Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa
File: sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa (raw, json)
Hash identifier: CHsyF/lbu540pUgLNegSNWtBQrKxYJGXewEQkJ4NBLY=
Subject key identifier: B1:47:BF:AC:78:BC:66:2A:9D:79:1B:0B:43:C1:8A:78:CD:B7:86:F9
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 0194221FB3CE1CFB49F95C9C200196EB941F
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a12:1780::/29 maxlen: 29
2a12:8dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b3:ce:1c:fb:49:f9:5c:9c:20:01:96:eb:94:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b147bfac78bc662a9d791b0b43c18a78cdb786f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:36:e8:69:1e:09:0b:90:8e:0d:f2:ed:fe:
b2:8d:12:60:14:50:d2:eb:01:29:eb:5b:60:24:cb:
12:41:9c:58:56:a1:6e:63:df:21:7e:2f:b3:3f:56:
68:0b:4d:a0:00:42:4f:ce:09:a7:a7:9f:5b:09:54:
71:74:9c:8c:7e:0c:3a:53:31:3c:78:e9:58:03:7d:
e0:3b:10:73:b2:00:fa:40:20:9f:6b:d8:9d:60:60:
7c:fc:d5:6a:d9:91:fa:d1:7b:65:d9:e5:97:3d:57:
21:7d:36:5c:5d:d6:fd:27:59:58:56:c3:a9:9e:25:
9f:e0:6d:56:9f:07:68:71:fa:22:f8:51:5d:f8:63:
2d:73:30:42:de:1b:3b:c2:d2:22:fc:c0:cc:21:95:
fc:1b:40:87:00:8f:37:ee:01:be:84:1d:01:9a:fd:
a1:88:b9:b6:58:72:a3:bd:f1:6f:00:9e:ad:a2:7a:
6b:21:7a:f9:88:75:ad:05:32:aa:9d:ad:c4:90:78:
63:4f:35:53:dd:40:56:1a:b2:ea:21:47:ac:a1:44:
d6:21:36:42:66:9e:2e:56:25:0c:11:28:55:bb:e3:
34:78:a9:21:c4:c7:24:b0:a9:b4:a3:26:9c:a5:60:
ab:d1:39:c3:ea:69:fe:77:48:f6:22:13:8e:f7:70:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:BF:AC:78:BC:66:2A:9D:79:1B:0B:43:C1:8A:78:CD:B7:86:F9
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/sUe_rHi8ZiqdeRsLQ8GKeM23hvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1780::/29
2a12:8dc0::/29
Signature Algorithm: sha256WithRSAEncryption
20:81:9a:fd:85:23:1d:f2:c7:18:31:bf:9b:91:31:35:8e:8f:
73:90:0e:c7:c6:bf:e7:55:13:23:7d:c1:5a:cb:60:29:5f:fa:
c1:4e:8c:17:87:01:ba:b6:d2:07:88:e7:0a:e1:20:4c:fe:23:
a4:99:b9:f9:81:12:e8:57:e5:f5:6f:31:32:5f:b2:94:1c:cc:
4f:ed:e9:68:2b:6b:ef:d1:50:76:79:1e:40:0d:ca:ab:40:22:
8c:a0:a3:8b:db:a9:00:ce:52:cc:27:a8:2b:22:f0:eb:c3:4a:
3c:91:bf:1c:94:9e:fd:8d:51:5b:8c:f7:83:86:86:e0:5a:49:
22:58:b6:a9:9d:54:4b:1f:a1:39:32:1c:8b:a1:9d:0b:be:10:
61:5d:eb:5d:a4:3e:6a:fa:80:d1:a7:2c:b8:89:ca:2b:57:42:
76:8c:00:d5:d2:38:d7:0c:de:d4:00:2b:da:7e:b5:39:d1:3b:
75:22:64:13:0f:b5:90:6a:11:e1:bb:f7:93:c1:34:5c:92:26:
73:0e:28:f9:8b:3e:26:a4:1e:9a:d8:c9:13:f7:2c:fa:a4:3d:
d5:c9:1d:77:7c:cf:6c:ed:dd:fd:8e:e1:03:d7:11:10:f2:9d:
47:fe:3f:3e:be:f2:7d:f2:ac:e1:47:b5:88:de:3e:4f:86:e2:
94:b9:33:c6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQiH7POHPtJ+VycIAGW65QfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl
ZWE2NzAwHhcNMjUwMTAxMTM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQ3YmZhYzc4YmM2NjJhOWQ3OTFiMGI0M2MxOGE3OGNkYjc4NmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7A26GkeCQuQjg3y7f6yjRJgFFDS
6wEp61tgJMsSQZxYVqFuY98hfi+zP1ZoC02gAEJPzgmnp59bCVRxdJyMfgw6UzE8
eOlYA33gOxBzsgD6QCCfa9idYGB8/NVq2ZH60Xtl2eWXPVchfTZcXdb9J1lYVsOp
niWf4G1Wnwdocfoi+FFd+GMtczBC3hs7wtIi/MDMIZX8G0CHAI837gG+hB0Bmv2h
iLm2WHKjvfFvAJ6tonprIXr5iHWtBTKqna3EkHhjTzVT3UBWGrLqIUesoUTWITZC
Zp4uViUMEShVu+M0eKkhxMcksKm0oyacpWCr0TnD6mn+d0j2IhOO93DqDQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLFHv6x4vGYqnXkbC0PBinjNt4b5MB8GA1UdIwQY
MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt
NDQyNDFmZWMxYTlmLzEvc1VlX3JIaThaaXFkZVJzTFE4R0tlTTIzaHZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm
LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhIXgAMF
AyoSjcAwDQYJKoZIhvcNAQELBQADggEBACCBmv2FIx3yxxgxv5uRMTWOj3OQDsfG
v+dVEyN9wVrLYClf+sFOjBeHAbq20geI5wrhIEz+I6SZufmBEuhX5fVvMTJfspQc
zE/t6Wgra+/RUHZ5HkANyqtAIoygo4vbqQDOUswnqCsi8OvDSjyRvxyUnv2NUVuM
94OGhuBaSSJYtqmdVEsfoTkyHIuhnQu+EGFd612kPmr6gNGnLLiJyitXQnaMANXS
ONcM3tQAK9p+tTnRO3UiZBMPtZBqEeG795PBNFySJnMOKPmLPiakHprYyRP3LPqk
PdXJHXd8z2zt3f2O4QPXERDynUf+Pz6+8n3yrOFHtYjePk+G4pS5M8Y=
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:25:11 2025 by rpki-client