Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa
File: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (raw, json)
Hash identifier: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=
Subject key identifier: 26:C0:1A:28:E5:CF:03:3B:FC:73:AC:A7:7F:55:CD:45:5F:1B:0F:E5
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067BFB668753A16ABB745FF2175EA1E
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60188
IP address blocks: 2a06:5040:8::/48 maxlen: 48
2a06:5040:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bf:b6:68:75:3a:16:ab:b7:45:ff:21:75:ea:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26c01a28e5cf033bfc73aca77f55cd455f1b0fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:40:72:df:6b:66:7e:02:1c:d8:e3:c9:4e:
ac:fa:8c:7d:94:28:14:30:eb:fe:38:7a:5a:a8:08:
68:e3:1c:54:4e:c4:bf:bd:4c:f2:d2:51:1d:c5:00:
d0:93:cf:6a:87:07:3d:a0:db:ce:d0:12:e4:17:78:
6a:14:e4:8a:17:05:2b:45:6b:b9:08:d8:cd:f2:80:
04:46:e2:fd:3d:2b:36:ff:74:77:16:35:b4:1d:d3:
24:6c:7c:2c:cb:24:a4:c7:d4:60:64:fa:f7:28:c8:
d8:66:a9:d4:da:1c:6d:26:04:65:66:2b:d5:56:1a:
d9:af:70:54:ed:b6:f8:cc:c9:1a:80:ca:4e:d1:6b:
0e:21:5d:a6:85:fa:e9:56:45:3c:1a:90:63:c1:99:
2d:f7:44:6f:22:e4:b2:50:29:8c:28:39:b7:5c:92:
ac:d4:37:fd:30:30:57:91:d8:0f:ed:92:66:7e:75:
6b:74:0c:8a:1d:79:cb:5e:b7:7d:ea:10:f2:ce:0f:
f2:25:74:87:a9:27:b1:8d:82:b3:92:b8:7e:ae:48:
f8:18:12:ca:02:bc:c2:29:6d:52:d7:d8:2a:a7:05:
fb:f5:8b:44:a4:2e:66:18:2c:34:31:71:f6:bb:51:
5a:1c:39:18:41:d3:a5:73:b2:40:93:7b:d1:79:60:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C0:1A:28:E5:CF:03:3B:FC:73:AC:A7:7F:55:CD:45:5F:1B:0F:E5
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5040:8::/47
Signature Algorithm: sha256WithRSAEncryption
96:2a:80:7e:4b:9d:1e:7a:4d:58:c2:8a:19:ba:a8:4a:63:51:
b7:c6:04:99:6c:5f:0a:6b:88:83:fa:8e:44:29:b2:a0:2d:dd:
de:0d:a9:21:f3:74:3f:88:c2:2a:03:76:e5:d0:15:68:c3:e7:
0b:28:a0:a7:aa:ba:81:7f:c6:6c:6b:eb:1b:bc:c6:74:e1:e4:
18:7d:69:01:d2:0e:a1:8e:ec:50:d9:bb:58:ba:9f:66:43:ae:
94:7e:70:40:bc:53:01:b6:c1:55:90:c0:5a:84:7c:ff:56:e0:
ed:92:ae:71:1f:3c:c5:9a:ea:eb:5e:03:9b:74:e8:ee:b1:ff:
a5:74:98:ea:5f:53:5e:90:3c:cc:b5:c2:7d:b4:79:b2:4a:ba:
2c:2e:1f:0b:17:53:32:db:d4:f8:38:6e:1b:90:4b:ff:e7:93:
85:ce:d3:8c:b0:d0:bf:51:57:5c:36:2a:ed:ce:c6:ef:91:0b:
96:5e:19:8b:f3:14:40:33:fe:5c:19:63:06:fa:b6:f3:c1:ad:
cf:a5:7b:c7:e1:b0:3c:ef:a6:4d:fc:be:bc:4d:71:4e:96:e0:
91:de:e1:10:88:8e:7d:2a:f6:5f:c6:2d:ef:25:7d:4d:fb:21:
a8:8b:32:49:b9:74:b1:02:c5:e4:11:b8:46:0f:07:9a:74:d9:
c5:75:08:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQgZ7+2aHU6Fqu3Rf8hdeoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1
YTYyNDQwHhcNMjUwMTAxMDU0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmMwMWEyOGU1Y2YwMzNiZmM3M2FjYTc3ZjU1Y2Q0NTVmMWIwZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiZAct9rZn4CHNjjyU6s+ox9lCgU
MOv+OHpaqAho4xxUTsS/vUzy0lEdxQDQk89qhwc9oNvO0BLkF3hqFOSKFwUrRWu5
CNjN8oAERuL9PSs2/3R3FjW0HdMkbHwsyySkx9RgZPr3KMjYZqnU2hxtJgRlZivV
VhrZr3BU7bb4zMkagMpO0WsOIV2mhfrpVkU8GpBjwZkt90RvIuSyUCmMKDm3XJKs
1Df9MDBXkdgP7ZJmfnVrdAyKHXnLXrd96hDyzg/yJXSHqSexjYKzkrh+rkj4GBLK
ArzCKW1S19gqpwX79YtEpC5mGCw0MXH2u1FaHDkYQdOlc7JAk3vReWCIfwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCbAGijlzwM7/HOsp39VzUVfGw/lMB8GA1UdIwQY
MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt
MDg1MmNiMzUzMjkzLzEvSnNBYUtPWFBBenY4YzZ5bmYxWE5SVjhiRC1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz
LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgZQQAAI
MA0GCSqGSIb3DQEBCwUAA4IBAQCWKoB+S50eek1YwooZuqhKY1G3xgSZbF8Ka4iD
+o5EKbKgLd3eDakh83Q/iMIqA3bl0BVow+cLKKCnqrqBf8Zsa+sbvMZ04eQYfWkB
0g6hjuxQ2btYup9mQ66UfnBAvFMBtsFVkMBahHz/VuDtkq5xHzzFmurrXgObdOju
sf+ldJjqX1NekDzMtcJ9tHmySrosLh8LF1My29T4OG4bkEv/55OFztOMsNC/UVdc
NirtzsbvkQuWXhmL8xRAM/5cGWMG+rbzwa3PpXvH4bA876ZN/L68TXFOluCR3uEQ
iI59KvZfxi3vJX1N+yGoizJJuXSxAsXkEbhGDweadNnFdQh3
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:20 2025 by rpki-client