Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa
File: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (raw, json)
Hash identifier: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=
Subject key identifier: F3:76:5F:23:D1:72:A3:2D:3E:D0:47:7B:5D:58:82:25:45:56:01:49
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0194221FBD10515E1AA46C2E39C9D9EB2909
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58036
IP address blocks: 2a0e:e6c7:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bd:10:51:5e:1a:a4:6c:2e:39:c9:d9:eb:29:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3765f23d172a32d3ed0477b5d58822545560149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:65:5b:e9:f2:6d:7a:03:a0:0f:f1:de:96:
9a:69:1a:29:06:30:25:fe:f0:88:fb:3b:22:b9:36:
44:28:ab:04:c5:55:07:f5:5d:ef:e3:cf:f9:f2:85:
9d:05:f6:8f:a9:c2:ec:c9:b0:1c:2c:e0:e6:1b:fa:
89:1a:ab:80:e5:7d:81:1f:93:f6:ab:a9:fb:7a:79:
77:9b:0b:99:f4:3f:55:63:64:1b:2e:a1:45:07:af:
b0:3b:94:e8:7b:00:8e:ee:b8:8c:65:0d:e8:e2:c3:
70:26:5e:da:ed:55:eb:a7:c1:dd:6b:b8:f8:58:ec:
4a:93:2f:42:47:9e:9a:04:dd:89:69:00:76:cf:4a:
90:b3:2c:21:9c:22:b9:29:6a:5a:f5:d3:6c:ea:ef:
78:25:f2:88:bc:fa:1d:b7:46:6e:be:b8:76:b0:dc:
2c:20:cf:26:f5:09:a0:49:b8:9e:cf:2d:4a:5b:66:
13:1e:bd:13:6c:a7:e2:12:9b:c6:f4:9f:1e:df:05:
c4:ed:80:b5:3b:5f:72:ff:55:b4:0d:77:f8:a9:f7:
bf:a7:92:2e:9f:be:68:f3:19:10:cb:c1:9b:76:58:
c1:6b:e3:44:82:a9:01:d7:f9:ad:f9:a8:58:21:c2:
a1:cf:89:79:ca:f4:22:3d:ee:2a:67:23:b9:a2:ae:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:5F:23:D1:72:A3:2D:3E:D0:47:7B:5D:58:82:25:45:56:01:49
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e6c7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
13:eb:0f:0e:1e:25:1a:55:93:c0:63:f8:a7:03:55:a2:30:0f:
16:4f:be:6e:39:d3:26:57:7e:bf:75:7a:6c:bc:e3:25:e7:1a:
57:00:2c:16:14:6d:cc:0b:f2:7a:79:df:08:d0:51:cc:04:73:
4c:4a:db:24:e1:6b:58:6c:48:ea:21:27:8e:b4:d8:46:ab:0c:
60:81:eb:a3:b5:13:cb:5c:6f:98:e3:0c:77:e8:d8:e6:6f:f6:
a6:4a:40:52:8c:22:30:56:d8:b8:5e:9f:3d:87:45:c7:76:9d:
d1:18:7b:7d:a2:d4:6d:49:53:77:7b:49:e5:a6:25:2f:8a:07:
7e:37:17:98:00:34:21:68:cc:07:f2:60:83:6c:48:69:12:81:
48:d0:40:2c:e9:3d:78:79:20:7f:c3:70:36:c3:04:e3:aa:76:
be:0b:e9:7b:60:4f:24:73:c2:ec:47:b8:51:32:86:12:3c:c2:
9a:40:50:53:34:33:62:64:e1:57:8f:0a:01:f9:6a:6e:0c:a8:
30:c7:4a:d4:ea:12:e0:1a:dc:62:ae:19:7f:26:b7:fc:d8:59:
1e:49:5d:1a:9f:4b:07:b9:e5:b9:57:34:67:6e:26:8d:b3:27:
56:52:ec:ee:54:f8:3d:64:1f:eb:b6:74:11:9d:91:04:26:e0:
8b:4c:5e:92
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQiH70QUV4apGwuOcnZ6ykJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz
YmEyZjEwHhcNMjUwMTAxMTM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzc2NWYyM2QxNzJhMzJkM2VkMDQ3N2I1ZDU4ODIyNTQ1NTYwMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNNlW+nybXoDoA/x3paaaRopBjAl
/vCI+zsiuTZEKKsExVUH9V3v48/58oWdBfaPqcLsybAcLODmG/qJGquA5X2BH5P2
q6n7enl3mwuZ9D9VY2QbLqFFB6+wO5ToewCO7riMZQ3o4sNwJl7a7VXrp8Hda7j4
WOxKky9CR56aBN2JaQB2z0qQsywhnCK5KWpa9dNs6u94JfKIvPodt0Zuvrh2sNws
IM8m9QmgSbiezy1KW2YTHr0TbKfiEpvG9J8e3wXE7YC1O19y/1W0DXf4qfe/p5Iu
n75o8xkQy8GbdljBa+NEgqkB1/mt+ahYIcKhz4l5yvQiPe4qZyO5oq6DWQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPN2XyPRcqMtPtBHe11YgiVFVgFJMB8GA1UdIwQY
MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt
NTA0ZjI3NjY3NjBmLzEvODNaZkk5RnlveTAtMEVkN1hWaUNKVVZXQVVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm
LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKg7mx/Aw
DQYJKoZIhvcNAQELBQADggEBABPrDw4eJRpVk8Bj+KcDVaIwDxZPvm450yZXfr91
emy84yXnGlcALBYUbcwL8np53wjQUcwEc0xK2yTha1hsSOohJ4602EarDGCB66O1
E8tcb5jjDHfo2OZv9qZKQFKMIjBW2Lhenz2HRcd2ndEYe32i1G1JU3d7SeWmJS+K
B343F5gANCFozAfyYINsSGkSgUjQQCzpPXh5IH/DcDbDBOOqdr4L6XtgTyRzwuxH
uFEyhhI8wppAUFM0M2Jk4VePCgH5am4MqDDHStTqEuAa3GKuGX8mt/zYWR5JXRqf
Swe55blXNGduJo2zJ1ZS7O5U+D1kH+u2dBGdkQQm4ItMXpI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 23:59:12 2025 by rpki-client