Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/RU33m0E_v4JtyZuDuLE7um4TGFs.roa
File: RU33m0E_v4JtyZuDuLE7um4TGFs.roa (raw, json)
Hash identifier: rYLpalqoskbodL0bGl/nYGGqSHm/lj+AMxh3BExa9eA=
Subject key identifier: 45:4D:F7:9B:41:3F:BF:82:6D:C9:9B:83:B8:B1:3B:BA:6E:13:18:5B
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 01942444B3F1BC1C23230E550495DDC8EB65
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/RU33m0E_v4JtyZuDuLE7um4TGFs.roa
Signing time: Wed 01 Jan 2025 23:47:49 +0000
ROA not before: Wed 01 Jan 2025 23:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210695
IP address blocks: 2a0a:2e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b3:f1:bc:1c:23:23:0e:55:04:95:dd:c8:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=454df79b413fbf826dc99b83b8b13bba6e13185b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:45:05:2b:f6:65:15:f3:72:b1:d8:d0:d3:
1d:39:a3:70:0d:bb:2b:01:26:4b:4f:e2:6b:bc:51:
98:8f:9f:5d:8a:09:38:64:5a:a0:ac:2e:1c:74:17:
0c:a8:b0:11:fb:02:66:08:f3:d2:14:c2:7f:c3:4a:
b7:e8:d5:57:16:ff:18:ff:a3:49:e1:13:b7:ad:e3:
29:3f:a6:83:9f:c7:16:a4:98:12:83:9e:30:37:65:
52:6a:ca:d5:eb:ac:ab:7c:9b:04:b6:3b:7f:39:7f:
c8:53:21:98:e1:e1:b3:d4:b6:fd:6b:36:c1:ea:fe:
29:63:9e:14:45:3d:3f:06:db:b3:15:be:b7:d8:8c:
b5:b4:5b:48:2e:7c:86:f1:c0:bb:cb:1f:25:55:44:
83:2f:51:10:65:99:b4:89:61:c0:c3:e5:fa:36:d1:
8a:cf:84:a9:0a:5d:47:ac:c2:f4:5a:5d:0f:4d:f6:
29:a3:9e:d0:45:64:63:e5:fc:3c:e2:9d:e2:75:d5:
c8:75:3e:d6:91:e0:d4:1c:4c:6d:ed:da:c4:08:8d:
32:ee:23:e0:e9:1a:78:c1:c7:e8:65:fa:4c:5c:e8:
45:28:08:56:ff:8b:70:7e:0d:f0:e8:d9:e4:23:af:
b6:b0:b3:45:73:ed:e4:2e:9e:d1:81:67:b8:60:07:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4D:F7:9B:41:3F:BF:82:6D:C9:9B:83:B8:B1:3B:BA:6E:13:18:5B
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/RU33m0E_v4JtyZuDuLE7um4TGFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2e80::/32
Signature Algorithm: sha256WithRSAEncryption
93:30:b8:86:52:b5:86:ea:6b:bd:7b:13:e3:74:55:cb:11:fb:
13:6d:47:c4:63:3a:aa:44:32:06:94:bd:e9:82:29:01:38:07:
01:70:b1:11:7e:0b:56:19:80:a1:2d:d1:38:d4:f7:18:71:ff:
7b:e2:bb:f7:d9:4a:3c:ad:d4:49:65:5e:d2:d5:ca:0f:55:19:
00:80:1d:de:5e:27:92:9e:fb:f8:fd:1f:72:3b:a3:68:7c:e2:
cb:c3:bf:cc:b7:45:74:a7:0c:14:28:70:bc:d5:b7:5b:4e:cf:
bf:f4:df:6c:7d:da:32:04:fa:e0:41:2d:8c:9a:3a:19:1d:25:
e4:8f:cc:51:3b:a9:63:50:3c:88:fe:96:6c:aa:a4:02:11:f9:
0e:e4:d7:38:05:12:3b:84:00:99:36:4e:72:93:9a:a1:85:a6:
00:7c:eb:06:14:05:0c:e1:ae:54:9b:87:f5:cd:e9:bf:fb:ed:
30:64:d0:b9:d6:c3:cf:1c:40:c7:cf:d0:d3:97:c0:1b:bb:98:
8c:fa:bc:09:22:1c:04:ee:19:b1:62:f7:53:e1:3f:6c:2e:e6:
d1:8f:49:d2:85:90:e4:ed:af:f0:84:cd:2f:5d:79:45:e6:d2:
e4:11:57:3c:f1:d1:e3:ed:9f:a2:6d:eb:5d:6a:e8:1d:6b:ff:
ff:17:81:8f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQkRLPxvBwjIw5VBJXdyOtlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3
ZmY3MzYwHhcNMjUwMTAxMjM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTRkZjc5YjQxM2ZiZjgyNmRjOTliODNiOGIxM2JiYTZlMTMxODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqBFBSv2ZRXzcrHY0NMdOaNwDbsr
ASZLT+JrvFGYj59digk4ZFqgrC4cdBcMqLAR+wJmCPPSFMJ/w0q36NVXFv8Y/6NJ
4RO3reMpP6aDn8cWpJgSg54wN2VSasrV66yrfJsEtjt/OX/IUyGY4eGz1Lb9azbB
6v4pY54URT0/BtuzFb632Iy1tFtILnyG8cC7yx8lVUSDL1EQZZm0iWHAw+X6NtGK
z4SpCl1HrML0Wl0PTfYpo57QRWRj5fw84p3iddXIdT7WkeDUHExt7drECI0y7iPg
6Rp4wcfoZfpMXOhFKAhW/4twfg3w6NnkI6+2sLNFc+3kLp7RgWe4YAfPWwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEVN95tBP7+Cbcmbg7ixO7puExhbMB8GA1UdIwQY
MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut
YWYxZWYxZDdhZmI4LzEvUlUzM20wRV92NEp0eVp1RHVMRTd1bTRUR0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4
LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgougDAN
BgkqhkiG9w0BAQsFAAOCAQEAkzC4hlK1huprvXsT43RVyxH7E21HxGM6qkQyBpS9
6YIpATgHAXCxEX4LVhmAoS3RONT3GHH/e+K799lKPK3USWVe0tXKD1UZAIAd3l4n
kp77+P0fcjujaHziy8O/zLdFdKcMFChwvNW3W07Pv/TfbH3aMgT64EEtjJo6GR0l
5I/MUTupY1A8iP6WbKqkAhH5DuTXOAUSO4QAmTZOcpOaoYWmAHzrBhQFDOGuVJuH
9c3pv/vtMGTQudbDzxxAx8/Q05fAG7uYjPq8CSIcBO4ZsWL3U+E/bC7m0Y9J0oWQ
5O2v8ITNL115RebS5BFXPPHR4+2fom3rXWroHWv//xeBjw==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:33 2025 by rpki-client