Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6rut5AIXpF56mK7EUYiC8pAtgNg.roa
File: 6rut5AIXpF56mK7EUYiC8pAtgNg.roa (raw, json)
Hash identifier: 53RDjl4Tv1+kwbreFmJG0EymwiVrgvoyd9obDI+HKgs=
Subject key identifier: EA:BB:AD:E4:02:17:A4:5E:7A:98:AE:C4:51:88:82:F2:90:2D:80:D8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D70FDC3C4892661E68C2B817DBC8A9
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6rut5AIXpF56mK7EUYiC8pAtgNg.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50158
IP address blocks: 2a0e:d603::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0f:dc:3c:48:92:66:1e:68:c2:b8:17:db:c8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eabbade40217a45e7a98aec4518882f2902d80d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:83:9c:be:2f:ab:c4:7d:c9:76:4f:34:c8:
5b:c4:35:1d:cc:ff:f3:ac:5a:f5:de:7c:e7:d8:5d:
b7:cb:f9:32:0e:7d:47:08:b8:d5:76:da:27:84:7b:
76:86:e9:8d:30:bc:b0:54:ff:20:4f:35:79:11:b6:
86:4a:9c:eb:76:48:4d:03:20:2c:83:bf:04:b4:56:
9b:2a:03:7e:db:dd:d9:e8:d2:a8:6a:f1:1e:a3:77:
b6:ff:43:66:b4:91:03:6e:97:f5:f4:99:ae:b8:06:
21:ad:96:d9:d9:e8:5f:ca:e3:1a:dc:b3:6d:13:75:
95:cd:2c:47:ff:2a:bc:6d:b0:81:87:c9:cc:9b:fa:
1d:33:76:38:69:5f:52:95:26:78:34:f1:75:b0:e3:
71:3d:36:92:fd:a5:e8:37:cb:2f:8d:4c:f5:b5:0d:
e0:68:5e:3e:c7:c6:25:09:bd:9c:9c:19:87:52:89:
ab:8f:21:e6:65:63:84:66:69:f3:a0:24:bc:14:28:
4a:c3:f1:05:0b:d4:7e:44:e1:b2:8e:f2:6d:94:41:
30:58:16:a4:0e:a7:2d:61:30:64:4f:42:b5:0e:1a:
1e:89:71:17:d6:cd:90:7b:b8:cc:35:a3:fa:9b:a7:
fd:ec:f9:08:b1:02:97:d6:c6:e6:ba:ff:25:96:f6:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:AD:E4:02:17:A4:5E:7A:98:AE:C4:51:88:82:F2:90:2D:80:D8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/6rut5AIXpF56mK7EUYiC8pAtgNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d603::/32
Signature Algorithm: sha256WithRSAEncryption
46:06:04:9c:58:fc:63:e0:e1:81:21:c4:9b:c6:75:b9:0b:46:
8d:45:7f:c8:41:de:d3:12:dc:9e:d2:fa:4d:c3:d0:25:12:6f:
64:2d:09:87:ae:f1:cf:cb:de:25:32:a5:d1:8d:a1:b7:2e:c6:
2a:3c:49:8b:3f:62:8c:cd:97:c1:a3:1a:b7:4f:89:fa:83:95:
21:eb:7f:db:4f:a6:5f:45:51:a1:25:37:01:69:f1:e0:1d:c9:
e5:2d:f8:4e:4a:3a:ed:8c:3f:3f:5d:be:0b:be:c4:bd:26:e9:
b2:c6:2d:94:9a:c3:3b:4b:18:6f:ff:50:4e:24:b1:a2:e6:2e:
34:45:16:2f:3e:40:cd:a8:dc:8f:47:7a:29:2d:24:20:f7:98:
7a:8a:1d:3b:f4:90:b2:dc:f8:b1:37:5c:5f:82:0a:5c:50:a7:
32:5b:d4:58:c8:f2:42:c0:2c:57:b9:16:55:32:ad:4e:a6:44:
1b:46:c3:47:af:82:b9:dd:d7:a1:fb:5a:ff:f5:42:9b:c9:55:
ff:dc:1d:3a:21:04:f2:23:46:88:66:69:a3:49:3e:f7:70:b4:
9f:55:2a:80:6f:53:d1:16:bc:88:89:a9:45:10:53:e4:60:fc:
8f:4b:71:1d:3d:46:dd:56:73:49:2d:1e:a7:b8:4c:d7:a9:67:
2b:5b:af:fb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQj1w/cPEiSZh5owrgX28ipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWJiYWRlNDAyMTdhNDVlN2E5OGFlYzQ1MTg4ODJmMjkwMmQ4MGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu2DnL4vq8R9yXZPNMhbxDUdzP/z
rFr13nzn2F23y/kyDn1HCLjVdtonhHt2humNMLywVP8gTzV5EbaGSpzrdkhNAyAs
g78EtFabKgN+293Z6NKoavEeo3e2/0NmtJEDbpf19JmuuAYhrZbZ2ehfyuMa3LNt
E3WVzSxH/yq8bbCBh8nMm/odM3Y4aV9SlSZ4NPF1sONxPTaS/aXoN8svjUz1tQ3g
aF4+x8YlCb2cnBmHUomrjyHmZWOEZmnzoCS8FChKw/EFC9R+ROGyjvJtlEEwWBak
DqctYTBkT0K1DhoeiXEX1s2Qe7jMNaP6m6f97PkIsQKX1sbmuv8llvZd/wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOq7reQCF6ReepiuxFGIgvKQLYDYMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvNnJ1dDVBSVhwRjU2bUs3RVVZaUM4cEF0Z05nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg7WAzAN
BgkqhkiG9w0BAQsFAAOCAQEARgYEnFj8Y+DhgSHEm8Z1uQtGjUV/yEHe0xLcntL6
TcPQJRJvZC0Jh67xz8veJTKl0Y2hty7GKjxJiz9ijM2XwaMat0+J+oOVIet/20+m
X0VRoSU3AWnx4B3J5S34Tko67Yw/P12+C77EvSbpssYtlJrDO0sYb/9QTiSxouYu
NEUWLz5Azajcj0d6KS0kIPeYeoodO/SQstz4sTdcX4IKXFCnMlvUWMjyQsAsV7kW
VTKtTqZEG0bDR6+Cud3Xofta//VCm8lV/9wdOiEE8iNGiGZpo0k+93C0n1UqgG9T
0Ra8iImpRRBT5GD8j0txHT1G3VZzSS0ep7hM16lnK1uv+w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:30 2025 by rpki-client