Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JbMd-pYta8-Tu5aU-vOcgRB5rpE.roa
File: JbMd-pYta8-Tu5aU-vOcgRB5rpE.roa (raw, json)
Hash identifier: d7poXVGF71mN/8MC582ragl7gAQZL+COrtbm4iiLj2U=
Subject key identifier: 25:B3:1D:FA:96:2D:6B:CF:93:BB:96:94:FA:F3:9C:81:10:79:AE:91
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196CD8951044AC3B60C98B89C57F618F79C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JbMd-pYta8-Tu5aU-vOcgRB5rpE.roa
Signing time: Wed 14 May 2025 06:44:10 +0000
ROA not before: Wed 14 May 2025 06:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22612
IP address blocks: 2a12:ac47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:89:51:04:4a:c3:b6:0c:98:b8:9c:57:f6:18:f7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 14 06:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25b31dfa962d6bcf93bb9694faf39c811079ae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:8d:bf:f1:ac:bd:cb:24:94:20:18:5b:2c:
3a:89:b9:21:eb:9c:4a:f1:4a:dc:50:e6:9b:9e:d6:
aa:25:54:9c:67:eb:86:00:a4:ad:de:76:27:de:0e:
3f:e5:7d:6c:be:7f:06:d0:45:d7:1b:2a:70:9d:39:
d0:f9:2f:b7:61:c9:bb:3e:33:79:a0:0d:f9:8f:04:
d0:79:6f:86:eb:5b:a7:7a:a8:5b:77:53:45:31:f0:
4b:74:6a:33:88:58:63:c0:75:79:8d:10:f0:c9:7e:
78:6e:b3:54:71:b3:20:fa:3f:7e:36:e9:f0:14:b2:
cc:f9:d5:d0:89:81:49:7b:bf:af:55:88:b8:f4:34:
13:8f:01:e1:6c:49:29:53:af:58:ae:eb:24:c1:86:
28:02:12:dd:c7:5b:42:10:94:bd:48:3d:9d:75:4d:
22:a5:8d:38:f7:7b:eb:b1:79:44:91:ee:2e:ce:6b:
0b:7d:f2:26:af:3c:e8:42:18:e7:f0:9d:35:09:d5:
54:34:54:49:af:46:30:89:ee:77:af:a6:be:9b:4f:
e3:92:ea:1c:07:90:ea:5a:9d:2e:fa:54:23:d4:19:
45:94:a5:29:e2:c9:a8:2c:b1:59:4f:a4:aa:5c:db:
44:2a:41:92:93:73:39:ee:05:93:c2:38:f9:8b:67:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B3:1D:FA:96:2D:6B:CF:93:BB:96:94:FA:F3:9C:81:10:79:AE:91
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JbMd-pYta8-Tu5aU-vOcgRB5rpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ac47::/32
Signature Algorithm: sha256WithRSAEncryption
4f:a9:03:ae:2d:47:0c:a7:19:1f:b7:8e:97:86:f4:85:be:d8:
88:7f:8d:2d:f5:a9:ef:ea:c1:b7:cc:17:b7:68:20:b3:3c:fb:
c5:85:53:cb:d7:33:8c:95:68:13:17:9a:a8:fe:be:87:5d:9c:
ed:95:42:43:0d:af:83:e6:e7:2a:7d:49:4e:fb:76:7e:d6:0b:
af:d0:51:43:89:ac:e5:81:ac:65:ba:e6:da:82:7e:3a:e3:e1:
46:6d:14:1f:1b:ae:03:a9:5b:07:cf:de:9b:1f:4f:39:57:30:
15:26:65:83:cc:8e:34:b7:e2:1d:5c:90:34:a8:aa:4a:e2:ac:
05:b7:0e:b2:e9:88:1f:83:b3:e7:33:3b:a0:2a:13:c9:40:bb:
44:20:fd:eb:d5:7b:10:dd:28:9c:57:3e:da:4b:bc:1e:bf:48:
0f:42:ca:38:97:c5:09:f0:a4:ad:cb:b2:b4:49:77:8f:11:17:
13:c9:7b:c2:b3:8c:2d:f3:2d:57:01:53:60:53:01:75:d0:ee:
6a:aa:00:1c:b5:7c:fa:c1:d0:9e:6b:a1:72:03:df:cc:83:b4:
4b:65:a3:31:5a:74:b7:96:9d:aa:5d:38:b4:6b:44:4a:10:69:
d9:c6:fa:c2:4b:0e:d1:92:8d:3c:f3:2d:4a:8d:49:a7:8a:1c:
64:a1:1b:db
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZbNiVEESsO2DJi4nFf2GPecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTE0MDY0NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWIzMWRmYTk2MmQ2YmNmOTNiYjk2OTRmYWYzOWM4MTEwNzlhZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJCNv/GsvcsklCAYWyw6ibkh65xK
8UrcUOabntaqJVScZ+uGAKSt3nYn3g4/5X1svn8G0EXXGypwnTnQ+S+3Ycm7PjN5
oA35jwTQeW+G61uneqhbd1NFMfBLdGoziFhjwHV5jRDwyX54brNUcbMg+j9+Nunw
FLLM+dXQiYFJe7+vVYi49DQTjwHhbEkpU69YruskwYYoAhLdx1tCEJS9SD2ddU0i
pY0493vrsXlEke4uzmsLffImrzzoQhjn8J01CdVUNFRJr0Ywie53r6a+m0/jkuoc
B5DqWp0u+lQj1BlFlKUp4smoLLFZT6SqXNtEKkGSk3M57gWTwjj5i2dgrwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCWzHfqWLWvPk7uWlPrznIEQea6RMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvSmJNZC1wWXRhOC1UdTVhVS12T2NnUkI1cnBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhKsRzAN
BgkqhkiG9w0BAQsFAAOCAQEAT6kDri1HDKcZH7eOl4b0hb7YiH+NLfWp7+rBt8wX
t2ggszz7xYVTy9czjJVoExeaqP6+h12c7ZVCQw2vg+bnKn1JTvt2ftYLr9BRQ4ms
5YGsZbrm2oJ+OuPhRm0UHxuuA6lbB8/emx9POVcwFSZlg8yONLfiHVyQNKiqSuKs
BbcOsumIH4Oz5zM7oCoTyUC7RCD969V7EN0onFc+2ku8Hr9ID0LKOJfFCfCkrcuy
tEl3jxEXE8l7wrOMLfMtVwFTYFMBddDuaqoAHLV8+sHQnmuhcgPfzIO0S2WjMVp0
t5adql04tGtEShBp2cb6wksO0ZKNPPMtSo1Jp4ocZKEb2w==
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:51:00 2025 by rpki-client