Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/22DCbI9HvmzBDVGkxBm2WtXk528.roa
File: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (raw, json)
Hash identifier: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=
Subject key identifier: DB:60:C2:6C:8F:47:BE:6C:C1:0D:51:A4:C4:19:B6:5A:D5:E4:E7:6F
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019424458275480164B8C48264EAD77AD9F6
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/22DCbI9HvmzBDVGkxBm2WtXk528.roa
Signing time: Wed 01 Jan 2025 23:48:42 +0000
ROA not before: Wed 01 Jan 2025 23:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 2a14:5640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:82:75:48:01:64:b8:c4:82:64:ea:d7:7a:d9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Jan 1 23:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db60c26c8f47be6cc10d51a4c419b65ad5e4e76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:cf:93:59:a4:ac:f8:8e:bc:88:bb:ef:82:
e5:45:a4:ed:62:f8:95:27:15:2e:db:81:31:e8:1d:
68:51:89:24:b4:2f:84:0a:28:7b:34:55:f6:53:12:
cc:24:b8:7d:1f:ef:38:47:b0:36:d0:3b:0b:e0:2a:
44:90:71:c3:8d:4b:1f:1b:1b:60:42:48:a3:0f:02:
82:49:c2:48:f5:d1:37:7f:1a:23:1f:b8:53:20:0e:
2f:1c:5a:8d:da:5d:7b:8c:b4:dd:fd:2a:87:cb:21:
27:5e:d5:6d:0f:7b:6c:c6:4e:84:e6:b5:47:c8:0d:
05:01:e9:d8:b9:c7:27:9d:ca:a5:d9:d7:5d:f0:01:
c4:d0:21:3d:ae:1a:eb:0e:ca:54:ed:34:e6:42:4b:
7b:7b:18:35:33:75:aa:ff:00:9b:4e:7f:e7:d5:ea:
0f:4d:8e:99:27:a7:ef:f8:33:26:25:79:5f:51:c2:
2b:53:4d:00:ef:ae:2c:2a:03:c5:b9:10:a5:2e:ee:
0a:1e:54:0f:51:59:64:0a:05:86:d8:bd:58:a6:57:
5b:41:70:fa:ed:b7:a1:90:72:19:d0:44:17:0b:17:
4e:7c:f8:43:22:ad:54:40:9c:3e:6a:63:a1:fd:6b:
77:c2:10:ac:b7:76:83:42:75:fc:61:01:68:61:ee:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:C2:6C:8F:47:BE:6C:C1:0D:51:A4:C4:19:B6:5A:D5:E4:E7:6F
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/22DCbI9HvmzBDVGkxBm2WtXk528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5640::/29
Signature Algorithm: sha256WithRSAEncryption
72:02:d1:da:86:50:56:58:f2:a7:12:b2:54:36:4d:d4:16:a9:
8a:0c:e0:5c:42:4b:04:5e:98:fa:2b:57:bb:3f:12:07:b2:d2:
52:43:a5:e2:82:cd:b8:79:67:f7:32:1d:49:fa:bb:91:9a:c5:
e5:b9:85:e3:d6:6f:1c:01:29:74:11:1b:32:d9:41:03:95:5b:
2d:6c:59:73:ad:e7:d1:2a:4f:65:10:a0:aa:ba:6e:26:ef:f0:
c0:8d:41:e8:df:88:05:02:c5:db:f9:dc:e7:46:f5:e7:49:20:
ab:58:23:88:83:38:0a:e7:58:6c:bc:43:60:1f:d0:7d:43:35:
57:90:e4:b8:db:33:72:c5:8d:73:23:4e:cb:86:b4:1c:67:54:
ee:83:d8:66:12:2c:13:1c:52:50:95:e5:9b:d5:d5:9e:d6:7b:
90:28:64:29:38:34:2d:19:f0:64:38:08:0e:93:f0:b6:7f:76:
fd:cf:8a:b0:40:5a:c5:10:28:e8:3f:84:b7:b2:39:a2:d7:a2:
93:b3:23:be:d0:1a:29:8b:77:dd:41:10:9b:9f:88:f8:1a:06:
a9:f4:6c:9c:82:30:c7:aa:ed:ad:72:2f:b1:89:91:54:27:9b:
d8:02:7e:57:2d:34:1d:9d:eb:ad:34:cd:11:fd:e0:45:49:eb:
30:62:fd:da
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkRYJ1SAFkuMSCZOrXetn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWVjOTNkN2NhNzM3NDRiMmMxZmJiNmRkYTY0NDkzYzJh
NDk1YzEwHhcNMjUwMTAxMjM0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjYwYzI2YzhmNDdiZTZjYzEwZDUxYTRjNDE5YjY1YWQ1ZTRlNzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfHPk1mkrPiOvIi774LlRaTtYviV
JxUu24Ex6B1oUYkktC+ECih7NFX2UxLMJLh9H+84R7A20DsL4CpEkHHDjUsfGxtg
QkijDwKCScJI9dE3fxojH7hTIA4vHFqN2l17jLTd/SqHyyEnXtVtD3tsxk6E5rVH
yA0FAenYuccnncql2ddd8AHE0CE9rhrrDspU7TTmQkt7exg1M3Wq/wCbTn/n1eoP
TY6ZJ6fv+DMmJXlfUcIrU00A764sKgPFuRClLu4KHlQPUVlkCgWG2L1YpldbQXD6
7behkHIZ0EQXCxdOfPhDIq1UQJw+amOh/Wt3whCst3aDQnX8YQFoYe6Z7wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNtgwmyPR75swQ1RpMQZtlrV5OdvMB8GA1UdIwQY
MBaAFFJeyT18pzdEssH7tt2mRJPCpJXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2Et
ODM2NmIxNjRkZDY2LzEvMjJEQ2JJOUh2bXpCRFZHa3hCbTJXdFhrNTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NTU4ZWMtZDU2OC00Y2I5LWEwM2EtODM2NmIxNjRkZDY2
LzEvVWw3SlBYeW5OMFN5d2Z1MjNhWkVrOEtrbGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRWQDAN
BgkqhkiG9w0BAQsFAAOCAQEAcgLR2oZQVljypxKyVDZN1BapigzgXEJLBF6Y+itX
uz8SB7LSUkOl4oLNuHln9zIdSfq7kZrF5bmF49ZvHAEpdBEbMtlBA5VbLWxZc63n
0SpPZRCgqrpuJu/wwI1B6N+IBQLF2/nc50b150kgq1gjiIM4CudYbLxDYB/QfUM1
V5DkuNszcsWNcyNOy4a0HGdU7oPYZhIsExxSUJXlm9XVntZ7kChkKTg0LRnwZDgI
DpPwtn92/c+KsEBaxRAo6D+Et7I5oteik7MjvtAaKYt33UEQm5+I+BoGqfRsnIIw
x6rtrXIvsYmRVCeb2AJ+Vy00HZ3rrTTNEf3gRUnrMGL92g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:29:47 2025 by rpki-client