Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa
File: kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa (raw, json)
Hash identifier: cRZ9xm6BVrOYd9CySCPL4z+78bjkaTOH3OZ66vuPhhQ=
Subject key identifier: 91:0C:F3:5F:40:D0:D9:8C:8C:49:32:79:C8:59:77:BF:DE:4B:90:32
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBAA65A5C5BF0C8696126D905C8DF
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207852
IP address blocks: 2a01:e281:aa00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ba:a6:5a:5c:5b:f0:c8:69:61:26:d9:05:c8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=910cf35f40d0d98c8c493279c85977bfde4b9032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:81:50:5f:c5:8f:71:c5:aa:2a:fb:15:37:
68:e3:0a:44:00:41:e3:94:77:fa:7f:ea:8e:c1:e3:
7c:cf:27:f1:d5:a2:60:94:32:4d:48:d1:fa:98:4a:
c9:fb:d6:bb:16:f5:ff:62:03:b5:df:d8:24:14:02:
77:aa:51:60:f7:26:00:53:0e:48:b6:c4:83:62:2e:
a9:40:23:9d:97:50:16:27:21:a6:70:86:d7:17:96:
0b:10:f2:64:ff:e7:ff:6e:ee:3b:9e:ca:55:fd:23:
4a:71:60:1e:11:1e:7b:ed:bb:4e:c3:54:fc:15:f6:
d0:39:7f:78:c7:de:b1:87:45:b3:a2:5d:aa:e7:c5:
3d:09:f9:cd:66:46:c3:80:91:fe:58:4a:ee:9a:47:
86:40:f8:4e:7d:26:12:a3:f7:2b:f8:32:df:2e:44:
e0:5c:47:f3:8a:87:d1:ed:4b:0f:ba:fa:79:19:9e:
89:2d:87:43:10:d7:22:a1:84:e1:54:42:26:d4:99:
db:44:d7:17:88:53:37:54:61:c8:55:63:10:13:f8:
f2:c5:a6:b5:bc:5f:2f:a7:6e:62:e9:47:92:e1:92:
ad:ff:2e:df:33:9e:87:ad:93:56:61:e8:db:9b:c5:
18:9f:8e:7c:b2:62:f8:c4:b3:ed:41:03:b6:45:49:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0C:F3:5F:40:D0:D9:8C:8C:49:32:79:C8:59:77:BF:DE:4B:90:32
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:aa00::/40
Signature Algorithm: sha256WithRSAEncryption
a2:f4:82:31:1b:41:0b:19:ed:e9:f4:44:b6:0d:9d:58:48:48:
e1:ac:82:97:c5:2f:b5:35:1e:67:05:23:27:30:37:ce:26:b0:
5f:d2:74:71:d0:c1:11:d0:94:50:b6:61:95:94:bc:73:2c:d2:
fb:1e:e6:cf:b2:2b:ee:a9:9f:4d:e8:d3:e5:89:a1:57:9f:e5:
0b:cc:08:8b:37:3c:05:8f:e1:fe:60:4c:35:fc:49:8e:c2:30:
a2:7e:b3:dd:c3:e8:f5:4d:eb:18:2f:14:fa:33:75:6d:dd:e4:
ce:31:fe:4f:29:d6:6a:cb:bc:67:b0:53:9e:4f:1e:cb:db:59:
0b:bb:fe:bf:6d:42:ef:f4:09:a9:e7:f5:29:7c:6a:c0:d3:20:
97:4f:48:00:66:78:31:3e:49:fa:38:77:d3:15:41:4f:f2:49:
0d:b7:e7:51:18:fe:0e:99:84:4f:4c:ec:80:5c:d2:c6:63:4b:
2a:1a:1f:d6:25:1c:2f:cd:c2:d7:18:fc:44:01:2d:9c:d8:7c:
ca:87:2b:ca:72:0d:fa:02:c2:9d:0a:a4:20:ff:45:e3:23:76:
1c:6c:b5:68:eb:d5:44:fc:40:5b:cf:cf:20:24:58:6d:1d:a4:
5e:a3:29:64:d6:f3:36:12:73:63:27:ee:3c:50:ba:fc:35:b0:
b7:1b:8f:57
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQijbqmWlxb8MhpYSbZBcjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk
ODhkODEwHhcNMjUwMTAxMTU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTBjZjM1ZjQwZDBkOThjOGM0OTMyNzljODU5NzdiZmRlNGI5MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOqBUF/Fj3HFqir7FTdo4wpEAEHj
lHf6f+qOweN8zyfx1aJglDJNSNH6mErJ+9a7FvX/YgO139gkFAJ3qlFg9yYAUw5I
tsSDYi6pQCOdl1AWJyGmcIbXF5YLEPJk/+f/bu47nspV/SNKcWAeER577btOw1T8
FfbQOX94x96xh0Wzol2q58U9CfnNZkbDgJH+WErumkeGQPhOfSYSo/cr+DLfLkTg
XEfziofR7UsPuvp5GZ6JLYdDENcioYThVEIm1JnbRNcXiFM3VGHIVWMQE/jyxaa1
vF8vp25i6UeS4ZKt/y7fM56HrZNWYejbm8UYn458smL4xLPtQQO2RUl0fQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJEM819A0NmMjEkyechZd7/eS5AyMB8GA1UdIwQY
MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt
OGQ5NDU1M2I3NWUxLzEva1F6elgwRFEyWXlNU1RKNXlGbDN2OTVMa0RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx
LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigaow
DQYJKoZIhvcNAQELBQADggEBAKL0gjEbQQsZ7en0RLYNnVhISOGsgpfFL7U1HmcF
IycwN84msF/SdHHQwRHQlFC2YZWUvHMs0vse5s+yK+6pn03o0+WJoVef5QvMCIs3
PAWP4f5gTDX8SY7CMKJ+s93D6PVN6xgvFPozdW3d5M4x/k8p1mrLvGewU55PHsvb
WQu7/r9tQu/0Cann9Sl8asDTIJdPSABmeDE+Sfo4d9MVQU/ySQ2351EY/g6ZhE9M
7IBc0sZjSyoaH9YlHC/NwtcY/EQBLZzYfMqHK8pyDfoCwp0KpCD/ReMjdhxstWjr
1UT8QFvPzyAkWG0dpF6jKWTW8zYSc2Mn7jxQuvw1sLcbj1c=
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:29:39 2025 by rpki-client