Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa
File: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (raw, json)
Hash identifier: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=
Subject key identifier: 8C:6C:7C:69:6D:8B:11:C9:11:3F:FC:89:5C:32:7E:25:4B:CF:1C:D5
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 019425FD9DD30E12C254D424421C58730A17
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa
Signing time: Thu 02 Jan 2025 07:49:25 +0000
ROA not before: Thu 02 Jan 2025 07:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199852
IP address blocks: 2001:67c:197c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9d:d3:0e:12:c2:54:d4:24:42:1c:58:73:0a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c6c7c696d8b11c9113ffc895c327e254bcf1cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:9c:9b:9e:28:aa:6a:aa:d7:56:cf:58:d3:
28:23:00:3e:0c:60:66:4e:7b:0c:0f:54:2d:9e:72:
11:b2:e1:9f:85:30:71:ed:e0:e4:88:c9:29:7d:32:
84:97:14:9c:e7:2a:de:b4:38:6b:ed:96:a0:b1:c6:
fc:ba:10:05:03:b6:f2:b2:91:c2:5c:56:85:04:87:
27:b8:c6:27:10:ba:50:90:15:79:b2:85:5b:92:57:
99:4f:77:65:86:25:8e:5f:07:74:0f:bf:f3:86:7b:
3b:06:db:5f:cf:11:12:3f:38:a4:58:0b:82:8c:b6:
10:b0:c2:21:10:16:4e:9c:1a:95:1b:44:b2:17:14:
bf:cd:55:00:82:97:c7:ae:65:05:d7:00:46:24:e4:
5f:13:a8:a2:16:9c:f0:3d:dd:c9:31:8e:2f:97:65:
0d:6e:fa:2a:9f:5b:63:92:96:f1:5a:b3:58:d7:09:
df:17:a2:01:1d:42:f2:38:aa:9e:ae:e7:e9:0d:23:
d6:26:08:2e:5a:e5:2d:f6:82:a2:23:7f:b9:97:84:
e8:69:52:cb:26:0c:a1:96:fa:1e:2e:35:42:a1:80:
58:00:ff:9c:d0:46:46:6b:b5:d4:7e:4a:05:fd:6a:
86:53:41:e3:98:6e:2b:40:b0:d5:7b:aa:17:d5:9f:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6C:7C:69:6D:8B:11:C9:11:3F:FC:89:5C:32:7E:25:4B:CF:1C:D5
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:197c::/48
Signature Algorithm: sha256WithRSAEncryption
04:8e:e4:f5:7c:3f:ea:70:39:54:5a:79:56:d8:e5:5a:60:de:
5d:a6:4c:a0:75:f6:3d:9e:ba:ed:4c:48:a8:05:d7:b7:f9:3e:
47:0c:47:16:ca:49:f6:d2:f3:c9:94:ca:18:73:7b:c1:d0:e5:
d0:ce:0a:60:e6:41:a5:ba:40:f7:0d:28:78:ae:7c:54:4b:6c:
29:7d:6a:c1:38:43:6f:6a:78:66:29:46:3f:b6:53:3d:a8:6a:
d0:6a:22:94:a3:4f:10:4b:eb:a2:79:53:3f:b8:09:00:b0:ae:
a2:e5:87:9b:22:72:03:6e:38:b2:65:d9:c2:22:3e:62:db:5c:
a5:fc:77:34:49:41:85:4c:33:54:b8:fd:e0:2d:4c:b3:ab:e3:
a4:a2:87:bb:f0:0c:7b:44:b5:6b:f3:aa:7a:b0:c1:f6:d8:fe:
97:70:78:82:e4:f3:a7:0e:61:0f:de:99:89:b3:04:25:37:ec:
07:3d:9d:ca:63:cc:00:2b:ba:f3:f5:8f:a4:a3:58:ef:c9:4f:
07:11:27:c9:33:2b:fe:12:79:46:d6:2f:f5:f7:81:f4:18:3b:
d5:bf:8f:fc:7c:ea:51:b4:9d:5e:61:e0:1a:73:cc:4f:8c:2d:
07:1e:c2:9c:ef:22:d2:57:0d:ca:5f:ae:3f:f0:ea:8f:a2:fb:
26:91:4a:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/Z3TDhLCVNQkQhxYcwoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MjQ1NDM4YTJiNjIwOWM4MTY3NWVmMzU3ODNkODlhMTli
NzA3ZmEwHhcNMjUwMTAyMDc0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZjN2M2OTZkOGIxMWM5MTEzZmZjODk1YzMyN2UyNTRiY2YxY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHGcm54oqmqq11bPWNMoIwA+DGBm
TnsMD1QtnnIRsuGfhTBx7eDkiMkpfTKElxSc5yretDhr7Zagscb8uhAFA7byspHC
XFaFBIcnuMYnELpQkBV5soVbkleZT3dlhiWOXwd0D7/zhns7BttfzxESPzikWAuC
jLYQsMIhEBZOnBqVG0SyFxS/zVUAgpfHrmUF1wBGJORfE6iiFpzwPd3JMY4vl2UN
bvoqn1tjkpbxWrNY1wnfF6IBHULyOKqerufpDSPWJgguWuUt9oKiI3+5l4ToaVLL
JgyhlvoeLjVCoYBYAP+c0EZGa7XUfkoF/WqGU0HjmG4rQLDVe6oX1Z+haQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIxsfGltixHJET/8iVwyfiVLzxzVMB8GA1UdIwQY
MBaAFHUkVDiitiCcgWde81eD2JoZtwf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wZWVkMmItMjA1Ny00NWU3LTlmMDAt
NWVlMTg1ODhkZjU5LzEvakd4OGFXMkxFY2tSUF95SlhESi1KVXZQSE5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wZWVkMmItMjA1Ny00NWU3LTlmMDAtNWVlMTg1ODhkZjU5
LzEvZFNSVU9LSzJJSnlCWjE3elY0UFltaG0zQl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBl8
MA0GCSqGSIb3DQEBCwUAA4IBAQAEjuT1fD/qcDlUWnlW2OVaYN5dpkygdfY9nrrt
TEioBde3+T5HDEcWykn20vPJlMoYc3vB0OXQzgpg5kGlukD3DSh4rnxUS2wpfWrB
OENvanhmKUY/tlM9qGrQaiKUo08QS+uieVM/uAkAsK6i5YebInIDbjiyZdnCIj5i
21yl/Hc0SUGFTDNUuP3gLUyzq+Okooe78Ax7RLVr86p6sMH22P6XcHiC5POnDmEP
3pmJswQlN+wHPZ3KY8wAK7rz9Y+ko1jvyU8HESfJMyv+EnlG1i/194H0GDvVv4/8
fOpRtJ1eYeAac8xPjC0HHsKc7yLSVw3KX64/8OqPovsmkUqj
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:20:07 2025 by rpki-client