Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa
File: 26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa (raw, json)
Hash identifier: GrMn4526qMwkAR8eWiH8KdtkWVvMHZrGjP3wqdNDQ50=
Subject key identifier: DB:AA:B7:71:05:E4:D4:92:1B:50:6A:BD:AA:3A:97:0D:84:3B:9D:75
Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial: 01951D7244ABA5C238F6BCF3635092290476
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa
Signing time: Wed 19 Feb 2025 09:03:02 +0000
ROA not before: Wed 19 Feb 2025 09:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13810
IP address blocks: 2a01:8840:1bd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Mar 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:72:44:ab:a5:c2:38:f6:bc:f3:63:50:92:29:04:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Validity
Not Before: Feb 19 09:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbaab77105e4d4921b506abdaa3a970d843b9d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7a:11:2e:8c:f2:80:3b:4a:93:15:1b:98:b0:
64:02:d4:c8:73:4f:22:aa:e0:60:35:ab:3c:7d:a6:
e8:99:d4:01:bf:3a:b6:0b:1e:f0:3d:b9:bb:46:fd:
ab:7f:4b:08:ce:d6:7b:18:5b:55:b4:0b:ba:f5:d9:
05:fb:87:23:0a:18:95:1c:f7:44:16:4d:c8:dd:01:
85:8c:4b:72:0b:bb:36:25:b4:c8:95:96:a1:74:73:
a6:2e:08:12:95:00:3e:e2:8c:37:14:7f:8d:18:94:
df:b4:d5:b3:75:f7:9b:fe:e6:34:0c:7c:a9:e6:59:
58:d1:44:a3:43:be:a2:20:28:e6:43:f6:64:45:f7:
0b:4a:72:dd:58:e4:bb:ea:15:c2:0f:03:84:43:26:
53:58:f4:09:d4:9c:ec:19:dc:f2:49:00:65:0d:2d:
11:8d:8e:e8:79:cb:53:8d:d1:d0:5c:4f:3f:f8:26:
01:ab:81:1d:c0:24:01:4b:a1:01:b7:30:0c:46:ea:
0b:f7:78:fe:c2:a1:de:38:29:d7:d9:90:00:16:4d:
c1:0a:29:4e:a3:9a:ec:16:36:11:07:10:da:5e:30:
50:39:22:f0:d9:87:ae:4a:1b:b1:e7:81:f1:ef:3a:
98:df:b8:cc:63:c1:cb:f7:cc:17:38:11:61:5f:41:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:B7:71:05:E4:D4:92:1B:50:6A:BD:AA:3A:97:0D:84:3B:9D:75
X509v3 Authority Key Identifier:
keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/26q3cQXk1JIbUGq9qjqXDYQ7nXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8840:1bd::/48
Signature Algorithm: sha256WithRSAEncryption
ea:79:7c:aa:33:4e:18:af:02:42:e6:9b:eb:8a:31:9e:83:5a:
68:66:c7:e9:b1:a1:43:29:c6:d3:15:17:e2:2c:09:05:04:e1:
d4:7d:e8:e4:de:d2:ea:75:08:a1:c1:57:ca:15:cc:51:82:6b:
4f:e5:f2:c1:a5:88:bb:a0:af:0c:95:fa:4b:45:8f:6e:42:bc:
02:cd:82:fb:14:75:a1:14:16:44:ad:b0:68:ac:a5:4e:aa:ed:
5d:05:0c:42:08:23:7b:3e:db:0b:39:8c:88:0c:a7:9f:4b:dc:
73:d3:8f:8c:c0:e7:4d:d0:1f:94:f4:04:e8:61:93:19:58:ca:
68:e3:a7:3e:c8:6e:96:d0:69:64:b1:24:5f:a6:3c:25:67:d8:
68:15:92:7a:3a:b2:1b:6e:9a:d8:a7:6a:ec:00:b6:97:0a:20:
3f:68:a4:fe:a1:47:8a:d7:51:74:0d:4e:39:84:06:c5:5c:7a:
c2:a4:5d:31:8f:d1:05:9b:f7:f4:45:f0:c8:e5:31:1f:c8:f4:
a4:e1:90:36:35:75:ce:a7:ba:5a:9d:47:ee:3c:27:9b:26:e9:
d8:f5:47:f3:e6:cd:26:45:21:ce:a9:51:77:97:f1:4e:8b:a3:
dc:06:2b:c0:a6:3b:68:ff:0c:67:89:53:72:d0:05:39:f8:a2:
a7:75:9e:33
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZUdckSrpcI49rzzY1CSKQR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj
NmMxOTIwHhcNMjUwMjE5MDkwMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmFhYjc3MTA1ZTRkNDkyMWI1MDZhYmRhYTNhOTcwZDg0M2I5ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HoRLozygDtKkxUbmLBkAtTIc08i
quBgNas8fabomdQBvzq2Cx7wPbm7Rv2rf0sIztZ7GFtVtAu69dkF+4cjChiVHPdE
Fk3I3QGFjEtyC7s2JbTIlZahdHOmLggSlQA+4ow3FH+NGJTftNWzdfeb/uY0DHyp
5llY0USjQ76iICjmQ/ZkRfcLSnLdWOS76hXCDwOEQyZTWPQJ1JzsGdzySQBlDS0R
jY7oectTjdHQXE8/+CYBq4EdwCQBS6EBtzAMRuoL93j+wqHeOCnX2ZAAFk3BCilO
o5rsFjYRBxDaXjBQOSLw2YeuShux54Hx7zqY37jMY8HL98wXOBFhX0EB6wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNuqt3EF5NSSG1Bqvao6lw2EO511MB8GA1UdIwQY
MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt
MWIyYWMzNWMwOWFhLzEvMjZxM2NRWGsxSkliVUdxOXFqcVhEWVE3blhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh
LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgGIQAG9
MA0GCSqGSIb3DQEBCwUAA4IBAQDqeXyqM04YrwJC5pvrijGeg1poZsfpsaFDKcbT
FRfiLAkFBOHUfejk3tLqdQihwVfKFcxRgmtP5fLBpYi7oK8MlfpLRY9uQrwCzYL7
FHWhFBZErbBorKVOqu1dBQxCCCN7PtsLOYyIDKefS9xz04+MwOdN0B+U9AToYZMZ
WMpo46c+yG6W0GlksSRfpjwlZ9hoFZJ6OrIbbprYp2rsALaXCiA/aKT+oUeK11F0
DU45hAbFXHrCpF0xj9EFm/f0RfDI5TEfyPSk4ZA2NXXOp7panUfuPCebJunY9Ufz
5s0mRSHOqVF3l/FOi6PcBivApjto/wxniVNy0AU5+KKndZ4z
-----END CERTIFICATE-----
Generated at Mon Mar 17 04:42:55 2025 by rpki-client