScmamFOhN63d3pt+obrmuqWM8Z7ylPhBee3dUuKS928KuIx89Oot
z526nczen7cgnNxV8lgxd4BYGWyFHWtsFQBfux3eqRjKftx0kElLZ4vgDQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKaG0kageENYGeA1zmX+FfaVWay+MB8GA1UdIwQY
MBaAFFKDBzB25nOjK33WvNwPvMFvN7ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9NSE1IYm1jNk1yZmRhODNBLTh3VzgzdHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8yN2U1MjctZTAyZS00YzMwLWE4NmIt
M2MzNTRkNjE4YjNhLzEvcG9iU1JxQjRRMWdaNERYT1pmNFY5cFZackw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8yN2U1MjctZTAyZS00YzMwLWE4NmItM2MzNTRkNjE4YjNh
LzEvVW9NSE1IYm1jNk1yZmRhODNBLTh3VzgzdHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgM7gDAN
BgkqhkiG9w0BAQsFAAOCAQEAToBxYe/kVqszi7TgvBDJg4W3ZVslF0e5qdB9T9o0
OwQS+VXNpgA7DGrjZsm8PeANfGF+SQdGwsyCQUf0A2S+ERlEnGQKzux0LKOOFQTi
O+g4ijyQjheG9tgsXFmqnoY5enYmlWoDMMwbPiDX+Y6UdfeErsGlBOWexJ5M7ojK
p+h0gKKPwWcvnaVjFQJvimSy3IrI09fEaqBjZGcSF4u8JFlDrKv1iuNzzkFqfnfd
1cpJqLWj1NhECF76ZG6mZchha7X+Zs+k62IDmBJbf2LzCIb66HUmiB6SUmsJq12P
bveELB0azl0SlWWkBjmQG0FCshna9OGPVa0zlTrm9FaYyg==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:34 2025 by rpki-client