Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_X4xd1Q30ZWzt-lph0b6j7vMA_k.roa
File: _X4xd1Q30ZWzt-lph0b6j7vMA_k.roa (raw, json)
Hash identifier: uHtxYdqdcHIDWS2VWJdQOofw/WLe+SAxyZ6U6AhTufo=
Subject key identifier: FD:7E:31:77:54:37:D1:95:B3:B7:E9:69:87:46:FA:8F:BB:CC:03:F9
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F155501C8321C261DB1873A40D008
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_X4xd1Q30ZWzt-lph0b6j7vMA_k.roa
Signing time: Thu 02 Jan 2025 05:48:41 +0000
ROA not before: Thu 02 Jan 2025 05:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1967
IP address blocks: 2001:a98:30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:15:55:01:c8:32:1c:26:1d:b1:87:3a:40:d0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd7e31775437d195b3b7e9698746fa8fbbcc03f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:22:de:19:99:e6:2b:c6:79:d9:b6:43:7c:
dd:5e:22:69:6a:a1:73:f8:14:0f:a9:e5:02:e2:fc:
a6:d0:0a:f3:5a:83:ae:13:f0:50:1e:50:f2:59:93:
69:be:c4:88:4b:ea:5e:eb:6b:54:78:41:40:cc:23:
4c:2b:2f:d0:1b:69:ac:02:08:84:50:d0:70:9a:16:
8c:3f:56:0b:88:e3:c3:3a:45:d3:41:50:15:2c:ec:
09:4b:7a:97:58:97:a8:f3:00:0b:82:28:3a:b6:80:
d5:7d:75:b2:6f:4a:1c:d4:07:52:19:fe:b9:1e:bf:
c0:07:5d:19:6c:5b:d4:a6:16:9f:26:f5:0b:24:3d:
d4:97:72:c4:72:45:85:5a:2f:29:81:e1:df:01:b8:
dc:0b:a5:01:cb:f4:c4:4c:d9:03:96:dc:5b:b4:27:
18:83:ef:49:69:26:5f:c7:cc:13:93:4b:0f:90:9b:
96:72:ce:0e:23:14:36:c6:aa:77:5a:fd:ce:25:db:
e2:0c:a1:26:ee:a7:65:82:3a:f1:eb:f4:0e:e2:9f:
06:e6:e1:c5:c3:ee:93:0e:05:99:62:a6:63:67:3e:
5b:74:99:f8:52:0f:a7:03:40:01:27:8f:2c:09:0f:
9e:dd:a7:38:68:60:49:d9:c9:56:24:85:8e:6e:45:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7E:31:77:54:37:D1:95:B3:B7:E9:69:87:46:FA:8F:BB:CC:03:F9
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_X4xd1Q30ZWzt-lph0b6j7vMA_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:a98:30::/48
Signature Algorithm: sha256WithRSAEncryption
22:de:e5:60:eb:37:04:a3:d2:90:ab:fe:a3:31:a7:fa:2d:44:
18:01:7e:6d:3b:36:af:da:6e:37:7f:db:f6:4d:c2:87:f0:b2:
c9:26:99:92:b5:46:3e:a3:8d:03:a6:2d:c8:4e:52:63:e1:50:
9a:c5:58:bf:02:25:da:3f:b4:44:a9:00:c2:ed:fd:87:b1:ab:
7e:d3:69:b7:88:23:77:47:6c:77:8c:ba:ff:b3:bd:10:8e:08:
a6:87:e9:b0:a1:4f:24:ca:f9:76:4b:6b:9c:8b:00:38:fa:69:
98:42:90:5c:98:c7:6b:16:ce:97:9e:9c:ec:b0:f9:5f:f3:5a:
41:50:7e:08:c1:8c:ca:7f:66:0c:bb:7c:be:22:91:a7:1a:55:
94:41:a1:49:57:d9:47:b6:85:19:3f:a7:e9:e0:e9:9a:30:38:
ca:53:a0:87:a4:4d:b8:6b:a1:03:39:ce:82:49:2a:1d:ae:d7:
5b:d1:ea:9e:ee:4a:30:65:26:b2:27:66:2e:2f:68:da:2c:9f:
2d:b9:91:5f:a4:7a:d5:40:9e:85:77:8e:a2:87:bf:82:9f:93:
b3:16:54:78:84:26:1c:1d:3f:9a:9c:72:87:77:69:0f:34:5b:
d7:ac:ae:ea:92:a1:32:06:55:73:51:4c:99:e1:61:6a:72:88:
62:55:e3:e4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQljxVVAcgyHCYdsYc6QNAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjUwMTAyMDU0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDdlMzE3NzU0MzdkMTk1YjNiN2U5Njk4NzQ2ZmE4ZmJiY2MwM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMYi3hmZ5ivGedm2Q3zdXiJpaqFz
+BQPqeUC4vym0ArzWoOuE/BQHlDyWZNpvsSIS+pe62tUeEFAzCNMKy/QG2msAgiE
UNBwmhaMP1YLiOPDOkXTQVAVLOwJS3qXWJeo8wALgig6toDVfXWyb0oc1AdSGf65
Hr/AB10ZbFvUphafJvULJD3Ul3LEckWFWi8pgeHfAbjcC6UBy/TETNkDltxbtCcY
g+9JaSZfx8wTk0sPkJuWcs4OIxQ2xqp3Wv3OJdviDKEm7qdlgjrx6/QO4p8G5uHF
w+6TDgWZYqZjZz5bdJn4Ug+nA0ABJ48sCQ+e3ac4aGBJ2clWJIWObkWtZwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP1+MXdUN9GVs7fpaYdG+o+7zAP5MB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEvX1g0eGQxUTMwWld6dC1scGgwYjZqN3ZNQV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEKmAAw
MA0GCSqGSIb3DQEBCwUAA4IBAQAi3uVg6zcEo9KQq/6jMaf6LUQYAX5tOzav2m43
f9v2TcKH8LLJJpmStUY+o40Dpi3ITlJj4VCaxVi/AiXaP7REqQDC7f2Hsat+02m3
iCN3R2x3jLr/s70Qjgimh+mwoU8kyvl2S2uciwA4+mmYQpBcmMdrFs6XnpzssPlf
81pBUH4IwYzKf2YMu3y+IpGnGlWUQaFJV9lHtoUZP6fp4OmaMDjKU6CHpE24a6ED
Oc6CSSodrtdb0eqe7kowZSayJ2YuL2jaLJ8tuZFfpHrVQJ6Fd46ih7+Cn5OzFlR4
hCYcHT+anHKHd2kPNFvXrK7qkqEyBlVzUUyZ4WFqcohiVePk
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:11:24 2025 by rpki-client