Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/KhlRzejfpvDxwhcPEcTkW8z6UJk.roa
File: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (raw, json)
Hash identifier: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=
Subject key identifier: 2A:19:51:CD:E8:DF:A6:F0:F1:C2:17:0F:11:C4:E4:5B:CC:FA:50:99
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 019423690612CEAEEC8C49FABDA6798AF71E
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/KhlRzejfpvDxwhcPEcTkW8z6UJk.roa
Signing time: Wed 01 Jan 2025 19:47:52 +0000
ROA not before: Wed 01 Jan 2025 19:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202039
IP address blocks: 2001:678:764::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:06:12:ce:ae:ec:8c:49:fa:bd:a6:79:8a:f7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Jan 1 19:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a1951cde8dfa6f0f1c2170f11c4e45bccfa5099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:e1:81:f0:65:a3:4f:fd:f2:c8:13:e8:06:
9a:35:e2:54:82:81:9d:53:ea:b0:8f:bf:07:22:40:
ae:60:e5:a3:8e:7f:a1:81:0b:c0:27:3d:24:5b:36:
a8:8e:c6:a8:c7:e7:0b:b0:ea:9c:84:5c:a8:fd:39:
a5:95:c6:59:50:7a:d2:5e:ab:c5:b9:d2:40:57:5a:
15:03:8c:19:fa:dd:28:d1:48:88:d0:56:95:3f:9e:
c0:20:96:5a:6d:35:48:ad:42:79:70:9f:2a:b1:4b:
d7:f5:7d:9b:4f:cc:dd:e8:27:22:9c:69:e0:fe:ab:
53:1a:58:c2:53:74:d9:3a:d7:ca:16:5d:9b:fa:5d:
a8:8b:90:2e:87:1b:a8:fc:b9:d7:c9:60:3c:50:04:
b0:0b:e1:4e:5c:40:5c:52:0f:55:40:2e:70:81:e6:
d2:57:ea:61:5b:e2:11:0e:8b:a9:38:57:d7:3f:76:
b0:d5:c7:f9:f8:c9:a3:f6:4e:a4:b8:5a:4f:7a:08:
14:c9:3f:20:47:c4:2e:bd:1e:a4:71:5d:2d:ea:92:
a0:47:98:4b:72:25:9d:2f:c2:a5:56:20:80:3c:9a:
32:21:53:cd:e8:70:cc:e9:b7:00:ab:dd:51:7b:ea:
78:fe:54:85:57:5a:af:5a:db:a0:24:63:5f:68:96:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:19:51:CD:E8:DF:A6:F0:F1:C2:17:0F:11:C4:E4:5B:CC:FA:50:99
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/KhlRzejfpvDxwhcPEcTkW8z6UJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:764::/48
Signature Algorithm: sha256WithRSAEncryption
54:87:a2:94:80:ec:32:a5:b6:82:30:d2:af:0c:3b:aa:e5:b0:
d1:58:ff:90:d1:72:8f:e3:c0:72:a7:e4:02:a1:ca:e5:3f:36:
21:d7:d2:85:ec:c9:fd:48:7c:4e:d4:8f:54:4a:8b:59:d5:dd:
0c:7a:30:b8:d1:59:dc:b9:7e:a1:51:af:c2:74:bb:f4:7e:27:
f6:c9:ad:49:67:d4:37:c6:9e:d8:cd:24:af:5f:da:f1:fb:a3:
2a:cf:97:e3:60:70:ef:56:64:1c:6a:1d:ff:cf:80:6a:1a:60:
0d:85:1a:f1:e6:77:1b:c2:9e:2e:f6:f3:54:f5:83:0c:59:cb:
95:17:37:cf:d6:1e:ac:99:0f:40:f2:bc:ed:2e:91:71:c8:8c:
8c:28:88:12:7b:2b:8d:26:d5:77:75:90:a2:0e:a4:f6:3c:f7:
b5:7d:0a:b9:69:c5:9a:a5:0b:c4:55:7a:76:94:c8:64:78:26:
61:b7:9f:97:8a:c7:c7:37:f6:87:fc:f5:c5:c1:18:b3:55:09:
e0:6a:0e:e1:9c:b5:23:f5:9c:03:79:be:1d:a9:66:85:44:1b:
e8:ef:ce:f4:32:99:69:48:8f:68:ab:fe:9a:34:a4:73:eb:90:
a3:9b:51:88:f4:aa:36:46:91:5b:2e:e0:52:91:d8:31:5c:5a:
bc:0d:54:34
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQjaQYSzq7sjEn6vaZ5ivceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWIyYjUxZTM3NDhjMjUyNzQwMmU2ODYwMWE4ODkxMjg4
M2EwNTgwHhcNMjUwMTAxMTk0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTE5NTFjZGU4ZGZhNmYwZjFjMjE3MGYxMWM0ZTQ1YmNjZmE1MDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBfhgfBlo0/98sgT6AaaNeJUgoGd
U+qwj78HIkCuYOWjjn+hgQvAJz0kWzaojsaox+cLsOqchFyo/TmllcZZUHrSXqvF
udJAV1oVA4wZ+t0o0UiI0FaVP57AIJZabTVIrUJ5cJ8qsUvX9X2bT8zd6CcinGng
/qtTGljCU3TZOtfKFl2b+l2oi5Auhxuo/LnXyWA8UASwC+FOXEBcUg9VQC5wgebS
V+phW+IRDoupOFfXP3aw1cf5+Mmj9k6kuFpPeggUyT8gR8QuvR6kcV0t6pKgR5hL
ciWdL8KlViCAPJoyIVPN6HDM6bcAq91Re+p4/lSFV1qvWtugJGNfaJZGnQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCoZUc3o36bw8cIXDxHE5FvM+lCZMB8GA1UdIwQY
MBaAFDLrK1HjdIwlJ0AuaGAaiJEog6BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDkt
NmFjMWFmZjM2YzA3LzEvS2hsUnplamZwdkR4d2hjUEVjVGtXOHo2VUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDktNmFjMWFmZjM2YzA3
LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAdk
MA0GCSqGSIb3DQEBCwUAA4IBAQBUh6KUgOwypbaCMNKvDDuq5bDRWP+Q0XKP48By
p+QCocrlPzYh19KF7Mn9SHxO1I9USotZ1d0MejC40VncuX6hUa/CdLv0fif2ya1J
Z9Q3xp7YzSSvX9rx+6Mqz5fjYHDvVmQcah3/z4BqGmANhRrx5ncbwp4u9vNU9YMM
WcuVFzfP1h6smQ9A8rztLpFxyIyMKIgSeyuNJtV3dZCiDqT2PPe1fQq5acWapQvE
VXp2lMhkeCZht5+XisfHN/aH/PXFwRizVQngag7hnLUj9ZwDeb4dqWaFRBvo7870
MplpSI9oq/6aNKRz65Cjm1GI9Ko2RpFbLuBSkdgxXFq8DVQ0
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:32:58 2025 by rpki-client