Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/HpZmD5B1zLmPnY3f6N6Qgd7zmek.roa
File: HpZmD5B1zLmPnY3f6N6Qgd7zmek.roa (raw, json)
Hash identifier: m9j0WMeURx0X/gO3nVCQhucXNdsmWk+LDFj4hOxWEBE=
Subject key identifier: 1E:96:66:0F:90:75:CC:B9:8F:9D:8D:DF:E8:DE:90:81:DE:F3:99:E9
Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145
Certificate serial: 0194214409C05E2FD6ECEB3F1E24DE01083A
Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/HpZmD5B1zLmPnY3f6N6Qgd7zmek.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215423
IP address blocks: 2a14:bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:09:c0:5e:2f:d6:ec:eb:3f:1e:24:de:01:08:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e96660f9075ccb98f9d8ddfe8de9081def399e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:5b:95:11:4c:de:d8:e3:fe:97:fb:43:ef:
98:ea:88:b8:71:28:5b:31:ac:cb:88:5a:5d:4e:34:
ed:c2:39:57:3e:1a:5b:63:aa:dd:fc:38:cb:50:db:
85:d4:7f:97:c1:62:4a:cd:8d:3f:54:68:b1:42:07:
c3:7a:61:d3:7b:9d:49:9f:0d:d5:9b:a9:6a:76:45:
ad:7a:09:da:ab:73:06:6c:2a:87:51:58:12:fb:5d:
fc:7a:e2:7d:9c:9f:fb:a9:bb:b3:48:fa:09:6d:a0:
95:e4:ea:3b:da:c5:33:cf:2f:9c:18:4e:6a:b1:62:
36:39:f2:94:06:18:a5:66:b1:ff:0a:bb:98:89:6d:
e5:93:6f:d1:b6:0f:45:58:79:b7:6a:cb:1f:d8:13:
ca:f3:ba:ad:df:d6:8a:49:ce:8b:28:53:f5:9c:25:
ee:b4:23:50:92:e9:30:cb:13:4f:af:42:59:ec:a4:
54:16:6e:12:be:43:7d:49:a3:95:0e:be:a3:45:ae:
f8:94:51:42:b4:e1:54:7d:45:f7:ec:cd:68:57:58:
8a:3e:77:7c:e2:34:bd:96:6c:70:2b:d5:d1:83:4b:
24:f8:8a:47:4f:33:76:7f:d3:a5:6b:95:52:1a:d7:
e6:b4:d3:e8:a9:3e:7c:17:51:9a:24:58:31:33:19:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:96:66:0F:90:75:CC:B9:8F:9D:8D:DF:E8:DE:90:81:DE:F3:99:E9
X509v3 Authority Key Identifier:
keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/HpZmD5B1zLmPnY3f6N6Qgd7zmek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
06:e4:03:0e:b8:4d:75:41:0c:31:34:b7:61:10:0c:e6:80:49:
d8:0f:87:90:e7:08:8a:1d:7d:32:8f:b1:fe:25:59:74:d5:3a:
76:0e:39:95:6d:c6:42:ad:65:e3:d5:6e:90:29:6c:bf:9d:6b:
a1:74:fc:51:a3:0f:96:bc:52:9a:ac:ef:96:b9:56:fe:36:cf:
7d:98:c9:08:5a:5e:a1:c5:0e:b6:0d:85:46:52:19:b0:57:72:
0b:70:64:e8:d3:a2:14:d2:45:00:d2:d5:c5:da:aa:a4:57:fc:
f1:24:54:b0:a6:17:cb:0c:31:4d:6d:0f:96:ae:1c:ed:8e:d9:
3d:0a:39:60:fc:e3:6e:be:30:31:42:35:75:50:8b:60:a5:66:
99:39:9d:40:21:9c:3c:0d:ca:17:66:e5:a3:86:08:10:87:03:
3b:83:82:fa:f4:2f:93:f2:db:e0:ac:41:65:f6:49:30:51:fe:
5d:da:0d:40:a1:d9:5d:b2:31:70:49:b6:b2:12:18:27:d9:ac:
dd:a9:39:bd:fe:88:95:cf:d1:e4:1c:3a:ec:1d:f6:5e:c2:38:
51:5e:5b:df:46:4d:d5:da:72:ce:7a:6d:2b:11:f1:54:b3:8e:
9b:bd:bb:cf:ab:21:8f:d6:ef:32:9c:c1:30:9d:8f:64:2f:df:
23:ff:c1:da
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQhRAnAXi/W7Os/HiTeAQg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNDc3N2Q0OTEzNGVhYjc1YTc5YzExMTgzMmFkN2VjZTcy
NjcxNDUwHhcNMjUwMTAxMDk0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTk2NjYwZjkwNzVjY2I5OGY5ZDhkZGZlOGRlOTA4MWRlZjM5OWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD9blRFM3tjj/pf7Q++Y6oi4cShb
MazLiFpdTjTtwjlXPhpbY6rd/DjLUNuF1H+XwWJKzY0/VGixQgfDemHTe51Jnw3V
m6lqdkWtegnaq3MGbCqHUVgS+138euJ9nJ/7qbuzSPoJbaCV5Oo72sUzzy+cGE5q
sWI2OfKUBhilZrH/CruYiW3lk2/Rtg9FWHm3assf2BPK87qt39aKSc6LKFP1nCXu
tCNQkukwyxNPr0JZ7KRUFm4SvkN9SaOVDr6jRa74lFFCtOFUfUX37M1oV1iKPnd8
4jS9lmxwK9XRg0sk+IpHTzN2f9Ola5VSGtfmtNPoqT58F1GaJFgxMxnfWQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFB6WZg+Qdcy5j52N3+jekIHe85npMB8GA1UdIwQY
MBaAFE9Hd9SRNOq3WnnBEYMq1+znJnFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgt
OGVjMWJmOWZkYTJiLzEvSHBabUQ1QjF6TG1QblkzZjZONlFnZDd6bWVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgtOGVjMWJmOWZkYTJi
LzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQLwDAN
BgkqhkiG9w0BAQsFAAOCAQEABuQDDrhNdUEMMTS3YRAM5oBJ2A+HkOcIih19Mo+x
/iVZdNU6dg45lW3GQq1l49VukClsv51roXT8UaMPlrxSmqzvlrlW/jbPfZjJCFpe
ocUOtg2FRlIZsFdyC3Bk6NOiFNJFANLVxdqqpFf88SRUsKYXywwxTW0Plq4c7Y7Z
PQo5YPzjbr4wMUI1dVCLYKVmmTmdQCGcPA3KF2blo4YIEIcDO4OC+vQvk/Lb4KxB
ZfZJMFH+XdoNQKHZXbIxcEm2shIYJ9ms3ak5vf6Ilc/R5Bw67B32XsI4UV5b30ZN
1dpyznptKxHxVLOOm727z6shj9bvMpzBMJ2PZC/fI//B2g==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:54 2025 by rpki-client