Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/JePrT9N5p_vpcuN2wLJvV6n4f0o.roa
File: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (raw, json)
Hash identifier: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=
Subject key identifier: 25:E3:EB:4F:D3:79:A7:FB:E9:72:E3:76:C0:B2:6F:57:A9:F8:7F:4A
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 019422FB4D266FCBC3F2C57FD2C5EA4551AA
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/JePrT9N5p_vpcuN2wLJvV6n4f0o.roa
Signing time: Wed 01 Jan 2025 17:48:02 +0000
ROA not before: Wed 01 Jan 2025 17:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212037
IP address blocks: 2001:67c:1680::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:4d:26:6f:cb:c3:f2:c5:7f:d2:c5:ea:45:51:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Jan 1 17:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25e3eb4fd379a7fbe972e376c0b26f57a9f87f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:10:39:77:3b:56:9b:b2:ca:3e:43:6a:96:
f7:0a:a1:93:a9:a2:62:47:93:18:6f:8b:40:b0:46:
e6:e3:a0:fa:a0:50:57:49:85:87:c6:6c:99:a1:79:
a7:39:0f:56:94:78:3d:41:38:21:ad:42:8b:9c:e9:
56:ff:c5:d9:df:74:ca:fc:4f:9c:31:47:25:50:40:
b6:54:7e:ca:93:a0:17:3d:ea:e8:40:12:56:57:ea:
70:ae:55:29:c7:9f:90:2b:dc:21:4d:61:8d:9c:d4:
cb:be:12:5a:72:d5:b2:55:7d:46:0b:06:7e:a9:33:
68:f9:f7:9e:fa:b8:d9:3e:06:ca:d2:67:45:6a:e9:
8b:3f:00:ab:e1:49:96:c9:56:e7:5f:70:1a:8a:89:
53:41:87:e2:ab:ae:08:91:fb:2c:3a:52:82:08:63:
f9:51:aa:f2:4f:0d:86:5f:62:2e:1d:e8:f2:85:c7:
2d:88:2e:3d:c1:51:7d:f5:7c:ea:79:c5:c9:58:d2:
70:c5:f0:41:32:6c:92:58:ad:9d:07:25:5b:ca:88:
9d:58:30:fe:9d:de:27:15:4b:7c:65:3f:41:ad:45:
e2:eb:d3:d7:2b:21:b3:3a:66:2e:b6:65:c0:4c:04:
71:e6:9d:36:cb:a5:db:0e:ad:f2:83:29:19:8a:b3:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E3:EB:4F:D3:79:A7:FB:E9:72:E3:76:C0:B2:6F:57:A9:F8:7F:4A
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/JePrT9N5p_vpcuN2wLJvV6n4f0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1680::/48
Signature Algorithm: sha256WithRSAEncryption
cb:54:18:d5:7f:ad:27:3b:fd:0c:89:95:d0:9f:5b:fa:fa:2d:
77:f2:c0:c7:b1:c1:6b:4b:ec:c0:d5:c8:22:32:35:9d:8c:ae:
5d:2f:db:80:33:0f:4c:95:11:89:be:52:02:a7:6a:78:be:7e:
9a:00:f6:18:80:f4:43:c2:54:a8:e0:d1:fe:38:c2:3c:5c:0e:
ae:39:ab:ef:19:78:5c:ed:80:23:0b:c8:28:c9:5a:c0:d7:aa:
71:32:d4:24:ea:e0:2b:bc:5d:5c:3d:54:2d:a3:f6:0f:62:71:
8b:58:20:1f:f4:3e:d5:2f:3b:bf:0d:78:28:7e:bd:55:2f:15:
8a:c8:b7:63:93:96:e4:8f:27:bb:9a:93:9d:ca:72:86:f5:cd:
89:09:5b:d5:13:99:f6:2a:54:54:f9:03:4d:d2:4b:68:f6:ed:
63:f3:1f:94:e6:49:e8:c0:81:e2:9e:0d:57:b8:b9:3e:76:eb:
76:b5:d9:c4:2d:02:0c:a0:43:bd:1c:13:44:77:19:e4:b8:a9:
7a:bc:26:b9:50:2a:c9:55:33:60:16:f7:3a:00:fb:36:ef:c0:
a1:8e:9b:55:06:40:c9:03:fa:90:2f:f8:ed:9b:6b:4b:60:c8:
fa:4b:b3:3f:9e:5f:d0:70:fb:32:ca:19:77:c5:f1:10:5c:32:
48:aa:e7:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi+00mb8vD8sV/0sXqRVGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDFkNzY0MzFjNmU4NzNkM2M0NDczMDU3MWUxZTUwZDYw
MjA1N2MwHhcNMjUwMTAxMTc0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWUzZWI0ZmQzNzlhN2ZiZTk3MmUzNzZjMGIyNmY1N2E5Zjg3ZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtYQOXc7Vpuyyj5Dapb3CqGTqaJi
R5MYb4tAsEbm46D6oFBXSYWHxmyZoXmnOQ9WlHg9QTghrUKLnOlW/8XZ33TK/E+c
MUclUEC2VH7Kk6AXPeroQBJWV+pwrlUpx5+QK9whTWGNnNTLvhJactWyVX1GCwZ+
qTNo+fee+rjZPgbK0mdFaumLPwCr4UmWyVbnX3AaiolTQYfiq64IkfssOlKCCGP5
UaryTw2GX2IuHejyhcctiC49wVF99XzqecXJWNJwxfBBMmySWK2dByVbyoidWDD+
nd4nFUt8ZT9BrUXi69PXKyGzOmYutmXATARx5p02y6XbDq3ygykZirNFkwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCXj60/Teaf76XLjdsCyb1ep+H9KMB8GA1UdIwQY
MBaAFCkB12Qxxuhz08RHMFceHlDWAgV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FIWFpESEc2SFBUeEVjd1Z4NGVVTllDQlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wNWMzYTEtYzhmZS00MGZmLTljNTIt
M2U2ZjAzMjQ0MTBhLzEvSmVQclQ5TjVwX3ZwY3VOMndMSnZWNm40ZjBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8wNWMzYTEtYzhmZS00MGZmLTljNTItM2U2ZjAzMjQ0MTBh
LzEvS1FIWFpESEc2SFBUeEVjd1Z4NGVVTllDQlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBaA
MA0GCSqGSIb3DQEBCwUAA4IBAQDLVBjVf60nO/0MiZXQn1v6+i138sDHscFrS+zA
1cgiMjWdjK5dL9uAMw9MlRGJvlICp2p4vn6aAPYYgPRDwlSo4NH+OMI8XA6uOavv
GXhc7YAjC8goyVrA16pxMtQk6uArvF1cPVQto/YPYnGLWCAf9D7VLzu/DXgofr1V
LxWKyLdjk5bkjye7mpOdynKG9c2JCVvVE5n2KlRU+QNN0kto9u1j8x+U5knowIHi
ng1XuLk+dut2tdnELQIMoEO9HBNEdxnkuKl6vCa5UCrJVTNgFvc6APs278ChjptV
BkDJA/qQL/jtm2tLYMj6S7M/nl/QcPsyyhl3xfEQXDJIquf4
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:14 2025 by rpki-client