Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa
File: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (raw, json)
Hash identifier: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=
Subject key identifier: B5:1C:D2:25:BE:C3:54:47:D0:10:06:BD:53:80:6B:0E:A3:3F:49:60
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 01942520940668D5178112B2798D035F7A31
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa
Signing time: Thu 02 Jan 2025 03:47:59 +0000
ROA not before: Thu 02 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207424
IP address blocks: 2001:67c:2fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:94:06:68:d5:17:81:12:b2:79:8d:03:5f:7a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Jan 2 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b51cd225bec35447d01006bd53806b0ea33f4960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:9a:38:dc:1b:97:1d:41:c5:19:6a:97:fb:
59:8c:44:3f:46:9d:03:35:60:04:0c:7c:31:24:a7:
5b:e9:b6:e1:0b:d0:3f:a7:4d:26:63:1d:45:69:88:
ff:4d:db:ef:b4:f4:cb:f8:39:33:94:8e:78:e4:53:
40:e1:c3:b3:56:d5:44:e7:9c:23:2d:ef:b2:14:29:
39:8f:4a:9e:9d:fe:db:8c:03:18:a2:db:2e:ac:78:
c3:c7:79:9e:2d:1e:af:1d:ae:2d:42:b2:52:38:af:
39:66:a5:11:9c:47:6b:0a:d7:73:da:de:b4:a1:68:
29:bd:5e:1e:d7:1d:3f:5c:20:9f:4b:30:a0:36:44:
23:33:af:42:6b:89:fe:98:e4:79:f9:2d:9d:1c:f5:
72:04:17:d5:8b:bf:77:23:ca:43:1f:f6:b2:2f:a8:
44:a9:2b:ad:34:55:d1:0e:95:8b:25:00:0b:f6:65:
a5:76:8b:5f:b2:77:de:47:e7:b3:aa:6e:35:a0:8d:
56:59:48:26:c6:75:02:a5:01:78:c8:cb:c4:a3:44:
85:a6:9b:e2:43:0f:1d:9d:92:22:5e:b6:f2:72:e3:
b3:bb:28:55:87:f0:34:73:05:17:48:a1:b0:3f:9d:
20:7e:6c:f9:ad:d4:5c:9c:0e:8e:23:3b:6d:cf:bf:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:D2:25:BE:C3:54:47:D0:10:06:BD:53:80:6B:0E:A3:3F:49:60
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2fc0::/48
Signature Algorithm: sha256WithRSAEncryption
8a:3b:85:1d:44:06:36:9c:2c:a0:64:53:d2:54:f0:d3:68:f1:
ce:63:b0:18:b9:8a:f7:cc:e8:4a:9a:10:ba:03:5d:00:50:bd:
dd:b3:a9:1e:ce:6e:d3:da:74:23:0c:25:09:17:2d:aa:39:b0:
e0:5a:bb:88:37:f9:99:22:f7:cc:95:19:9a:a0:d4:55:6a:ab:
74:f4:e8:9d:7a:f7:eb:90:d9:b6:35:e8:31:f4:57:c1:96:14:
cd:92:93:2a:68:bb:89:12:e4:8a:c9:6f:75:aa:83:fc:4e:6e:
cf:92:17:60:98:92:94:6d:22:3e:33:0c:79:22:15:fa:4e:1e:
e9:cd:bb:88:bc:7e:8d:41:ae:c3:9e:c7:22:aa:4d:26:4c:f3:
7d:49:de:96:c7:24:b3:3f:99:44:5f:1f:6a:5b:eb:e5:4e:34:
4a:0c:2d:15:67:38:89:81:f2:a0:76:74:ac:92:62:f3:b2:59:
11:e1:b5:09:ab:c4:e2:73:68:53:f4:49:58:38:08:36:37:cd:
d8:a8:28:e2:84:ca:c2:c8:5a:7b:a5:4e:6f:90:7c:f0:c1:90:
d6:43:df:3d:0b:11:5b:27:15:7f:83:6f:fa:4d:88:78:b6:4c:
dc:97:6d:10:cb:a4:94:03:bc:6f:41:f5:46:51:9f:30:35:8c:
32:38:64:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIJQGaNUXgRKyeY0DX3oxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODA0NzhmYWVjOGI2N2RkZmVjZTYzNTdjZjI1Y2YyY2Ex
ZDg1ZDAwHhcNMjUwMTAyMDM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTFjZDIyNWJlYzM1NDQ3ZDAxMDA2YmQ1MzgwNmIwZWEzM2Y0OTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGaaONwblx1BxRlql/tZjEQ/Rp0D
NWAEDHwxJKdb6bbhC9A/p00mYx1FaYj/TdvvtPTL+DkzlI545FNA4cOzVtVE55wj
Le+yFCk5j0qenf7bjAMYotsurHjDx3meLR6vHa4tQrJSOK85ZqURnEdrCtdz2t60
oWgpvV4e1x0/XCCfSzCgNkQjM69Ca4n+mOR5+S2dHPVyBBfVi793I8pDH/ayL6hE
qSutNFXRDpWLJQAL9mWldotfsnfeR+ezqm41oI1WWUgmxnUCpQF4yMvEo0SFppvi
Qw8dnZIiXrbycuOzuyhVh/A0cwUXSKGwP50gfmz5rdRcnA6OIzttz79U+QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLUc0iW+w1RH0BAGvVOAaw6jP0lgMB8GA1UdIwQY
MBaAFOaAR4+uyLZ93+zmNXzyXPLKHYXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzct
MzM5YzlkNDg3NzRjLzEvdFJ6U0piN0RWRWZRRUFhOVU0QnJEcU1fU1dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yNWEwMWItNWZiMC00NDRlLWEyYzctMzM5YzlkNDg3NzRj
LzEvNW9CSGo2N0l0bjNmN09ZMWZQSmM4c29kaGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC/A
MA0GCSqGSIb3DQEBCwUAA4IBAQCKO4UdRAY2nCygZFPSVPDTaPHOY7AYuYr3zOhK
mhC6A10AUL3ds6kezm7T2nQjDCUJFy2qObDgWruIN/mZIvfMlRmaoNRVaqt09Oid
evfrkNm2Negx9FfBlhTNkpMqaLuJEuSKyW91qoP8Tm7PkhdgmJKUbSI+Mwx5IhX6
Th7pzbuIvH6NQa7Dnsciqk0mTPN9Sd6WxySzP5lEXx9qW+vlTjRKDC0VZziJgfKg
dnSskmLzslkR4bUJq8Tic2hT9ElYOAg2N83YqCjihMrCyFp7pU5vkHzwwZDWQ989
CxFbJxV/g2/6TYh4tkzcl20Qy6SUA7xvQfVGUZ8wNYwyOGQx
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:05 2025 by rpki-client