Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/bmXZpHHxtrkVL17e18KvIxTw5lc.roa
File: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (raw, json)
Hash identifier: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=
Subject key identifier: 6E:65:D9:A4:71:F1:B6:B9:15:2F:5E:DE:D7:C2:AF:23:14:F0:E6:57
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019420D5BEE60970F5692243A70BAEBA906A
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/bmXZpHHxtrkVL17e18KvIxTw5lc.roa
Signing time: Wed 01 Jan 2025 07:47:46 +0000
ROA not before: Wed 01 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2a14:4e87:1000::/48 maxlen: 48
2a14:4e87:1001::/48 maxlen: 48
2a14:4e87:1010::/48 maxlen: 48
2a14:4e87:1020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:be:e6:09:70:f5:69:22:43:a7:0b:ae:ba:90:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e65d9a471f1b6b9152f5eded7c2af2314f0e657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:52:f1:d3:07:55:f5:bf:ed:46:49:44:6a:
9c:a5:43:b8:d7:32:ea:39:c4:78:36:ce:5d:ab:e2:
18:cd:ee:1e:e6:8b:63:78:53:41:ba:fa:53:b0:46:
d6:ee:d1:b6:18:b1:ed:88:c4:1c:35:b5:dd:3b:04:
75:b8:2f:f3:82:8e:ae:8f:bb:f4:9f:b6:58:1e:b0:
4f:30:f9:38:de:c9:01:49:9e:bd:ae:82:12:b5:70:
e7:45:f7:64:fa:66:9d:a0:f3:d1:2e:04:c4:d5:9a:
16:7d:fa:6b:6f:0e:b2:06:c5:72:99:a4:cd:d7:30:
55:9b:60:19:a9:71:f6:74:81:2a:9f:97:9b:aa:a7:
44:43:61:cb:b6:c8:c1:e7:28:f3:53:31:f9:69:7c:
17:7a:0f:f7:8d:bf:8d:04:84:7a:fe:9c:0d:b6:2e:
07:34:37:16:00:93:cc:cb:a5:c7:bc:81:a7:06:4d:
5d:51:9a:bd:84:f8:aa:08:27:78:04:1b:95:5d:a6:
cd:45:9f:78:bf:ed:52:0e:2f:2a:c4:92:ec:af:32:
b9:83:6e:7d:3a:cb:e3:f4:8a:69:b2:46:02:c8:ab:
4e:c9:43:9b:f4:71:9a:5b:cc:6f:ef:25:bb:22:44:
c6:ab:c6:16:6a:2a:e8:a3:01:3c:77:cd:24:43:85:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:65:D9:A4:71:F1:B6:B9:15:2F:5E:DE:D7:C2:AF:23:14:F0:E6:57
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/bmXZpHHxtrkVL17e18KvIxTw5lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4e87:1000::/47
2a14:4e87:1010::/48
2a14:4e87:1020::/48
Signature Algorithm: sha256WithRSAEncryption
7a:9e:9c:7f:86:52:84:86:2a:d0:ea:42:41:92:29:17:a4:28:
29:a8:52:9e:5e:45:51:dc:3c:5f:23:9b:47:9d:6f:bb:90:d9:
56:33:f0:5b:60:92:91:83:dd:6e:70:6e:ee:a4:a9:5b:92:26:
bc:eb:96:0d:73:40:0e:27:3d:7b:7a:b0:17:06:f1:21:54:b9:
53:20:cb:5e:40:63:83:f3:c1:dd:f7:dd:f7:bc:81:94:15:83:
97:79:f2:11:30:5f:7e:d9:b5:15:13:3f:05:98:ea:32:41:c9:
43:32:c4:f6:21:97:16:c1:60:00:e0:06:c3:9b:0e:e1:5f:9e:
ec:17:ba:94:86:8a:33:c3:71:07:f5:2a:3c:78:58:00:ea:71:
b9:d9:a7:69:5e:3a:0e:54:3e:ad:4e:4d:55:85:04:bb:63:a5:
c1:b2:d2:3c:e6:80:47:99:ca:b5:af:7f:76:30:81:61:ed:07:
5e:2f:d9:4e:dd:26:c6:4f:de:56:7f:ae:da:19:0b:69:85:76:
ff:83:0c:af:36:db:1f:d0:1f:5f:93:d4:9d:c4:74:10:21:66:
0f:9c:98:7f:a5:71:9f:67:f7:16:73:99:cf:5a:38:20:7d:a1:
d5:44:3f:50:f3:99:15:75:ab:36:2f:29:6c:98:71:29:4d:ed:
5f:50:bf:29
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQg1b7mCXD1aSJDpwuuupBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4
MTk5ZTYwHhcNMjUwMTAxMDc0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTY1ZDlhNDcxZjFiNmI5MTUyZjVlZGVkN2MyYWYyMzE0ZjBlNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwRS8dMHVfW/7UZJRGqcpUO41zLq
OcR4Ns5dq+IYze4e5otjeFNBuvpTsEbW7tG2GLHtiMQcNbXdOwR1uC/zgo6uj7v0
n7ZYHrBPMPk43skBSZ69roIStXDnRfdk+madoPPRLgTE1ZoWffprbw6yBsVymaTN
1zBVm2AZqXH2dIEqn5ebqqdEQ2HLtsjB5yjzUzH5aXwXeg/3jb+NBIR6/pwNti4H
NDcWAJPMy6XHvIGnBk1dUZq9hPiqCCd4BBuVXabNRZ94v+1SDi8qxJLsrzK5g259
Osvj9IppskYCyKtOyUOb9HGaW8xv7yW7IkTGq8YWairoowE8d80kQ4UcAQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFG5l2aRx8ba5FS9e3tfCryMU8OZXMB8GA1UdIwQY
MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt
ZGYyN2YxMGM3MDk3LzEvYm1YWnBISHh0cmtWTDE3ZTE4S3ZJeFR3NWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3
LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcBKhROhxAA
AwcAKhROhxAQAwcAKhROhxAgMA0GCSqGSIb3DQEBCwUAA4IBAQB6npx/hlKEhirQ
6kJBkikXpCgpqFKeXkVR3DxfI5tHnW+7kNlWM/BbYJKRg91ucG7upKlbkia865YN
c0AOJz17erAXBvEhVLlTIMteQGOD88Hd9933vIGUFYOXefIRMF9+2bUVEz8FmOoy
QclDMsT2IZcWwWAA4AbDmw7hX57sF7qUhoozw3EH9So8eFgA6nG52adpXjoOVD6t
Tk1VhQS7Y6XBstI85oBHmcq1r392MIFh7QdeL9lO3SbGT95Wf67aGQtphXb/gwyv
Ntsf0B9fk9SdxHQQIWYPnJh/pXGfZ/cWc5nPWjggfaHVRD9Q85kVdas2LylsmHEp
Te1fUL8p
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:45 2025 by rpki-client