Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/TLlPGcDbhgt4UVQZI0BDrUEbE-s.roa
File: TLlPGcDbhgt4UVQZI0BDrUEbE-s.roa (raw, json)
Hash identifier: 2zLKJ3umZ3JW8k4DM0pjot15c8VbxAJ5HTL+V7YT3A0=
Subject key identifier: 4C:B9:4F:19:C0:DB:86:0B:78:51:54:19:23:40:43:AD:41:1B:13:EB
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 0195E3EDD6AF09A10686BBAEF6DA03E3DCCA
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/TLlPGcDbhgt4UVQZI0BDrUEbE-s.roa
Signing time: Sat 29 Mar 2025 22:02:49 +0000
ROA not before: Sat 29 Mar 2025 22:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214078
IP address blocks: 2001:30c0:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e3:ed:d6:af:09:a1:06:86:bb:ae:f6:da:03:e3:dc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Mar 29 22:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cb94f19c0db860b78515419234043ad411b13eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:76:47:60:97:d0:9c:f1:dc:9c:bf:d6:8a:
ce:97:a1:29:f1:1a:3e:d0:39:e8:fd:3c:d1:07:6a:
bd:fa:09:6b:7e:5a:cc:64:33:39:f1:e8:a4:db:3d:
52:f6:29:a9:73:8c:8c:fc:70:33:be:7a:b1:e5:8b:
4d:45:50:f2:13:92:4f:ef:11:39:4b:72:d7:e8:62:
ec:2d:86:06:48:e2:f1:56:65:83:cc:0b:41:57:bb:
77:a8:30:c4:4c:ff:c2:c7:6b:fc:3d:03:9e:04:68:
cd:b8:14:f7:13:f3:52:26:aa:7a:10:fb:9b:e4:9b:
fe:fd:16:76:ea:57:1b:ad:d6:87:64:62:55:95:62:
a7:3f:97:b4:94:1c:47:f7:b4:24:9b:64:95:cf:68:
91:c2:63:18:2d:60:33:94:41:11:d8:9f:ea:77:d6:
51:38:76:5c:98:33:38:0d:a8:df:22:1b:23:98:d2:
4f:11:b2:27:31:d1:94:e9:ba:56:8c:f9:1c:8e:87:
0b:ae:18:60:2c:88:dd:86:b6:a5:5f:d8:fd:13:89:
98:e0:c1:33:e0:0a:27:87:d1:63:30:63:5e:4e:34:
ca:52:a1:67:61:ea:a1:c7:c4:5e:62:0f:ec:b5:c4:
93:3d:9b:f8:6f:f8:2f:ad:04:1e:b3:b2:ce:b3:0e:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B9:4F:19:C0:DB:86:0B:78:51:54:19:23:40:43:AD:41:1B:13:EB
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/TLlPGcDbhgt4UVQZI0BDrUEbE-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
71:16:6d:28:86:f8:73:86:f1:31:57:65:b5:89:bf:03:3b:43:
13:8c:30:af:7e:1b:d9:fb:20:0f:61:5e:68:ed:25:b6:33:c9:
02:c9:f8:fe:af:59:2f:1d:29:fa:d9:53:ee:54:d4:e3:47:76:
d0:5d:81:11:65:3f:a9:11:18:e6:9b:4d:17:44:c6:ad:2b:1c:
17:7c:48:be:e8:51:7f:c7:5c:ca:98:63:09:e8:05:ef:d5:3b:
75:c3:8c:eb:aa:d0:6a:5d:78:22:75:09:82:d5:ec:1c:61:03:
e1:3c:6e:5f:88:1d:14:74:a0:d8:7e:7b:9e:73:63:4b:c4:3f:
e0:ac:32:5c:c9:7b:a9:b9:38:9b:eb:39:39:3d:e0:92:d3:df:
36:50:89:e3:f7:57:eb:00:13:86:a9:64:b6:cb:4f:26:e8:cf:
bc:71:d5:e1:bf:b9:71:58:1b:a5:35:56:22:4c:d7:14:89:d8:
32:81:d4:39:d5:5b:60:a1:ac:2c:e1:b2:d4:cc:30:e7:83:02:
cb:10:c2:5c:93:b2:70:18:98:c5:5d:07:f2:3d:08:83:37:19:
11:31:00:61:e3:d0:7a:d5:62:e0:ff:9a:a7:28:a5:32:bf:a6:
2c:55:9b:ad:17:04:68:12:a4:f0:d0:5e:c8:ad:6b:6a:3b:2a:
c6:7e:8e:9f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZXj7davCaEGhruu9toD49zKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi
YjllODEwHhcNMjUwMzI5MjIwMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2I5NGYxOWMwZGI4NjBiNzg1MTU0MTkyMzQwNDNhZDQxMWIxM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NR2R2CX0Jzx3Jy/1orOl6Ep8Ro+
0Dno/TzRB2q9+glrflrMZDM58eik2z1S9impc4yM/HAzvnqx5YtNRVDyE5JP7xE5
S3LX6GLsLYYGSOLxVmWDzAtBV7t3qDDETP/Cx2v8PQOeBGjNuBT3E/NSJqp6EPub
5Jv+/RZ26lcbrdaHZGJVlWKnP5e0lBxH97Qkm2SVz2iRwmMYLWAzlEER2J/qd9ZR
OHZcmDM4DajfIhsjmNJPEbInMdGU6bpWjPkcjocLrhhgLIjdhralX9j9E4mY4MEz
4Aonh9FjMGNeTjTKUqFnYeqhx8ReYg/stcSTPZv4b/gvrQQes7LOsw6FRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEy5TxnA24YLeFFUGSNAQ61BGxPrMB8GA1UdIwQY
MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct
YjM0ZDY0OWNmYjdiLzEvVExsUEdjRGJoZ3Q0VVZRWkkwQkRyVUViRS1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi
LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEwwP/+
MA0GCSqGSIb3DQEBCwUAA4IBAQBxFm0ohvhzhvExV2W1ib8DO0MTjDCvfhvZ+yAP
YV5o7SW2M8kCyfj+r1kvHSn62VPuVNTjR3bQXYERZT+pERjmm00XRMatKxwXfEi+
6FF/x1zKmGMJ6AXv1Tt1w4zrqtBqXXgidQmC1ewcYQPhPG5fiB0UdKDYfnuec2NL
xD/grDJcyXupuTib6zk5PeCS0982UInj91frABOGqWS2y08m6M+8cdXhv7lxWBul
NVYiTNcUidgygdQ51Vtgoaws4bLUzDDngwLLEMJck7JwGJjFXQfyPQiDNxkRMQBh
49B61WLg/5qnKKUyv6YsVZutFwRoEqTw0F7IrWtqOyrGfo6f
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:34 2025 by rpki-client