Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tVI1pM8zl2_JTPVEjVBn8u8-Fwk.roa
File: tVI1pM8zl2_JTPVEjVBn8u8-Fwk.roa (raw, json)
Hash identifier: Z/xyV147AUEsyX2ZBWX55ZlEmo9hFLyiVOTHFANBFXA=
Subject key identifier: B5:52:35:A4:CF:33:97:6F:C9:4C:F5:44:8D:50:67:F2:EF:3E:17:09
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE8F4AD8429F9D7F3B65B011B4620
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tVI1pM8zl2_JTPVEjVBn8u8-Fwk.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209859
IP address blocks: 2a06:e881:5300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e8:f4:ad:84:29:f9:d7:f3:b6:5b:01:1b:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b55235a4cf33976fc94cf5448d5067f2ef3e1709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:ee:12:b5:fb:56:7c:f5:78:68:46:3e:9a:
2f:4e:83:89:f7:23:65:ae:1b:e2:ae:e5:fa:f4:93:
2b:5b:28:9d:3d:5f:37:33:c0:80:52:2a:dd:76:4d:
1f:c8:85:c7:db:16:22:ea:ea:c2:56:4e:00:1d:78:
d0:9d:90:33:c5:2c:eb:9d:0f:cd:47:86:8a:cb:55:
39:32:ab:9c:34:78:a5:6d:d1:7d:37:01:1f:7b:1d:
9d:08:a7:01:dd:51:47:e3:f9:d4:1f:0b:76:a1:7b:
63:d6:7c:ed:5b:71:8f:63:41:58:2e:f9:e2:29:3b:
98:50:b5:75:b9:ff:20:e1:e7:03:11:47:7c:38:8e:
fc:8b:c3:bf:40:98:b2:9b:8e:24:fa:3f:de:93:cf:
b9:6f:7f:ab:5c:ea:dc:df:8c:33:59:75:49:63:0b:
73:8b:07:12:a1:57:95:65:08:06:82:08:d3:40:33:
37:39:e9:4e:73:5d:a8:61:e4:b3:83:0e:6c:01:43:
7a:fb:d1:d9:49:b0:db:ab:83:98:5c:37:4b:f4:ee:
d2:b3:4b:eb:da:a0:f1:5d:03:d1:a7:20:3a:72:28:
0e:80:2b:f5:7b:67:83:cd:b0:08:3d:0e:31:bf:5d:
3e:b2:41:92:da:11:6d:78:1f:46:a8:b9:19:96:d3:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:52:35:A4:CF:33:97:6F:C9:4C:F5:44:8D:50:67:F2:EF:3E:17:09
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tVI1pM8zl2_JTPVEjVBn8u8-Fwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5300::/40
Signature Algorithm: sha256WithRSAEncryption
6a:2e:0f:41:ec:af:93:cc:96:91:22:9f:3c:55:db:18:8e:71:
fe:6a:6b:b3:5f:65:ba:65:ab:58:79:b1:56:ce:51:de:c5:42:
21:57:9d:26:8f:06:52:8e:9e:7c:83:b4:f0:87:44:81:4c:e4:
9d:3d:f2:17:66:65:27:e5:b3:00:c1:ac:b3:af:43:ec:2a:8b:
ea:27:9b:ca:31:fe:34:d5:00:bb:c3:51:f7:67:40:e5:dc:4e:
96:b3:78:69:47:2b:5b:a1:04:0d:1d:01:1a:be:e7:bf:07:3b:
ca:a1:64:37:0f:b4:55:9c:11:34:82:35:e2:eb:c4:08:8d:f2:
e5:28:75:dd:04:37:e0:ab:c9:3e:b3:6c:69:82:7f:8f:b8:42:
83:75:aa:0e:29:8c:ce:b4:64:ea:ea:eb:b6:f0:c7:b3:ac:9a:
c6:e0:ac:c2:f2:75:28:ec:0b:1a:55:2c:76:52:3c:d2:12:61:
99:0a:a5:19:81:c9:15:2e:40:ac:e8:d9:96:7a:07:92:a2:84:
8e:4b:66:5c:a6:c9:1e:0e:48:71:0c:72:14:e7:e6:2b:0a:f9:
ea:84:4a:77:5a:b7:d1:7e:fb:f8:e7:a0:37:94:74:cb:43:97:
63:99:f5:76:c7:de:2b:6f:21:26:58:2b:9f:03:1b:ce:02:88:
1b:c3:2f:94
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQl/ej0rYQp+dfztlsBG0YgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjUwMTAyMDc0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTUyMzVhNGNmMzM5NzZmYzk0Y2Y1NDQ4ZDUwNjdmMmVmM2UxNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyfuErX7Vnz1eGhGPpovToOJ9yNl
rhviruX69JMrWyidPV83M8CAUirddk0fyIXH2xYi6urCVk4AHXjQnZAzxSzrnQ/N
R4aKy1U5MqucNHilbdF9NwEfex2dCKcB3VFH4/nUHwt2oXtj1nztW3GPY0FYLvni
KTuYULV1uf8g4ecDEUd8OI78i8O/QJiym44k+j/ek8+5b3+rXOrc34wzWXVJYwtz
iwcSoVeVZQgGggjTQDM3OelOc12oYeSzgw5sAUN6+9HZSbDbq4OYXDdL9O7Ss0vr
2qDxXQPRpyA6cigOgCv1e2eDzbAIPQ4xv10+skGS2hFteB9GqLkZltM+sQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLVSNaTPM5dvyUz1RI1QZ/LvPhcJMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvdFZJMXBNOHpsMl9KVFBWRWpWQm44dTgtRndrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgbogVMw
DQYJKoZIhvcNAQELBQADggEBAGouD0Hsr5PMlpEinzxV2xiOcf5qa7NfZbplq1h5
sVbOUd7FQiFXnSaPBlKOnnyDtPCHRIFM5J098hdmZSflswDBrLOvQ+wqi+onm8ox
/jTVALvDUfdnQOXcTpazeGlHK1uhBA0dARq+578HO8qhZDcPtFWcETSCNeLrxAiN
8uUodd0EN+CryT6zbGmCf4+4QoN1qg4pjM60ZOrq67bwx7OsmsbgrMLydSjsCxpV
LHZSPNISYZkKpRmByRUuQKzo2ZZ6B5KihI5LZlymyR4OSHEMchTn5isK+eqESnda
t9F++/jnoDeUdMtDl2OZ9XbH3itvISZYK58DG84CiBvDL5Q=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:04 2025 by rpki-client