Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t8RjzELDUNfixt4MJnSppAOjjNo.roa
File: t8RjzELDUNfixt4MJnSppAOjjNo.roa (raw, json)
Hash identifier: yNTLRZbpLaR/pR7VhuTwIbGPUia+3lv2YF/alS9LteI=
Subject key identifier: B7:C4:63:CC:42:C3:50:D7:E2:C6:DE:0C:26:74:A9:A4:03:A3:8C:DA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194FFE8EDF3BA1ACDB950A79B4EE9F51934
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t8RjzELDUNfixt4MJnSppAOjjNo.roa
Signing time: Thu 13 Feb 2025 15:24:02 +0000
ROA not before: Thu 13 Feb 2025 15:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 2a0f:1640::/29 maxlen: 29
2a10:33c0::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:e8:ed:f3:ba:1a:cd:b9:50:a7:9b:4e:e9:f5:19:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 13 15:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7c463cc42c350d7e2c6de0c2674a9a403a38cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:06:7c:51:d2:f3:43:63:6f:14:02:55:09:
e2:a1:f5:cb:d7:53:42:9b:46:82:52:9c:6d:d7:56:
ee:48:4f:22:aa:f0:bd:27:6f:86:fd:62:b6:33:ac:
2e:84:a5:2f:42:d0:3f:98:62:53:8a:e5:60:28:4f:
fb:3b:39:67:63:1f:0f:c0:cb:51:d8:54:25:37:d4:
ac:98:3d:30:5e:69:2d:cb:04:1e:4f:c1:6e:95:fc:
c9:b3:a1:ff:ad:f0:ca:75:65:8c:71:b7:52:4a:49:
4c:e1:56:0d:3d:8a:33:45:3c:0a:57:a1:76:69:cb:
8d:9f:ff:78:e9:24:2b:28:74:72:2c:33:1d:ed:c7:
4b:01:f5:0d:4a:ad:67:c8:9f:48:37:3e:c4:fb:25:
30:df:60:ef:89:b5:23:5e:db:80:43:f5:18:77:52:
da:a3:1e:35:4d:9d:23:6d:43:2c:f9:b4:a8:54:9e:
8f:74:1f:d6:42:b6:14:a9:7e:46:0f:91:4a:f0:2d:
ca:78:5c:0e:67:92:00:24:2d:20:49:dc:1d:f9:35:
96:d8:9a:8d:6c:e6:52:53:ad:eb:54:8a:7f:6c:e0:
1b:c9:6f:c2:16:c8:23:3b:6a:f5:11:ab:8e:f8:20:
cb:2d:f6:f0:fc:c1:e9:5f:da:d8:f9:0c:9a:c5:d7:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C4:63:CC:42:C3:50:D7:E2:C6:DE:0C:26:74:A9:A4:03:A3:8C:DA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/t8RjzELDUNfixt4MJnSppAOjjNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1640::/29
2a10:33c0::/29
2a13:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:a2:fa:94:54:c4:46:cf:76:3c:dc:8d:52:7e:36:6e:c2:68:
84:5d:7a:b4:f2:9a:12:db:c7:ec:64:1d:0e:08:48:be:81:1a:
77:cf:d1:94:a4:3e:e8:73:a0:ae:30:ea:8a:63:65:33:3d:ca:
73:a2:42:16:d3:8a:27:b8:05:00:9c:95:a1:d0:32:2e:9c:6f:
4b:92:e7:08:84:fe:a4:82:c2:a3:cd:78:95:a3:fd:3a:9c:b2:
10:57:cc:90:72:58:ee:c9:75:1f:a2:1b:8d:ed:55:2c:da:5f:
86:7e:60:82:b4:86:d5:1b:a5:f4:e8:60:10:07:94:09:a6:c6:
00:30:f4:a2:16:f2:64:e6:6b:11:68:e9:df:28:b2:22:c4:74:
af:38:65:29:8f:00:6e:ce:b2:2e:54:60:24:19:d0:94:b6:40:
47:48:5d:58:20:f2:79:42:49:97:01:b9:33:b0:f7:01:ab:7d:
c8:a4:8d:6b:18:a7:fc:48:5d:80:47:f1:5e:5e:02:d6:71:e8:
49:79:d7:98:ac:1d:df:ce:84:7e:9c:12:e0:17:ab:e3:62:1b:
68:89:b7:39:0d:d6:ec:68:31:b6:fb:27:87:cc:f4:95:d4:6a:
58:fb:da:f0:10:35:6d:5b:ff:60:6e:ff:7b:d6:72:e3:d8:a9:
76:f0:80:45
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZT/6O3zuhrNuVCnm07p9Rk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMjEzMTUyNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2M0NjNjYzQyYzM1MGQ3ZTJjNmRlMGMyNjc0YTlhNDAzYTM4Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDQGfFHS80NjbxQCVQniofXL11NC
m0aCUpxt11buSE8iqvC9J2+G/WK2M6wuhKUvQtA/mGJTiuVgKE/7OzlnYx8PwMtR
2FQlN9SsmD0wXmktywQeT8FulfzJs6H/rfDKdWWMcbdSSklM4VYNPYozRTwKV6F2
acuNn/946SQrKHRyLDMd7cdLAfUNSq1nyJ9INz7E+yUw32DvibUjXtuAQ/UYd1La
ox41TZ0jbUMs+bSoVJ6PdB/WQrYUqX5GD5FK8C3KeFwOZ5IAJC0gSdwd+TWW2JqN
bOZSU63rVIp/bOAbyW/CFsgjO2r1EauO+CDLLfbw/MHpX9rY+QyaxdcIxwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLfEY8xCw1DX4sbeDCZ0qaQDo4zaMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvdDhSanpFTERVTmZpeHQ0TUpuU3BwQU9qak5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg8WQAMF
AyoQM8ADBQMqEy3AMA0GCSqGSIb3DQEBCwUAA4IBAQBLovqUVMRGz3Y83I1SfjZu
wmiEXXq08poS28fsZB0OCEi+gRp3z9GUpD7oc6CuMOqKY2UzPcpzokIW04onuAUA
nJWh0DIunG9LkucIhP6kgsKjzXiVo/06nLIQV8yQcljuyXUfohuN7VUs2l+GfmCC
tIbVG6X06GAQB5QJpsYAMPSiFvJk5msRaOnfKLIixHSvOGUpjwBuzrIuVGAkGdCU
tkBHSF1YIPJ5QkmXAbkzsPcBq33IpI1rGKf8SF2AR/FeXgLWcehJedeYrB3fzoR+
nBLgF6vjYhtoibc5DdbsaDG2+yeHzPSV1GpY+9rwEDVtW/9gbv971nLj2Kl28IBF
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:52 2025 by rpki-client