Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa
File: KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa (raw, json)
Hash identifier: CehIyyDTNH2XPwU/dxmXRsBi9Cc/OKe00kUQqRs/maU=
Subject key identifier: 28:EA:B2:A7:C0:E1:85:90:F7:24:7E:8A:D2:3D:73:97:A6:90:28:19
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 01944C52239F041CE6A183EF3E2A7F00E37D
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa
Signing time: Thu 09 Jan 2025 18:27:19 +0000
ROA not before: Thu 09 Jan 2025 18:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213622
IP address blocks: 2a14:9d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:52:23:9f:04:1c:e6:a1:83:ef:3e:2a:7f:00:e3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Jan 9 18:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28eab2a7c0e18590f7247e8ad23d7397a6902819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:3a:df:41:1b:9d:8b:a9:14:46:57:85:79:
f5:ea:9b:ed:d8:0f:95:34:bb:e9:cc:5b:48:7e:e5:
f2:f2:00:c3:30:bb:4d:e4:30:b8:2f:e8:cd:1b:f7:
a3:7e:98:ac:c9:92:d8:f7:4b:8e:86:83:db:09:1d:
bc:48:9d:58:21:a0:1c:a6:3f:ee:ed:2d:b3:54:ec:
18:b7:7f:b4:85:9f:5f:a6:dc:1a:2f:6f:9b:29:c7:
3c:e5:3c:22:f6:26:df:e6:2a:6f:5c:ff:80:20:29:
b0:1b:8d:d1:b0:52:94:9a:6d:86:c8:38:6e:e0:4e:
e4:76:e6:75:a7:1c:0e:75:9f:32:2a:b6:f1:fc:90:
0a:ee:70:52:4b:e7:dc:3b:be:fe:04:db:29:84:e6:
4c:43:03:d2:2a:24:12:e4:38:81:ed:20:db:5a:73:
cd:7b:ab:9c:11:90:9d:ad:7a:e9:36:32:c4:00:09:
7e:24:e1:0e:a0:e8:7e:a4:e7:65:ef:3b:f0:a3:16:
8d:00:0d:69:a6:d7:47:44:97:38:f7:8a:74:c7:a7:
6c:95:75:63:1d:de:b1:88:c9:f5:8d:21:95:4d:2c:
58:21:28:fc:a6:9e:d5:ee:c3:e8:e0:c7:89:fe:85:
a3:6a:09:fc:2d:70:6c:01:08:79:62:f5:24:c8:be:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EA:B2:A7:C0:E1:85:90:F7:24:7E:8A:D2:3D:73:97:A6:90:28:19
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/KOqyp8DhhZD3JH6K0j1zl6aQKBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
44:90:b3:9d:1a:ef:64:b0:a3:bd:f5:5e:de:e5:f4:9e:68:d1:
c9:79:8e:da:47:6b:3d:ef:19:32:7e:a9:b8:08:7e:38:f2:4a:
4d:0b:c5:3e:a8:2e:74:11:88:35:d9:32:db:e0:c8:58:99:40:
f7:7c:bd:b9:f6:d8:2e:26:2d:d6:24:a6:a6:5f:0c:ad:51:6f:
f5:22:d9:c2:ea:6e:cc:9f:59:03:3f:31:0f:72:bc:28:e7:b7:
2f:bc:c9:fc:09:0c:28:90:78:26:c1:91:09:af:1c:64:ad:50:
17:0b:0e:1c:11:f9:5f:03:8e:d3:73:5e:c0:f6:cc:ac:13:f3:
1c:e6:9b:a6:3e:3b:cf:fe:54:88:f4:7b:07:3e:1e:5a:04:7c:
76:09:42:41:fb:7c:d5:72:7b:e9:1c:68:a9:80:e5:9f:0f:fe:
ee:58:56:cb:13:29:26:d4:dc:f2:8c:c0:e0:90:a3:34:5e:5c:
7f:81:ec:18:b2:e1:2d:fc:23:c0:14:a1:c6:06:3f:06:f6:38:
96:16:55:63:3c:75:0d:3a:ce:1e:86:b9:69:a8:24:0b:f1:0e:
69:72:7f:fc:0f:04:04:d5:6e:c9:19:32:a3:5b:be:6c:5b:c0:
08:38:50:48:48:73:67:1d:96:7c:b1:31:1d:3e:19:fd:2e:07:
88:38:d0:e5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZRMUiOfBBzmoYPvPip/AON9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjY1YThiYWViYTRmZjYyMTQ5MmViZWU2ZmMxZTg4YWRi
MjFiMDMwHhcNMjUwMTA5MTgyNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGVhYjJhN2MwZTE4NTkwZjcyNDdlOGFkMjNkNzM5N2E2OTAyODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiE630EbnYupFEZXhXn16pvt2A+V
NLvpzFtIfuXy8gDDMLtN5DC4L+jNG/ejfpisyZLY90uOhoPbCR28SJ1YIaAcpj/u
7S2zVOwYt3+0hZ9fptwaL2+bKcc85Twi9ibf5ipvXP+AICmwG43RsFKUmm2GyDhu
4E7kduZ1pxwOdZ8yKrbx/JAK7nBSS+fcO77+BNsphOZMQwPSKiQS5DiB7SDbWnPN
e6ucEZCdrXrpNjLEAAl+JOEOoOh+pOdl7zvwoxaNAA1pptdHRJc494p0x6dslXVj
Hd6xiMn1jSGVTSxYISj8pp7V7sPo4MeJ/oWjagn8LXBsAQh5YvUkyL5p1QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCjqsqfA4YWQ9yR+itI9c5emkCgZMB8GA1UdIwQY
MBaAFDO2Wouuuk/2IUkuvub8HoitshsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0Njkt
ZDU0NzE4NTUxMmRlLzEvS09xeXA4RGhoWkQzSkg2SzBqMXpsNmFRS0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hYWJjNmMtMDQ1Ni00OTM1LWE0NjktZDU0NzE4NTUxMmRl
LzEvTTdaYWk2NjZUX1loU1M2LTV2d2VpSzJ5R3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhSdADAN
BgkqhkiG9w0BAQsFAAOCAQEARJCznRrvZLCjvfVe3uX0nmjRyXmO2kdrPe8ZMn6p
uAh+OPJKTQvFPqgudBGINdky2+DIWJlA93y9ufbYLiYt1iSmpl8MrVFv9SLZwupu
zJ9ZAz8xD3K8KOe3L7zJ/AkMKJB4JsGRCa8cZK1QFwsOHBH5XwOO03NewPbMrBPz
HOabpj47z/5UiPR7Bz4eWgR8dglCQft81XJ76RxoqYDlnw/+7lhWyxMpJtTc8ozA
4JCjNF5cf4HsGLLhLfwjwBShxgY/BvY4lhZVYzx1DTrOHoa5aagkC/EOaXJ//A8E
BNVuyRkyo1u+bFvACDhQSEhzZx2WfLExHT4Z/S4HiDjQ5Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:53:49 2025 by rpki-client