Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/uPVNzfaFCEVH8pgEcujrS2hKdGY.roa
File: uPVNzfaFCEVH8pgEcujrS2hKdGY.roa (raw, json)
Hash identifier: 624lPGVpaWFoqr9oTQxsUT+zutBPV/3xF9eLcAlFX3M=
Subject key identifier: B8:F5:4D:CD:F6:85:08:45:47:F2:98:04:72:E8:EB:4B:68:4A:74:66
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0194228DBBE940676E7EF45400FB5F9C6C8A
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/uPVNzfaFCEVH8pgEcujrS2hKdGY.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213880
IP address blocks: 2a01:e281:b200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bb:e9:40:67:6e:7e:f4:54:00:fb:5f:9c:6c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8f54dcdf685084547f2980472e8eb4b684a7466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:b3:33:54:dd:87:3a:3b:24:94:81:09:a0:
e6:56:90:e2:ae:d2:4f:b8:5c:b0:6e:1a:d3:68:2a:
dc:81:88:b7:cf:13:53:a1:a5:31:c6:3e:87:91:a4:
22:2a:65:0b:5e:34:89:53:3e:3e:bc:72:52:85:fe:
ab:37:e2:27:b4:33:8e:c7:4c:fc:c4:c4:65:1b:95:
99:f5:e7:56:39:ce:22:f3:5d:15:d6:74:7a:9c:08:
e0:e0:51:51:04:f4:92:94:db:3c:13:36:1e:37:10:
ac:39:7b:8a:29:f9:81:3d:15:3b:ad:47:a6:38:70:
ce:60:42:bd:b9:31:48:81:ed:fd:fe:80:12:bf:78:
f5:5e:a2:2d:79:34:5c:79:eb:46:9b:a8:ae:99:ba:
6e:1c:0d:e8:6d:42:2b:e8:ad:5d:b9:3f:cd:5b:30:
d2:75:7f:b2:8f:08:99:66:99:f2:69:a8:78:fe:86:
7d:89:ed:9a:e4:c6:b8:c7:f1:39:c5:30:6c:50:ac:
34:30:22:20:ae:f7:28:95:3b:fe:a2:bd:29:ea:71:
59:b3:42:71:3b:d5:e0:28:e4:7f:9b:d1:98:9e:01:
19:0d:6e:9d:83:82:4a:ab:9e:63:4f:0e:c1:70:cd:
6c:0e:73:ae:fe:e7:d8:b0:1c:ab:71:57:b2:04:fb:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:4D:CD:F6:85:08:45:47:F2:98:04:72:E8:EB:4B:68:4A:74:66
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/uPVNzfaFCEVH8pgEcujrS2hKdGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:b200::/40
Signature Algorithm: sha256WithRSAEncryption
5c:63:5d:e2:73:3d:65:7e:db:90:58:6f:be:20:c4:d8:95:ed:
e1:3d:4e:0f:19:91:18:85:d4:bd:56:0a:cf:0c:b3:41:6a:3e:
da:f8:44:33:75:75:71:ce:47:91:d7:29:1c:4a:9c:c5:4d:df:
82:b5:f6:18:a4:37:ad:1e:9c:e6:42:1f:dc:e9:12:fe:47:0d:
fc:dd:bf:ce:81:af:bb:6a:43:5b:51:3e:42:3e:e4:f6:a4:ff:
33:f8:06:bf:b3:2f:77:96:bc:73:4d:25:49:42:36:8d:a2:e0:
ab:d8:fd:f8:10:12:c8:87:26:8f:e8:22:7c:35:76:08:bc:be:
18:fb:7b:97:4c:7f:fe:4b:da:12:ad:ea:36:cf:89:57:a6:c2:
0b:1c:da:c9:cd:59:6e:f4:6e:aa:02:bf:d7:84:6a:7c:86:56:
97:34:60:33:1a:2a:6f:ec:d8:c5:85:4a:a8:cf:e9:38:00:62:
6c:95:00:bf:75:41:c4:0b:8c:a9:b3:c8:40:ec:93:f1:9f:c5:
82:db:7a:1a:b0:af:88:b7:29:25:8b:a5:1e:2d:ff:7b:78:26:
63:49:70:54:ae:5a:ad:87:25:17:57:b4:04:36:29:17:45:ca:
2b:5c:65:8f:8f:87:32:e7:37:59:bb:04:10:b1:10:ee:54:3c:
39:10:8a:fb
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQijbvpQGdufvRUAPtfnGyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk
ODhkODEwHhcNMjUwMTAxMTU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGY1NGRjZGY2ODUwODQ1NDdmMjk4MDQ3MmU4ZWI0YjY4NGE3NDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FOzM1Tdhzo7JJSBCaDmVpDirtJP
uFywbhrTaCrcgYi3zxNToaUxxj6HkaQiKmULXjSJUz4+vHJShf6rN+IntDOOx0z8
xMRlG5WZ9edWOc4i810V1nR6nAjg4FFRBPSSlNs8EzYeNxCsOXuKKfmBPRU7rUem
OHDOYEK9uTFIge39/oASv3j1XqIteTRceetGm6iumbpuHA3obUIr6K1duT/NWzDS
dX+yjwiZZpnyaah4/oZ9ie2a5Ma4x/E5xTBsUKw0MCIgrvcolTv+or0p6nFZs0Jx
O9XgKOR/m9GYngEZDW6dg4JKq55jTw7BcM1sDnOu/ufYsByrcVeyBPvV8wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLj1Tc32hQhFR/KYBHLo60toSnRmMB8GA1UdIwQY
MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt
OGQ5NDU1M2I3NWUxLzEvdVBWTnpmYUZDRVZIOHBnRWN1anJTMmhLZEdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx
LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigbIw
DQYJKoZIhvcNAQELBQADggEBAFxjXeJzPWV+25BYb74gxNiV7eE9Tg8ZkRiF1L1W
Cs8Ms0FqPtr4RDN1dXHOR5HXKRxKnMVN34K19hikN60enOZCH9zpEv5HDfzdv86B
r7tqQ1tRPkI+5Pak/zP4Br+zL3eWvHNNJUlCNo2i4KvY/fgQEsiHJo/oInw1dgi8
vhj7e5dMf/5L2hKt6jbPiVemwgsc2snNWW70bqoCv9eEanyGVpc0YDMaKm/s2MWF
SqjP6TgAYmyVAL91QcQLjKmzyEDsk/GfxYLbehqwr4i3KSWLpR4t/3t4JmNJcFSu
Wq2HJRdXtAQ2KRdFyitcZY+PhzLnN1m7BBCxEO5UPDkQivs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:00:28 2025 by rpki-client