Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JznRE0_uk8Z2k6ImXyAQ7ARJj1w.roa
File: JznRE0_uk8Z2k6ImXyAQ7ARJj1w.roa (raw, json)
Hash identifier: vmwB2UIPv1qxmDh9y1wBQXBGXbvt+q0qHsJNnZGSDho=
Subject key identifier: 27:39:D1:13:4F:EE:93:C6:76:93:A2:26:5F:20:10:EC:04:49:8F:5C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C71CE69FCCD3E261C524E7A056C05
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JznRE0_uk8Z2k6ImXyAQ7ARJj1w.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215652
IP address blocks: 2a12:bec0:660::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:71:ce:69:fc:cd:3e:26:1c:52:4e:7a:05:6c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2739d1134fee93c67693a2265f2010ec04498f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:a8:dd:c5:f0:e3:42:0d:b5:d4:48:a2:d9:
2a:b6:56:e2:dd:2f:48:c0:db:c6:67:83:e6:aa:a3:
f2:d5:7b:01:d7:48:f9:4e:4b:49:6a:98:a3:d9:91:
12:15:a4:4d:39:c5:1a:b9:8a:57:13:55:4f:df:ba:
75:68:bc:fc:d3:f6:0d:93:ed:aa:91:3b:94:44:cc:
b2:ae:da:87:2a:09:ad:76:25:98:01:8b:d7:05:73:
37:ca:1e:96:4b:39:3d:a8:b8:e9:20:67:b7:fe:b2:
ea:43:80:99:85:79:70:fc:0f:88:68:70:3c:92:1c:
e8:85:34:3c:6b:cb:16:46:78:fd:03:03:55:1b:62:
09:6f:45:c2:25:d0:c7:8a:31:1c:1e:f0:48:87:43:
de:ca:4e:b1:c8:1c:ff:ac:c5:55:94:a0:43:c4:50:
3b:6e:a1:3f:ca:00:22:79:0e:26:1a:6d:f5:32:23:
3e:15:29:be:6c:a7:67:3b:d1:07:d8:f7:43:ad:a4:
08:ff:80:88:9e:06:d5:49:16:25:9f:b7:af:7d:62:
15:06:7e:54:02:e0:4e:06:d9:52:54:57:4c:a5:b4:
c4:9a:1e:ed:55:24:dc:92:88:84:76:8b:9c:70:83:
22:fd:bc:18:95:65:5e:d8:cc:cb:9a:9c:a5:38:8a:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:D1:13:4F:EE:93:C6:76:93:A2:26:5F:20:10:EC:04:49:8F:5C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JznRE0_uk8Z2k6ImXyAQ7ARJj1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:660::/44
Signature Algorithm: sha256WithRSAEncryption
9d:16:52:bf:95:dd:4b:e2:20:e0:e1:ad:e9:59:61:f4:88:8e:
f2:ed:cd:64:a3:ed:dd:35:33:ee:34:4e:3d:f1:06:31:4e:e5:
5d:66:42:79:61:e3:ff:09:05:58:a6:38:8c:4f:79:12:6c:90:
2d:a5:af:8a:78:a1:27:1b:5f:8f:80:9e:c3:b8:ff:99:3e:79:
50:ae:9f:5a:73:ba:91:d5:8a:a9:d6:af:fe:39:b2:bb:40:5b:
ec:cc:df:fc:f7:f3:3e:92:d5:31:79:f5:49:4c:95:e3:44:cf:
84:b3:f1:4e:54:11:4d:ce:ff:aa:38:18:c5:a4:40:39:50:a0:
8d:35:18:55:27:15:a9:58:8b:fa:f2:5d:74:b2:dd:33:bb:c2:
a7:ce:4d:83:26:a0:6c:3a:cd:c1:ff:bb:98:de:48:22:a9:27:
bc:51:aa:fa:a0:8a:ae:2e:b3:a2:f2:11:f8:47:af:81:cf:d0:
fa:3c:de:1f:df:ba:42:7d:8d:93:8a:bb:0e:f5:a0:bd:92:98:
e0:67:8c:0b:4d:6c:88:91:ca:b5:fc:16:ca:c2:f0:09:67:51:
a0:6a:a8:34:9f:ff:64:3c:65:cf:18:ba:8b:e9:8e:3e:c2:4a:
83:7f:f5:5a:46:b1:da:03:6f:8d:3f:2c:1e:c0:79:93:1d:3a:
4e:f4:61:5c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjHHOafzNPiYcUk56BWwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjUwMTAxMDE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzM5ZDExMzRmZWU5M2M2NzY5M2EyMjY1ZjIwMTBlYzA0NDk4ZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35Wo3cXw40INtdRIotkqtlbi3S9I
wNvGZ4PmqqPy1XsB10j5TktJapij2ZESFaRNOcUauYpXE1VP37p1aLz80/YNk+2q
kTuURMyyrtqHKgmtdiWYAYvXBXM3yh6WSzk9qLjpIGe3/rLqQ4CZhXlw/A+IaHA8
khzohTQ8a8sWRnj9AwNVG2IJb0XCJdDHijEcHvBIh0Peyk6xyBz/rMVVlKBDxFA7
bqE/ygAieQ4mGm31MiM+FSm+bKdnO9EH2PdDraQI/4CIngbVSRYln7evfWIVBn5U
AuBOBtlSVFdMpbTEmh7tVSTckoiEdouccIMi/bwYlWVe2MzLmpylOIosSQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCc50RNP7pPGdpOiJl8gEOwESY9cMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvSnpuUkUwX3VrOFoyazZJbVh5QVE3QVJKajF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wAZg
MA0GCSqGSIb3DQEBCwUAA4IBAQCdFlK/ld1L4iDg4a3pWWH0iI7y7c1ko+3dNTPu
NE498QYxTuVdZkJ5YeP/CQVYpjiMT3kSbJAtpa+KeKEnG1+PgJ7DuP+ZPnlQrp9a
c7qR1Yqp1q/+ObK7QFvszN/89/M+ktUxefVJTJXjRM+Es/FOVBFNzv+qOBjFpEA5
UKCNNRhVJxWpWIv68l10st0zu8Knzk2DJqBsOs3B/7uY3kgiqSe8Uar6oIquLrOi
8hH4R6+Bz9D6PN4f37pCfY2TirsO9aC9kpjgZ4wLTWyIkcq1/BbKwvAJZ1Ggaqg0
n/9kPGXPGLqL6Y4+wkqDf/VaRrHaA2+NPywewHmTHTpO9GFc
-----END CERTIFICATE-----
Generated at Sun Apr 13 19:49:54 2025 by rpki-client