Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/Kbd252jvPQYDxTMD_Zl_KcFg3wE.roa
File: Kbd252jvPQYDxTMD_Zl_KcFg3wE.roa (raw, json)
Hash identifier: h2Sl2hV/wUjlwWCFohVNj5cRLKghSu334DTZIidyX0A=
Subject key identifier: 29:B7:76:E7:68:EF:3D:06:03:C5:33:03:FD:99:7F:29:C1:60:DF:01
Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial: 019420D63FEC204C37019FDE310BF6FAAAB8
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/Kbd252jvPQYDxTMD_Zl_KcFg3wE.roa
Signing time: Wed 01 Jan 2025 07:48:19 +0000
ROA not before: Wed 01 Jan 2025 07:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a00:a640:10a0::/44 maxlen: 48
2a00:a640:20a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3f:ec:20:4c:37:01:9f:de:31:0b:f6:fa:aa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29b776e768ef3d0603c53303fd997f29c160df01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:fc:46:cd:9f:96:5d:47:28:1c:59:c0:b5:
00:84:f8:98:16:3f:31:f0:eb:d0:d3:28:0c:c9:7f:
83:e0:82:17:2a:1d:9a:f3:3d:36:1f:11:29:3e:5a:
ce:cc:8f:5d:0a:55:11:bf:67:c0:5b:68:20:cf:ee:
f7:51:1d:2d:be:44:6a:d6:0c:5e:85:6d:12:b9:38:
a1:56:bb:60:67:1c:4c:e1:8d:16:7f:16:d5:1f:2d:
92:5a:30:4f:e9:d4:e6:f7:77:a3:9d:53:6b:07:04:
76:3f:a9:24:a2:6b:b5:d9:72:a4:f3:cd:87:6d:7d:
37:ff:ea:d5:bf:f5:25:b9:66:f1:5f:0d:3b:55:a3:
64:5b:33:05:5d:f4:f7:93:dd:4f:3a:e3:c0:10:fa:
5d:36:51:00:7f:c8:dd:da:0e:97:b8:cc:66:26:4e:
d1:c2:47:ea:19:65:d2:ff:f7:97:ee:ce:92:58:ac:
15:00:77:85:7e:b0:ab:94:46:6e:f7:21:1f:e6:7e:
ec:03:09:c3:dd:87:2a:d9:34:a0:fe:b9:be:a7:7e:
17:e5:cd:09:5d:44:32:46:d5:14:82:ae:d2:42:8e:
fe:10:92:2e:a9:f1:0f:ae:7d:f2:14:a1:3b:81:58:
04:dc:53:33:c2:ed:c4:b9:7a:7b:38:89:f3:8e:b3:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B7:76:E7:68:EF:3D:06:03:C5:33:03:FD:99:7F:29:C1:60:DF:01
X509v3 Authority Key Identifier:
keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/Kbd252jvPQYDxTMD_Zl_KcFg3wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:a640:10a0::/44
2a00:a640:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
1d:20:bc:b1:2a:b7:75:96:9f:bc:f5:a6:9e:21:38:8e:65:4d:
ef:47:c0:b5:f8:e1:c8:06:5a:79:30:78:07:57:62:ef:f2:fa:
69:cf:70:41:20:34:36:12:a9:54:07:24:b1:b1:10:6a:c1:2f:
58:2e:35:52:be:d6:db:0a:1e:a5:13:6f:12:06:6c:54:8f:5d:
5f:0c:bf:25:6d:45:09:f7:08:22:04:1e:ef:b9:06:6f:30:c6:
35:b0:c0:ae:29:5e:55:84:ec:fe:02:6c:18:51:f3:8c:5e:c1:
38:95:11:4e:e5:0e:16:54:91:fd:40:df:a1:fe:56:c3:5e:83:
ae:58:80:5a:4f:53:b6:f3:1b:3f:03:75:72:57:ac:36:5e:ac:
17:d3:ce:4a:ee:68:66:9b:71:ee:af:be:e3:f0:38:2b:d5:4d:
ce:2c:c5:ee:a3:56:bd:ad:2a:54:e0:fe:72:4f:25:dd:3e:dd:
32:7d:89:5b:43:da:f4:ba:5c:e7:e8:d6:87:25:78:ca:d3:fb:
6c:f2:a8:9c:a9:79:70:2c:5f:a9:45:bf:20:5f:8d:2a:f1:cc:
07:85:d4:44:fc:9e:23:ff:72:a9:40:55:42:bf:f5:a0:cf:7f:
0b:3f:2e:85:5d:46:52:a2:64:9a:34:8d:a5:b0:3c:20:b0:ae:
e6:dd:a7:a5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQg1j/sIEw3AZ/eMQv2+qq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTRkMTk1MjdmZDg1ZDBkNDQ0YWNhZGQ0NGEwMTY1NWZk
Yzc0MDAwHhcNMjUwMTAxMDc0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWI3NzZlNzY4ZWYzZDA2MDNjNTMzMDNmZDk5N2YyOWMxNjBkZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7P8Rs2fll1HKBxZwLUAhPiYFj8x
8OvQ0ygMyX+D4IIXKh2a8z02HxEpPlrOzI9dClURv2fAW2ggz+73UR0tvkRq1gxe
hW0SuTihVrtgZxxM4Y0WfxbVHy2SWjBP6dTm93ejnVNrBwR2P6kkomu12XKk882H
bX03/+rVv/UluWbxXw07VaNkWzMFXfT3k91POuPAEPpdNlEAf8jd2g6XuMxmJk7R
wkfqGWXS//eX7s6SWKwVAHeFfrCrlEZu9yEf5n7sAwnD3Ycq2TSg/rm+p34X5c0J
XUQyRtUUgq7SQo7+EJIuqfEPrn3yFKE7gVgE3FMzwu3EuXp7OInzjrPFLwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCm3dudo7z0GA8UzA/2ZfynBYN8BMB8GA1UdIwQY
MBaAFFdU0ZUn/YXQ1ESsrdRKAWVf3HQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFUUmxTZjloZERVUkt5dDFFb0JaVl9jZEFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS83YzlmY2MtOGZjZS00NGI3LWI2YmYt
MTE3NzYwMzE0MTVmLzEvS2JkMjUyanZQUVlEeFRNRF9abF9LY0ZnM3dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS83YzlmY2MtOGZjZS00NGI3LWI2YmYtMTE3NzYwMzE0MTVm
LzEvVjFUUmxTZjloZERVUkt5dDFFb0JaVl9jZEFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgCmQBCg
AwcEKgCmQCCgMA0GCSqGSIb3DQEBCwUAA4IBAQAdILyxKrd1lp+89aaeITiOZU3v
R8C1+OHIBlp5MHgHV2Lv8vppz3BBIDQ2EqlUBySxsRBqwS9YLjVSvtbbCh6lE28S
BmxUj11fDL8lbUUJ9wgiBB7vuQZvMMY1sMCuKV5VhOz+AmwYUfOMXsE4lRFO5Q4W
VJH9QN+h/lbDXoOuWIBaT1O28xs/A3VyV6w2XqwX085K7mhmm3Hur77j8Dgr1U3O
LMXuo1a9rSpU4P5yTyXdPt0yfYlbQ9r0ulzn6NaHJXjK0/ts8qicqXlwLF+pRb8g
X40q8cwHhdRE/J4j/3KpQFVCv/Wgz38LPy6FXUZSomSaNI2lsDwgsK7m3ael
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:17 2025 by rpki-client