Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/5vI96mdACUYtbrBj1hpxS2th8SU.roa
File: 5vI96mdACUYtbrBj1hpxS2th8SU.roa (raw, json)
Hash identifier: +D5F/vhkd6kDEoeI5nvUAAqsYy/qD8SkAXkJnFT0scM=
Subject key identifier: E6:F2:3D:EA:67:40:09:46:2D:6E:B0:63:D6:1A:71:4B:6B:61:F1:25
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBEDFAD2BC32DED39DAC473A2688A
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/5vI96mdACUYtbrBj1hpxS2th8SU.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215223
IP address blocks: 2a01:e281:a300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:be:df:ad:2b:c3:2d:ed:39:da:c4:73:a2:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6f23dea674009462d6eb063d61a714b6b61f125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:87:9e:99:15:d2:dc:71:49:c3:a5:da:75:
ea:51:64:9f:c2:c5:94:a6:b8:c2:9f:58:bd:2c:a0:
4d:e2:96:5c:c2:f0:00:43:9b:a9:83:f5:e1:ae:37:
09:73:59:f9:c6:60:7a:58:bb:a9:f7:2e:51:76:eb:
ff:9a:18:14:6a:e3:b0:5a:ca:0a:52:b9:68:87:f6:
bb:12:8a:76:e4:6a:c2:42:d3:7e:c4:2d:30:be:f8:
7f:14:b2:0b:c6:61:b5:4e:45:e8:f4:47:33:60:c4:
6e:6d:91:8b:2f:b7:39:18:a7:58:7a:41:0b:5b:05:
e8:ce:de:13:d4:93:c6:4d:e8:80:18:1e:2b:e2:4f:
23:ad:2a:4f:3b:b7:e6:2e:29:de:1a:e0:9f:9f:aa:
e3:5e:b4:3a:35:c6:bc:28:c0:6e:56:07:81:eb:32:
f1:51:f5:fd:01:0e:7e:5c:e6:d6:4e:15:21:16:38:
2b:b3:e7:17:f5:3d:00:19:00:93:fb:b5:35:a9:b1:
4a:c8:66:d5:eb:72:13:c9:28:7f:70:13:d4:35:01:
d9:51:87:8a:0f:df:1b:09:14:fe:71:3a:52:96:0c:
5f:d5:b9:01:36:a0:14:bc:0d:41:68:3b:9d:0e:d2:
29:3e:f1:3c:25:56:d6:33:a8:2f:21:31:0f:98:30:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F2:3D:EA:67:40:09:46:2D:6E:B0:63:D6:1A:71:4B:6B:61:F1:25
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/5vI96mdACUYtbrBj1hpxS2th8SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a300::/40
Signature Algorithm: sha256WithRSAEncryption
30:4d:38:50:57:5f:28:0f:8d:c1:64:bf:6b:4d:f9:f8:7d:af:
e5:f9:05:90:8c:32:78:38:a9:95:dc:fb:80:52:59:c2:48:3a:
35:5a:c9:1e:8f:7e:5a:c2:69:26:83:7d:f7:de:be:6b:77:c8:
cf:ac:9f:38:d3:04:aa:32:6d:2e:7f:56:85:60:e8:89:63:5b:
ab:e8:e0:dd:9a:a2:1f:cf:38:c9:fb:2e:37:00:3b:8f:58:52:
be:c2:5e:27:33:96:db:18:a7:7e:83:78:11:c0:4a:e4:32:7d:
ba:ac:54:e6:f3:c4:a3:58:22:83:6a:8c:40:50:f4:38:e2:0a:
0a:95:f9:3d:d5:50:50:3e:79:4f:a9:e4:75:20:1a:4c:96:a8:
31:be:8e:69:ae:10:fa:22:dd:6e:87:d1:fe:2e:5c:a7:23:4a:
7f:79:80:47:78:b4:a9:e0:12:61:51:4a:d8:94:b1:67:8e:c8:
54:56:94:db:8c:21:eb:be:ac:a4:b5:39:71:95:6b:03:6a:36:
b3:a9:1c:fb:f4:8a:01:48:a8:92:1c:51:39:a3:29:66:be:34:
5b:02:eb:66:24:d3:2f:ff:3e:23:76:41:36:b9:a8:fb:60:b3:
94:ee:71:0d:4d:6e:9c:85:3f:6c:77:8e:e7:b3:b5:dd:55:92:
7d:70:78:b9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQijb7frSvDLe052sRzomiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk
ODhkODEwHhcNMjUwMTAxMTU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmYyM2RlYTY3NDAwOTQ2MmQ2ZWIwNjNkNjFhNzE0YjZiNjFmMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLOHnpkV0txxScOl2nXqUWSfwsWU
prjCn1i9LKBN4pZcwvAAQ5upg/XhrjcJc1n5xmB6WLup9y5Rduv/mhgUauOwWsoK
Urloh/a7Eop25GrCQtN+xC0wvvh/FLILxmG1TkXo9EczYMRubZGLL7c5GKdYekEL
WwXozt4T1JPGTeiAGB4r4k8jrSpPO7fmLineGuCfn6rjXrQ6Nca8KMBuVgeB6zLx
UfX9AQ5+XObWThUhFjgrs+cX9T0AGQCT+7U1qbFKyGbV63ITySh/cBPUNQHZUYeK
D98bCRT+cTpSlgxf1bkBNqAUvA1BaDudDtIpPvE8JVbWM6gvITEPmDDsiQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFObyPepnQAlGLW6wY9YacUtrYfElMB8GA1UdIwQY
MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt
OGQ5NDU1M2I3NWUxLzEvNXZJOTZtZEFDVVl0YnJCajFocHhTMnRoOFNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx
LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigaMw
DQYJKoZIhvcNAQELBQADggEBADBNOFBXXygPjcFkv2tN+fh9r+X5BZCMMng4qZXc
+4BSWcJIOjVayR6PflrCaSaDfffevmt3yM+snzjTBKoybS5/VoVg6IljW6vo4N2a
oh/POMn7LjcAO49YUr7CXiczltsYp36DeBHASuQyfbqsVObzxKNYIoNqjEBQ9Dji
CgqV+T3VUFA+eU+p5HUgGkyWqDG+jmmuEPoi3W6H0f4uXKcjSn95gEd4tKngEmFR
StiUsWeOyFRWlNuMIeu+rKS1OXGVawNqNrOpHPv0igFIqJIcUTmjKWa+NFsC62Yk
0y//PiN2QTa5qPtgs5TucQ1NbpyFP2x3jueztd1Vkn1weLk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:54 2025 by rpki-client