Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/mIULbw_VsYjjAm8nAGiad1FVRCA.roa
File: mIULbw_VsYjjAm8nAGiad1FVRCA.roa (raw, json)
Hash identifier: RZC9YnUkAnJgl+1L4ykyICx092CEcPZwqJ0fdIhJKfk=
Subject key identifier: 98:85:0B:6F:0F:D5:B1:88:E3:02:6F:27:00:68:9A:77:51:55:44:20
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 01941FFA219C9BFE19F7B9D64E94F40FA1FF
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/mIULbw_VsYjjAm8nAGiad1FVRCA.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199009
IP address blocks: 2a0e:eac0:2020::/44 maxlen: 48
2a0e:eac0:2020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:21:9c:9b:fe:19:f7:b9:d6:4e:94:f4:0f:a1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98850b6f0fd5b188e3026f2700689a7751554420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:9a:94:7c:04:71:2a:3d:d7:2e:5b:f7:ea:
82:80:7a:1f:92:fc:bf:22:e5:77:c1:8f:3e:10:b1:
1f:ca:52:47:75:9f:be:fd:d8:04:13:89:2c:02:5c:
6d:8a:72:c7:51:71:df:06:ca:14:cc:37:89:22:61:
34:0d:e8:01:18:1a:a0:1a:f0:bc:de:06:4a:37:93:
b1:7c:5d:83:ed:c1:95:41:40:5f:c5:f2:05:9c:7a:
d3:20:e5:c1:91:9d:d1:1f:70:84:3d:60:c9:f8:4f:
28:bb:8a:d3:04:9f:3e:27:bb:e9:87:64:46:6c:b1:
c2:0d:fd:87:d1:dc:4b:d0:20:3a:af:b0:31:ce:31:
5c:e0:67:5f:8a:03:01:74:10:91:f1:12:8e:a2:e7:
27:b8:e7:6b:1e:09:b7:b3:b2:43:4d:9a:8a:13:00:
5a:ad:d8:f9:70:87:ed:81:ec:f5:b3:37:d5:08:4c:
6c:48:65:42:2c:28:16:c3:c9:c3:59:2d:2c:39:b6:
7c:00:49:67:89:61:c3:6f:94:2b:83:fd:f7:07:6f:
cc:48:5c:9d:44:21:4b:df:5e:ef:ba:1a:f0:7a:1e:
b6:5c:b2:cb:68:59:4e:46:f4:ca:0e:64:e3:90:5f:
e7:a9:35:05:84:9d:9c:60:8c:bd:aa:01:91:65:73:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:85:0B:6F:0F:D5:B1:88:E3:02:6F:27:00:68:9A:77:51:55:44:20
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/mIULbw_VsYjjAm8nAGiad1FVRCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:eac0:2020::/44
Signature Algorithm: sha256WithRSAEncryption
87:32:80:cb:37:3c:3d:97:f5:1a:2e:b9:e3:60:ce:60:03:17:
15:64:bf:56:c7:fe:51:df:37:9f:c3:7d:65:c4:05:34:59:9c:
ee:15:8a:63:f0:b4:3e:a7:01:6e:b2:2c:a8:05:82:47:8d:c9:
01:fb:06:af:49:e8:43:7d:56:65:98:f3:87:36:ff:cd:41:c3:
09:18:fa:1c:aa:90:9d:a9:12:52:59:72:56:84:6a:1f:b0:d5:
0b:b1:1e:77:ca:da:94:36:59:d0:39:2e:1b:a8:41:52:aa:be:
c8:80:31:c9:01:b3:fd:1e:42:fb:5e:97:9b:aa:9b:cd:c1:35:
5c:35:c1:63:05:b4:c3:80:5d:7b:d0:d8:c4:4c:25:72:84:2c:
c1:e4:c4:7f:6d:f2:42:be:83:99:83:76:a5:a4:4f:4f:63:28:
a1:c2:93:22:c1:89:fc:a7:14:b7:21:38:07:f8:1e:13:6e:a2:
54:5d:2c:6c:d8:7d:39:18:9f:ec:3d:ee:14:77:9e:97:84:64:
a1:8e:62:f4:be:64:77:2c:81:51:78:7e:40:c1:8e:2f:02:91:
82:f2:4f:29:31:73:16:a8:91:7b:5e:4a:39:47:03:ac:4a:e5:
66:5f:0d:f7:c5:42:48:9f:ab:03:e5:b0:d5:84:f6:9f:5a:d1:
7f:5f:fe:9e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+iGcm/4Z97nWTpT0D6H/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQ3ZTUxOTFmODFmZjBhMTlmMTAyYjE3MThhYjRmOWUw
ZWEzYTAwHhcNMjUwMTAxMDM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODg1MGI2ZjBmZDViMTg4ZTMwMjZmMjcwMDY4OWE3NzUxNTU0NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrGalHwEcSo91y5b9+qCgHofkvy/
IuV3wY8+ELEfylJHdZ++/dgEE4ksAlxtinLHUXHfBsoUzDeJImE0DegBGBqgGvC8
3gZKN5OxfF2D7cGVQUBfxfIFnHrTIOXBkZ3RH3CEPWDJ+E8ou4rTBJ8+J7vph2RG
bLHCDf2H0dxL0CA6r7AxzjFc4GdfigMBdBCR8RKOoucnuOdrHgm3s7JDTZqKEwBa
rdj5cIftgez1szfVCExsSGVCLCgWw8nDWS0sObZ8AElniWHDb5Qrg/33B2/MSFyd
RCFL317vuhrweh62XLLLaFlORvTKDmTjkF/nqTUFhJ2cYIy9qgGRZXNN3wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJiFC28P1bGI4wJvJwBomndRVUQgMB8GA1UdIwQY
MBaAFCttflGR+B/woZ8QKxcYq0+eDqOgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAt
MDBjYTMxMjZiM2ZlLzEvbUlVTGJ3X1ZzWWpqQW04bkFHaWFkMUZWUkNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hYjMxNTYtYjA2MS00OWZjLWIxZjAtMDBjYTMxMjZiM2Zl
LzEvSzIxLVVaSDRIX0NobnhBckZ4aXJUNTRPbzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg7qwCAg
MA0GCSqGSIb3DQEBCwUAA4IBAQCHMoDLNzw9l/UaLrnjYM5gAxcVZL9Wx/5R3zef
w31lxAU0WZzuFYpj8LQ+pwFusiyoBYJHjckB+wavSehDfVZlmPOHNv/NQcMJGPoc
qpCdqRJSWXJWhGofsNULsR53ytqUNlnQOS4bqEFSqr7IgDHJAbP9HkL7XpebqpvN
wTVcNcFjBbTDgF170NjETCVyhCzB5MR/bfJCvoOZg3alpE9PYyihwpMiwYn8pxS3
ITgH+B4TbqJUXSxs2H05GJ/sPe4Ud56XhGShjmL0vmR3LIFReH5AwY4vApGC8k8p
MXMWqJF7Xko5RwOsSuVmXw33xUJIn6sD5bDVhPafWtF/X/6e
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:27 2025 by rpki-client