Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FRxgBOKmsAb2F_3dqVXjso7xa0k.roa
File: FRxgBOKmsAb2F_3dqVXjso7xa0k.roa (raw, json)
Hash identifier: CVIq8+TtqhySUfo3Wu75YXlQvsWeUwPI1qZ12F7u86o=
Subject key identifier: 15:1C:60:04:E2:A6:B0:06:F6:17:FD:DD:A9:55:E3:B2:8E:F1:6B:49
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C4C51B689388538967DDDD1F6F38E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FRxgBOKmsAb2F_3dqVXjso7xa0k.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197860
IP address blocks: 2a12:bec0:390::/44 maxlen: 48
2a12:bec4:1010::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4c:51:b6:89:38:85:38:96:7d:dd:d1:f6:f3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151c6004e2a6b006f617fddda955e3b28ef16b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:b3:28:1e:36:5e:14:6f:ba:02:13:01:a8:
4f:06:3a:27:e3:2b:d3:20:99:c8:8f:64:b2:8e:11:
e3:a4:30:93:4f:4e:b0:c6:c1:91:5a:8e:c6:82:dd:
69:2d:74:c5:3e:2b:ef:1c:5d:0b:00:bc:6e:c4:b9:
7b:63:f3:4e:41:6b:80:16:90:88:1e:ea:e0:b7:7e:
aa:27:53:28:19:fb:c6:9a:79:a5:82:ec:31:45:a8:
8d:91:ce:d0:ad:e4:3b:42:ec:e2:12:c5:29:0d:6d:
a7:ea:3d:76:2f:87:69:a3:b5:99:6b:8c:f7:28:54:
70:18:be:70:ed:50:9d:66:86:59:6c:06:71:12:c3:
b6:8f:16:24:31:90:f3:dd:19:19:1a:53:89:96:71:
87:c3:02:b4:af:c7:95:4e:a2:bd:ba:4b:69:80:54:
4f:38:9b:9e:dd:3e:9b:55:05:3a:ab:bf:29:2d:71:
e9:a0:a1:fb:79:75:54:fc:da:49:18:a0:a8:28:91:
da:0e:58:e1:21:a4:3b:f8:83:83:a1:38:d9:c6:97:
d6:a7:02:8c:91:81:11:e5:a7:53:4a:d6:3e:8f:d7:
9f:73:18:0c:76:b0:02:d6:6a:2d:42:c3:9e:91:ab:
a0:8f:bf:e4:a1:1b:57:6a:8f:d2:f0:8a:8e:8d:71:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:60:04:E2:A6:B0:06:F6:17:FD:DD:A9:55:E3:B2:8E:F1:6B:49
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FRxgBOKmsAb2F_3dqVXjso7xa0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:390::/44
2a12:bec4:1010::/44
Signature Algorithm: sha256WithRSAEncryption
5f:0e:b1:8f:89:e7:f2:5f:ae:40:de:9c:5b:7d:46:b8:0d:7c:
f2:f4:90:52:6b:93:e1:58:1b:00:b9:7b:f4:4f:3d:2f:24:0c:
72:c5:4b:f2:18:19:2b:e9:7d:60:2c:dc:bf:61:0e:d8:10:6e:
82:10:17:ab:f5:4b:08:2c:f4:ee:a4:a7:26:d2:88:47:9e:95:
70:65:35:c0:07:f0:c5:db:55:42:26:2b:6a:31:6c:df:74:5b:
fe:49:11:ba:2e:64:cb:18:23:70:b7:42:f3:b5:ee:ac:ef:5d:
b0:d6:c0:8e:74:d0:3e:94:f3:d8:91:5c:3d:9a:4d:bd:3e:5c:
63:ee:d4:88:6e:b2:11:1f:a1:c2:f2:ec:7c:29:70:4b:ce:0e:
12:e6:f0:29:43:2c:1e:d6:54:0b:6a:21:32:44:26:73:94:81:
5d:4b:51:0a:81:c2:9e:ce:4d:19:26:bf:6e:52:bd:0c:c6:fe:
11:59:96:77:49:e3:54:30:7b:65:ba:71:34:61:ba:c4:cf:0e:
71:8c:94:2b:6e:e5:fa:cc:96:64:b4:7b:67:aa:d6:40:f7:f2:
52:d4:b6:e9:02:2a:34:7c:62:da:ee:0c:a1:ab:a4:7a:e0:1f:
8a:0e:6f:71:fc:ba:0b:84:46:14:86:14:d1:dc:0a:78:f9:9c:
0d:87:39:a7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQfjExRtok4hTiWfd3R9vOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTFjNjAwNGUyYTZiMDA2ZjYxN2ZkZGRhOTU1ZTNiMjhlZjE2YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoezKB42XhRvugITAahPBjon4yvT
IJnIj2SyjhHjpDCTT06wxsGRWo7Ggt1pLXTFPivvHF0LALxuxLl7Y/NOQWuAFpCI
Hurgt36qJ1MoGfvGmnmlguwxRaiNkc7QreQ7QuziEsUpDW2n6j12L4dpo7WZa4z3
KFRwGL5w7VCdZoZZbAZxEsO2jxYkMZDz3RkZGlOJlnGHwwK0r8eVTqK9uktpgFRP
OJue3T6bVQU6q78pLXHpoKH7eXVU/NpJGKCoKJHaDljhIaQ7+IODoTjZxpfWpwKM
kYER5adTStY+j9efcxgMdrAC1motQsOekaugj7/koRtXao/S8IqOjXH0ywIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBUcYATiprAG9hf93alV47KO8WtJMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvRlJ4Z0JPS21zQWIyRl8zZHFWWGpzbzd4YTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+wAOQ
AwcEKhK+xBAQMA0GCSqGSIb3DQEBCwUAA4IBAQBfDrGPiefyX65A3pxbfUa4DXzy
9JBSa5PhWBsAuXv0Tz0vJAxyxUvyGBkr6X1gLNy/YQ7YEG6CEBer9UsILPTupKcm
0ohHnpVwZTXAB/DF21VCJitqMWzfdFv+SRG6LmTLGCNwt0Lzte6s712w1sCOdNA+
lPPYkVw9mk29Plxj7tSIbrIRH6HC8ux8KXBLzg4S5vApQywe1lQLaiEyRCZzlIFd
S1EKgcKezk0ZJr9uUr0Mxv4RWZZ3SeNUMHtlunE0YbrEzw5xjJQrbuX6zJZktHtn
qtZA9/JS1LbpAio0fGLa7gyhq6R64B+KDm9x/LoLhEYUhhTR3Ap4+ZwNhzmn
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:48 2025 by rpki-client