Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/C4Z9SDwHQBIF_JIi5JK8Mb6zpck.roa
File: C4Z9SDwHQBIF_JIi5JK8Mb6zpck.roa (raw, json)
Hash identifier: Emy5GLigzhti8P0cUHCctHZE51qCSzurxLKHT1Y4Q78=
Subject key identifier: 0B:86:7D:48:3C:07:40:12:05:FC:92:22:E4:92:BC:31:BE:B3:A5:C9
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B38E7D46AEC5500F76D75090BBB923
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/C4Z9SDwHQBIF_JIi5JK8Mb6zpck.roa
Signing time: Thu 02 Jan 2025 15:47:46 +0000
ROA not before: Thu 02 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4785
IP address blocks: 2a07:e340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:8e:7d:46:ae:c5:50:0f:76:d7:50:90:bb:b9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b867d483c07401205fc9222e492bc31beb3a5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:5f:53:6b:a7:a6:f6:af:5c:23:82:36:90:
16:4b:1b:8d:a3:74:4d:86:94:0a:d9:4c:57:ab:2e:
6b:96:98:3a:b5:e3:4b:93:c9:ba:a8:90:ab:c3:e0:
f3:18:4f:da:06:56:cb:2f:54:3c:54:57:25:03:10:
60:d5:98:c8:bb:86:c7:9d:00:b3:dc:e5:fe:f7:cb:
29:95:e6:25:ef:c8:4a:fd:69:61:94:fe:31:4b:a5:
ad:ea:c1:ea:44:3e:f4:b2:2e:cf:3d:62:91:97:86:
6f:8a:17:a8:ae:02:ff:2e:d2:d1:fb:21:57:f7:6c:
02:75:5f:4f:66:70:6c:a9:1b:02:8d:94:24:55:bf:
09:9f:cb:a0:d8:c9:49:bb:d1:4c:a7:4d:6f:e4:74:
7b:db:0d:50:a9:ef:1f:12:f2:b9:bc:f3:98:cf:dc:
d3:4d:9b:7f:91:33:d1:2f:63:8a:75:68:02:c1:f4:
43:44:db:5e:40:b4:bf:fc:b8:97:73:d6:ff:30:51:
62:ce:fd:6a:da:de:d5:00:7c:be:06:91:a9:63:db:
e7:35:14:a5:1a:ee:f9:be:f2:0d:60:1c:3a:96:45:
29:f5:e4:5b:36:d9:ac:a6:a6:91:e1:07:92:53:a4:
28:f2:f0:1f:a3:30:e5:a2:6d:54:de:e9:55:c0:df:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:7D:48:3C:07:40:12:05:FC:92:22:E4:92:BC:31:BE:B3:A5:C9
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/C4Z9SDwHQBIF_JIi5JK8Mb6zpck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e340::/32
Signature Algorithm: sha256WithRSAEncryption
73:6d:f8:da:ab:4d:18:f8:bd:c3:4f:9e:a0:30:17:56:d6:14:
98:f5:3c:26:df:c3:7b:fa:b1:01:96:b4:05:91:d7:e6:16:ad:
08:f6:55:ae:93:fb:de:2a:65:c8:94:74:a8:f4:ce:b0:32:6b:
b6:1a:0f:a2:6f:fc:99:59:85:7f:f5:5d:a9:7c:14:eb:76:55:
21:c3:af:d4:96:95:ab:36:bd:83:06:9a:cb:53:08:c6:41:c7:
bd:67:0b:5b:c1:52:7c:04:c5:3a:bf:00:64:e9:d4:9f:08:17:
ec:ad:2f:51:92:df:ab:f2:b7:69:71:c6:9b:ff:58:f2:16:23:
f8:c6:ac:2a:d0:3f:57:56:32:40:f9:bc:66:6d:3f:5b:da:06:
ff:4a:5d:ab:d8:04:3e:51:b0:94:3e:9f:0b:a0:90:36:4f:5c:
4b:97:3c:79:ca:86:b1:2c:7f:6e:63:12:fe:a8:aa:0a:e5:42:
2d:6b:73:81:d3:0c:c1:11:9d:40:19:89:a2:93:9b:2a:86:78:
e4:1e:f8:21:ab:11:21:b3:0f:45:26:74:8e:d9:34:90:f3:cc:
e9:4b:78:9c:18:51:35:02:b7:56:5d:37:52:b1:0e:86:1f:2d:
c4:3b:25:d9:a6:30:8f:23:cd:50:ec:77:da:ca:d6:34:85:ac:
1c:c0:b2:51
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQns459Rq7FUA9211CQu7kjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjUwMTAyMTU0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjg2N2Q0ODNjMDc0MDEyMDVmYzkyMjJlNDkyYmMzMWJlYjNhNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUBfU2unpvavXCOCNpAWSxuNo3RN
hpQK2UxXqy5rlpg6teNLk8m6qJCrw+DzGE/aBlbLL1Q8VFclAxBg1ZjIu4bHnQCz
3OX+98spleYl78hK/WlhlP4xS6Wt6sHqRD70si7PPWKRl4ZviheorgL/LtLR+yFX
92wCdV9PZnBsqRsCjZQkVb8Jn8ug2MlJu9FMp01v5HR72w1Qqe8fEvK5vPOYz9zT
TZt/kTPRL2OKdWgCwfRDRNteQLS//LiXc9b/MFFizv1q2t7VAHy+BpGpY9vnNRSl
Gu75vvINYBw6lkUp9eRbNtmspqaR4QeSU6Qo8vAfozDlom1U3ulVwN+hWQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFAuGfUg8B0ASBfySIuSSvDG+s6XJMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvQzRaOVNEd0hRQklGX0pJaTVKSzhNYjZ6cGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgfjQDAN
BgkqhkiG9w0BAQsFAAOCAQEAc2342qtNGPi9w0+eoDAXVtYUmPU8Jt/De/qxAZa0
BZHX5hatCPZVrpP73iplyJR0qPTOsDJrthoPom/8mVmFf/VdqXwU63ZVIcOv1JaV
qza9gwaay1MIxkHHvWcLW8FSfATFOr8AZOnUnwgX7K0vUZLfq/K3aXHGm/9Y8hYj
+MasKtA/V1YyQPm8Zm0/W9oG/0pdq9gEPlGwlD6fC6CQNk9cS5c8ecqGsSx/bmMS
/qiqCuVCLWtzgdMMwRGdQBmJopObKoZ45B74IasRIbMPRSZ0jtk0kPPM6Ut4nBhR
NQK3Vl03UrEOhh8txDsl2aYwjyPNUOx32srWNIWsHMCyUQ==
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:57:49 2025 by rpki-client