Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/9uUBmS-3S99xpluVPLmV1HsKam0.roa
File: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (raw, json)
Hash identifier: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=
Subject key identifier: F6:E5:01:99:2F:B7:4B:DF:71:A6:5B:95:3C:B9:95:D4:7B:0A:6A:6D
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 01941FFAA5C3041AA76236E014F6D10236FF
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/9uUBmS-3S99xpluVPLmV1HsKam0.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57712
IP address blocks: 2a00:f440:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a5:c3:04:1a:a7:62:36:e0:14:f6:d1:02:36:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6e501992fb74bdf71a65b953cb995d47b0a6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:91:76:22:ee:bf:59:2a:64:ab:ca:a2:18:
a6:69:7a:bf:52:dd:3c:4a:54:8f:46:cc:35:df:2e:
e9:4a:63:de:f9:09:14:bf:c2:12:f2:75:98:79:83:
26:ab:78:32:c9:52:a7:9a:ba:ac:eb:e7:1e:e1:20:
92:83:30:48:f5:6e:a4:2f:4e:84:2c:45:0c:ae:ab:
d2:e5:c6:3d:b4:b1:59:47:83:e4:8f:b3:2f:ea:b6:
86:00:c5:2d:96:57:0d:e2:c7:af:30:38:8f:3f:eb:
bd:28:e2:d9:dc:b1:85:41:4d:19:e6:1b:87:cf:10:
c4:8d:53:73:00:05:c9:de:57:7c:58:3e:64:76:41:
a4:30:ff:41:ca:54:18:9d:40:03:48:1c:1a:cb:91:
b2:eb:5b:21:b9:37:f9:81:e9:ec:af:a9:14:3d:41:
d7:eb:16:d3:6f:4f:65:1f:c8:fe:ee:13:73:b4:46:
1c:10:fb:b4:7d:1b:1e:13:79:f2:66:84:5a:31:5c:
24:53:b7:ec:a3:6d:d7:0f:43:c7:43:64:85:a9:d3:
27:ab:3c:76:a3:b7:1d:61:5d:ad:06:75:0b:df:be:
0a:a8:5a:a1:11:e8:28:97:83:e9:09:bf:38:fb:7b:
a8:ef:9e:82:d9:b0:2c:32:7e:66:43:a3:8c:4b:71:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E5:01:99:2F:B7:4B:DF:71:A6:5B:95:3C:B9:95:D4:7B:0A:6A:6D
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/9uUBmS-3S99xpluVPLmV1HsKam0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f440:c::/48
Signature Algorithm: sha256WithRSAEncryption
a5:6a:c0:b8:d2:8b:eb:c4:04:0f:07:e6:1c:3f:0d:1a:44:70:
36:83:56:ac:c0:33:54:33:67:31:62:0d:20:48:e9:8a:df:bd:
e0:32:00:25:2b:44:d1:02:af:dd:06:bf:c2:b6:58:71:53:68:
a1:8b:56:47:6d:98:10:4b:e6:84:4c:3d:97:8e:9c:a1:67:ce:
4f:56:1c:1f:7b:48:bc:a8:6a:09:ce:63:ad:f0:58:04:7f:8d:
df:69:8a:74:ee:ee:43:a1:10:09:ec:63:38:68:b2:83:1f:b8:
66:11:5f:49:49:40:78:f0:91:04:36:c3:a6:19:da:0e:de:c0:
30:13:f9:02:0e:4d:d2:57:2a:98:9c:6b:ce:9c:a8:50:17:b8:
c8:92:7a:76:82:a0:46:cc:f0:5f:35:b6:b4:1e:17:2c:77:28:
a6:c2:d7:7a:bd:7e:82:55:a8:5a:d3:29:ee:d6:da:70:72:ab:
97:88:33:43:03:86:61:1d:bd:10:df:7b:e2:69:a0:9c:20:8a:
92:65:07:f5:7d:1e:7d:61:ea:35:c0:c5:1d:ea:3b:01:3b:87:
d6:24:42:ac:cf:b7:74:6e:a4:e2:53:43:d9:7f:4e:c9:52:3d:
a2:12:3c:f4:bc:7e:94:ca:a2:38:4b:6e:be:c4:10:13:a1:0d:
c8:e3:f6:36
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+qXDBBqnYjbgFPbRAjb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4
MDEwZmEwHhcNMjUwMTAxMDM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmU1MDE5OTJmYjc0YmRmNzFhNjViOTUzY2I5OTVkNDdiMGE2YTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vKRdiLuv1kqZKvKohimaXq/Ut08
SlSPRsw13y7pSmPe+QkUv8IS8nWYeYMmq3gyyVKnmrqs6+ce4SCSgzBI9W6kL06E
LEUMrqvS5cY9tLFZR4Pkj7Mv6raGAMUtllcN4sevMDiPP+u9KOLZ3LGFQU0Z5huH
zxDEjVNzAAXJ3ld8WD5kdkGkMP9BylQYnUADSBway5Gy61shuTf5gensr6kUPUHX
6xbTb09lH8j+7hNztEYcEPu0fRseE3nyZoRaMVwkU7fso23XD0PHQ2SFqdMnqzx2
o7cdYV2tBnUL374KqFqhEegol4PpCb84+3uo756C2bAsMn5mQ6OMS3E8SwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPblAZkvt0vfcaZblTy5ldR7CmptMB8GA1UdIwQY
MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt
ZTEwYTYwNTk2YzI2LzEvOXVVQm1TLTNTOTl4cGx1VlBMbVYxSHNLYW0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2
LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgD0QAAM
MA0GCSqGSIb3DQEBCwUAA4IBAQClasC40ovrxAQPB+YcPw0aRHA2g1aswDNUM2cx
Yg0gSOmK373gMgAlK0TRAq/dBr/CtlhxU2ihi1ZHbZgQS+aETD2XjpyhZ85PVhwf
e0i8qGoJzmOt8FgEf43faYp07u5DoRAJ7GM4aLKDH7hmEV9JSUB48JEENsOmGdoO
3sAwE/kCDk3SVyqYnGvOnKhQF7jIknp2gqBGzPBfNba0Hhcsdyimwtd6vX6CVaha
0ynu1tpwcquXiDNDA4ZhHb0Q33viaaCcIIqSZQf1fR59Yeo1wMUd6jsBO4fWJEKs
z7d0bqTiU0PZf07JUj2iEjz0vH6UyqI4S26+xBAToQ3I4/Y2
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:08:33 2025 by rpki-client