Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/dc1PWa-oSsg3-_LY3nHy3b0c5ZM.roa
File: dc1PWa-oSsg3-_LY3nHy3b0c5ZM.roa (raw, json)
Hash identifier: t98pgB3eZJGWM8jwemiBCEit8151/JpilzmzBfDSgCE=
Subject key identifier: 75:CD:4F:59:AF:A8:4A:C8:37:FB:F2:D8:DE:71:F2:DD:BD:1C:E5:93
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D7748EE6F3D6CDF1DEDBAF1165A4C0
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/dc1PWa-oSsg3-_LY3nHy3b0c5ZM.roa
Signing time: Wed 01 Jan 2025 21:48:30 +0000
ROA not before: Wed 01 Jan 2025 21:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213250
IP address blocks: 2a01:367:c204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:74:8e:e6:f3:d6:cd:f1:de:db:af:11:65:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75cd4f59afa84ac837fbf2d8de71f2ddbd1ce593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:2b:a3:8a:3d:85:40:4e:12:fc:db:5c:54:
d2:38:87:74:11:b7:91:4a:97:b0:52:45:97:f4:17:
86:0d:7c:69:24:7a:cc:a1:ef:11:30:ee:c6:b7:c8:
84:9f:dd:ee:34:fb:5b:31:23:10:40:8e:fc:2e:c7:
7e:c4:9c:40:25:7b:df:5f:fd:1f:48:06:96:89:d5:
72:b4:b9:61:70:09:3d:98:13:a9:32:b4:98:bd:4c:
a1:d6:9d:da:3c:dc:b8:f5:ea:6a:ab:7b:c4:07:5b:
7b:2f:42:4d:da:34:54:32:7c:4e:d8:8d:c2:82:07:
a5:97:10:12:c0:5b:7b:11:26:c5:94:28:9a:ff:89:
ec:f5:d9:04:db:75:78:4a:39:50:f4:50:a2:dc:5a:
47:f1:7b:8c:c7:54:13:5c:f2:d9:09:24:0c:d8:0b:
35:4e:72:70:4b:d2:77:87:01:76:94:9f:e4:c6:5e:
7e:39:09:fc:cc:27:6d:7e:1e:87:98:67:44:0c:07:
63:61:64:23:ed:75:c1:87:bc:a9:6a:36:f6:e4:29:
75:4f:c8:87:e9:39:20:21:47:74:80:9a:91:71:92:
fd:3d:a7:78:10:4d:88:b1:09:fa:a9:10:ee:62:bc:
d0:9c:9c:3c:4d:44:c6:bd:f4:ec:01:26:6d:17:d5:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:4F:59:AF:A8:4A:C8:37:FB:F2:D8:DE:71:F2:DD:BD:1C:E5:93
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/dc1PWa-oSsg3-_LY3nHy3b0c5ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:367:c204::/48
Signature Algorithm: sha256WithRSAEncryption
58:88:a8:cc:e2:12:c9:8d:33:e2:84:f6:ae:cf:9e:14:30:d0:
c1:c7:9d:23:56:00:1f:a2:98:d3:73:af:fc:cd:61:63:05:a4:
68:0b:4d:09:8c:62:93:aa:c4:bc:03:5e:dd:e6:3e:0a:c9:c7:
68:9f:c5:90:69:6d:b6:d4:7f:8b:e9:7a:c2:07:d8:bf:94:9f:
46:6e:68:6c:42:31:75:c3:00:2f:49:75:21:70:39:bf:aa:4f:
01:dc:64:65:3f:32:74:3f:90:45:16:49:7e:69:41:06:e2:02:
5d:d0:e4:aa:22:0e:7c:64:38:a7:77:54:87:33:ee:d7:d4:72:
fc:ca:65:25:7c:83:85:46:da:20:b2:76:bd:86:71:17:15:73:
a8:8e:fe:7f:ed:2f:93:82:92:24:b5:07:5a:f4:02:b1:6a:e0:
03:69:0c:4b:c0:3d:e9:0a:57:20:b2:25:fd:19:aa:f8:a4:c9:
54:5f:11:25:59:54:5f:c2:a4:80:ef:56:a8:7f:6f:44:8b:95:
a4:07:40:e6:f9:c6:21:69:27:51:56:a5:7b:65:30:0b:1b:ed:
69:57:34:77:23:a5:20:08:f4:77:13:ef:34:db:ec:4f:72:1f:
f9:0d:7f:b0:86:ff:74:8c:62:86:4a:cb:81:35:51:97:6b:47:
22:02:54:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQj13SO5vPWzfHe268RZaTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjUwMTAxMjE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWNkNGY1OWFmYTg0YWM4MzdmYmYyZDhkZTcxZjJkZGJkMWNlNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFcro4o9hUBOEvzbXFTSOId0EbeR
SpewUkWX9BeGDXxpJHrMoe8RMO7Gt8iEn93uNPtbMSMQQI78Lsd+xJxAJXvfX/0f
SAaWidVytLlhcAk9mBOpMrSYvUyh1p3aPNy49epqq3vEB1t7L0JN2jRUMnxO2I3C
ggellxASwFt7ESbFlCia/4ns9dkE23V4SjlQ9FCi3FpH8XuMx1QTXPLZCSQM2As1
TnJwS9J3hwF2lJ/kxl5+OQn8zCdtfh6HmGdEDAdjYWQj7XXBh7ypajb25Cl1T8iH
6TkgIUd0gJqRcZL9Pad4EE2IsQn6qRDuYrzQnJw8TUTGvfTsASZtF9UNfQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHXNT1mvqErIN/vy2N5x8t29HOWTMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvZGMxUFdhLW9Tc2czLV9MWTNuSHkzYjBjNVpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEDZ8IE
MA0GCSqGSIb3DQEBCwUAA4IBAQBYiKjM4hLJjTPihPauz54UMNDBx50jVgAfopjT
c6/8zWFjBaRoC00JjGKTqsS8A17d5j4Kycdon8WQaW221H+L6XrCB9i/lJ9Gbmhs
QjF1wwAvSXUhcDm/qk8B3GRlPzJ0P5BFFkl+aUEG4gJd0OSqIg58ZDind1SHM+7X
1HL8ymUlfIOFRtogsna9hnEXFXOojv5/7S+TgpIktQda9AKxauADaQxLwD3pClcg
siX9Gar4pMlUXxElWVRfwqSA71aof29Ei5WkB0Dm+cYhaSdRVqV7ZTALG+1pVzR3
I6UgCPR3E+802+xPch/5DX+whv90jGKGSsuBNVGXa0ciAlTN
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:25 2025 by rpki-client