Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa
File: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (raw, json)
Hash identifier: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=
Subject key identifier: 90:69:41:4E:DE:71:EC:A5:3E:B7:1C:F6:3A:6E:5D:C9:12:94:4D:D4
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 0194266A2E2227882D5758566C47CD855B6C
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa
Signing time: Thu 02 Jan 2025 09:48:00 +0000
ROA not before: Thu 02 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210541
IP address blocks: 2a0e:3303::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:2e:22:27:88:2d:57:58:56:6c:47:cd:85:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 2 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9069414ede71eca53eb71cf63a6e5dc912944dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:57:fb:70:78:cd:e1:b8:3c:8b:f9:ca:30:
16:a9:cd:05:8a:28:86:e1:b6:1c:5e:60:e5:18:7c:
92:f8:07:04:a2:57:30:1f:5e:1f:76:98:5e:30:c9:
8d:b5:35:e0:c3:9a:3e:06:f6:fb:e0:a7:62:d4:10:
7a:2b:13:bc:99:9b:86:cf:9d:c9:c1:86:24:0b:8d:
ec:db:aa:1e:a6:af:95:65:21:3c:60:bd:d5:44:19:
2f:31:d4:52:59:2d:3a:6f:0f:93:8d:6b:3b:25:c1:
30:cd:4c:c3:89:da:c6:18:47:3e:a4:c4:f0:f2:43:
ce:6a:34:1a:d4:ff:f0:6d:b5:19:98:b3:4a:0b:17:
45:36:3d:65:c0:55:78:2f:05:db:a9:2e:10:ad:91:
ac:ec:74:19:11:02:50:e1:1a:b1:2c:a2:a5:f2:bb:
27:43:c7:1e:e2:0f:4e:a9:01:61:79:2d:50:6b:6d:
03:a3:e4:b8:54:b6:eb:2f:28:66:c5:b0:76:99:14:
78:71:14:6c:15:79:ba:9b:3e:2d:90:b1:0a:1d:81:
69:3a:5e:a9:f9:50:28:20:8f:30:51:a7:cd:bb:04:
f2:ba:d9:37:36:36:01:26:c9:08:9d:13:d4:40:2e:
54:ef:c0:90:46:6f:b6:2e:bc:df:db:f3:29:65:a0:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:69:41:4E:DE:71:EC:A5:3E:B7:1C:F6:3A:6E:5D:C9:12:94:4D:D4
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3303::/32
Signature Algorithm: sha256WithRSAEncryption
5b:e9:e7:63:7b:26:fc:15:54:3f:11:29:35:e5:7c:fa:95:d3:
ae:3b:5c:01:0b:d5:26:db:c8:63:46:59:d2:d9:de:ea:cb:5e:
50:74:28:1e:dc:10:60:f7:f0:31:f4:32:51:f0:0a:3c:86:43:
79:5c:69:8f:44:85:5e:f8:bd:38:c2:43:a7:44:bf:d0:cc:cf:
fd:07:31:fe:34:ae:2a:ea:9c:5c:14:f6:f4:b9:25:e6:5a:3f:
10:c5:d1:41:67:89:92:a7:b7:5f:e1:0f:e2:22:dd:67:5a:ac:
a0:b3:a5:bf:09:20:4c:6d:f1:67:4f:2d:f3:b5:8b:2e:88:56:
bc:ab:16:b8:0e:95:03:99:c7:34:52:ae:ec:91:4a:d4:e4:82:
44:7a:a8:4d:1f:4c:04:88:27:23:70:4e:51:b2:e0:a3:ba:13:
ba:97:2f:9a:c6:48:dd:98:fb:31:45:ca:71:3a:4f:58:df:a2:
d4:12:0f:5f:b7:86:2e:d9:1d:af:da:58:be:e1:71:bb:e6:de:
c8:71:68:ea:c6:31:75:a9:26:7a:ad:f3:0f:77:e4:00:12:0c:
e5:4d:5a:4c:f5:eb:d5:b1:b5:d1:b2:5d:54:70:2b:7f:4e:a9:
23:53:b0:f1:6c:de:fa:4b:4c:b5:27:12:88:9f:cc:c5:01:75:
0a:7f:30:e6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQmai4iJ4gtV1hWbEfNhVtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0
NTlmZWQwHhcNMjUwMTAyMDk0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDY5NDE0ZWRlNzFlY2E1M2ViNzFjZjYzYTZlNWRjOTEyOTQ0ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor1X+3B4zeG4PIv5yjAWqc0FiiiG
4bYcXmDlGHyS+AcEolcwH14fdpheMMmNtTXgw5o+Bvb74Kdi1BB6KxO8mZuGz53J
wYYkC43s26oepq+VZSE8YL3VRBkvMdRSWS06bw+TjWs7JcEwzUzDidrGGEc+pMTw
8kPOajQa1P/wbbUZmLNKCxdFNj1lwFV4LwXbqS4QrZGs7HQZEQJQ4RqxLKKl8rsn
Q8ce4g9OqQFheS1Qa20Do+S4VLbrLyhmxbB2mRR4cRRsFXm6mz4tkLEKHYFpOl6p
+VAoII8wUafNuwTyutk3NjYBJskInRPUQC5U78CQRm+2Lrzf2/MpZaAJZwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJBpQU7eceylPrcc9jpuXckSlE3UMB8GA1UdIwQY
MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt
MzBmZjJjODNmMDAxLzEva0dsQlR0NXg3S1UtdHh6Mk9tNWR5UktVVGRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx
LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg4zAzAN
BgkqhkiG9w0BAQsFAAOCAQEAW+nnY3sm/BVUPxEpNeV8+pXTrjtcAQvVJtvIY0ZZ
0tne6steUHQoHtwQYPfwMfQyUfAKPIZDeVxpj0SFXvi9OMJDp0S/0MzP/Qcx/jSu
KuqcXBT29Lkl5lo/EMXRQWeJkqe3X+EP4iLdZ1qsoLOlvwkgTG3xZ08t87WLLohW
vKsWuA6VA5nHNFKu7JFK1OSCRHqoTR9MBIgnI3BOUbLgo7oTupcvmsZI3Zj7MUXK
cTpPWN+i1BIPX7eGLtkdr9pYvuFxu+beyHFo6sYxdakmeq3zD3fkABIM5U1aTPXr
1bG10bJdVHArf06pI1Ow8Wze+ktMtScSiJ/MxQF1Cn8w5g==
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:59 2025 by rpki-client