Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ClXoHg7nfVPROCCJXb7cD-Qq7Cw.roa
File: ClXoHg7nfVPROCCJXb7cD-Qq7Cw.roa (raw, json)
Hash identifier: DDXlHnvHePkz9jBYBjSbYLxUIqMMrw9I/f42NVo8MrQ=
Subject key identifier: 0A:55:E8:1E:0E:E7:7D:53:D1:38:20:89:5D:BE:DC:0F:E4:2A:EC:2C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196CA340B0DF74B55F271628CC3DC6D8309
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ClXoHg7nfVPROCCJXb7cD-Qq7Cw.roa
Signing time: Tue 13 May 2025 15:12:10 +0000
ROA not before: Tue 13 May 2025 15:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211001
IP address blocks: 2a0a:2d00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:34:0b:0d:f7:4b:55:f2:71:62:8c:c3:dc:6d:83:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 13 15:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a55e81e0ee77d53d13820895dbedc0fe42aec2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:f6:d8:98:95:e7:8d:5f:1c:bd:73:0c:f1:
db:dc:af:cc:92:6b:c8:bb:e6:15:66:0d:1f:ee:c6:
fb:a0:6e:da:6a:fc:b0:8e:42:09:04:bd:53:c6:a9:
fa:54:73:dc:c7:d2:ac:9c:4a:50:00:08:0b:48:ab:
29:03:66:d6:1c:1a:b5:17:a9:a7:c7:c8:07:52:51:
08:49:6a:43:8d:de:ed:15:d8:cb:43:61:2b:e7:be:
69:a5:1f:d7:0b:8c:80:a3:ac:0a:a9:21:a4:c1:e5:
69:6a:f9:a2:1e:14:88:6b:9a:10:cc:2c:ea:39:3b:
a1:b6:4b:3a:ff:65:99:1d:dd:53:8a:21:c1:38:48:
92:65:60:7b:30:69:56:f5:a2:d8:88:70:28:5b:a5:
f7:64:be:1c:a4:16:69:db:95:47:96:61:bc:75:9f:
77:06:5e:d2:3c:e5:3e:9d:cd:00:31:57:d2:0f:31:
86:fc:20:87:08:f5:5e:03:52:91:c2:d9:83:18:1d:
55:87:33:cb:e4:de:bd:7b:48:d3:fb:fc:91:45:3a:
b7:59:43:a6:65:d0:27:5d:c2:2d:55:9f:a9:06:ea:
22:fc:35:66:51:86:e4:80:59:38:ae:32:21:29:fc:
f1:f8:8d:cc:8c:80:29:18:b5:b0:45:32:89:be:c0:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:55:E8:1E:0E:E7:7D:53:D1:38:20:89:5D:BE:DC:0F:E4:2A:EC:2C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ClXoHg7nfVPROCCJXb7cD-Qq7Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d00:3::/48
Signature Algorithm: sha256WithRSAEncryption
5a:9e:dc:3e:b2:8e:da:35:70:31:9f:30:90:b8:07:c5:44:50:
e5:d7:f0:88:5f:6a:99:01:d7:7c:86:d3:3d:e1:5a:c0:ab:86:
16:68:b6:96:2a:eb:09:a4:60:1b:6e:52:14:af:4b:f7:22:f8:
54:0d:a3:91:e1:8c:3b:b8:b4:dd:6e:c7:7f:f5:7c:ad:ab:7d:
34:19:81:e8:d9:50:65:80:1e:03:0b:4c:5f:1e:bf:6e:aa:ec:
f8:5c:f6:27:68:9a:79:13:56:8b:e7:33:ad:2b:02:d2:fd:e1:
8c:25:d9:86:ca:64:da:75:ba:9d:6c:f4:47:71:1b:48:1e:e4:
b4:61:83:0d:00:1f:6b:83:66:07:c1:9d:8e:64:e1:32:e2:cf:
f0:76:28:06:84:5f:94:bd:02:bd:2c:0f:7c:c5:ab:92:40:f0:
69:0b:44:ab:f6:1f:69:57:46:be:cc:e8:25:4d:56:42:33:e6:
22:6d:aa:6d:d9:d5:13:28:1d:0c:da:f8:2b:e5:56:85:77:05:
73:13:5e:89:cb:a7:c8:f3:07:a6:f5:8a:87:f4:65:87:51:89:
c3:60:86:b2:19:83:07:be:79:fa:e5:0b:b0:2a:3e:30:61:ec:
46:67:bb:3b:d6:a2:32:6c:73:36:e5:dc:e6:81:d9:d9:78:30:
ab:4b:d8:b7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZbKNAsN90tV8nFijMPcbYMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTEzMTUxMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTU1ZTgxZTBlZTc3ZDUzZDEzODIwODk1ZGJlZGMwZmU0MmFlYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIn22JiV541fHL1zDPHb3K/MkmvI
u+YVZg0f7sb7oG7aavywjkIJBL1Txqn6VHPcx9KsnEpQAAgLSKspA2bWHBq1F6mn
x8gHUlEISWpDjd7tFdjLQ2Er575ppR/XC4yAo6wKqSGkweVpavmiHhSIa5oQzCzq
OTuhtks6/2WZHd1TiiHBOEiSZWB7MGlW9aLYiHAoW6X3ZL4cpBZp25VHlmG8dZ93
Bl7SPOU+nc0AMVfSDzGG/CCHCPVeA1KRwtmDGB1VhzPL5N69e0jT+/yRRTq3WUOm
ZdAnXcItVZ+pBuoi/DVmUYbkgFk4rjIhKfzx+I3MjIApGLWwRTKJvsB5BwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFApV6B4O531T0TggiV2+3A/kKuwsMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvQ2xYb0hnN25mVlBST0NDSlhiN2NELVFxN0N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgotAAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQBantw+so7aNXAxnzCQuAfFRFDl1/CIX2qZAdd8
htM94VrAq4YWaLaWKusJpGAbblIUr0v3IvhUDaOR4Yw7uLTdbsd/9Xytq300GYHo
2VBlgB4DC0xfHr9uquz4XPYnaJp5E1aL5zOtKwLS/eGMJdmGymTadbqdbPRHcRtI
HuS0YYMNAB9rg2YHwZ2OZOEy4s/wdigGhF+UvQK9LA98xauSQPBpC0Sr9h9pV0a+
zOglTVZCM+Yibapt2dUTKB0M2vgr5VaFdwVzE16Jy6fI8wem9YqH9GWHUYnDYIay
GYMHvnn65QuwKj4wYexGZ7s71qIybHM25dzmgdnZeDCrS9i3
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:18 2025 by rpki-client