Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa
File: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (raw, json)
Hash identifier: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=
Subject key identifier: 67:A2:5F:F4:9B:BF:FC:62:87:62:06:14:D0:93:CE:B6:4A:71:08:81
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 0194953ACE0017752D4A8F1DF6DAEB546B1A
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa
Signing time: Thu 23 Jan 2025 22:14:06 +0000
ROA not before: Thu 23 Jan 2025 22:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200056
IP address blocks: 2a13:cc87:fe00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:95:3a:ce:00:17:75:2d:4a:8f:1d:f6:da:eb:54:6b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Jan 23 22:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67a25ff49bbffc6287620614d093ceb64a710881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:90:c5:0c:21:b9:56:e4:b5:74:3e:37:4a:
24:28:1a:65:d7:c8:20:9b:25:44:cd:3a:07:69:cf:
47:f0:d3:e5:cb:d0:72:cd:2e:4e:ce:1d:0c:85:6f:
26:5c:97:57:48:4c:a0:cb:dd:4d:1b:6d:9f:b6:b6:
e0:08:05:38:1d:51:4e:a7:d2:11:a2:7f:86:98:13:
9b:4d:7c:9e:0d:ec:49:3b:96:18:cb:55:0f:94:66:
67:eb:c8:29:78:98:8f:5e:0a:b9:6a:f5:c2:b3:c0:
3b:bd:f8:17:ac:ab:01:96:8b:18:22:af:52:37:34:
3d:8f:80:60:e4:0d:63:16:dc:46:bc:46:38:b2:16:
0f:df:bc:c1:61:a2:7b:95:64:ce:26:71:7c:98:79:
e2:b8:c2:27:ab:97:33:5e:39:fd:bc:bb:33:c7:ad:
af:03:fa:0a:ad:4a:1c:49:a8:56:17:de:b6:13:d0:
dd:13:7d:35:0e:1b:40:0c:10:4c:0c:77:3f:7c:91:
73:bf:9f:0d:6f:77:aa:b2:d1:bf:98:97:2e:1d:45:
55:da:6e:d5:c6:f2:a4:47:5b:df:a5:29:f3:50:c0:
5b:e4:4b:de:1a:79:fd:f1:8c:2b:af:8a:ee:58:26:
7f:00:79:5f:8f:96:61:86:7e:08:a5:86:29:9b:8c:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A2:5F:F4:9B:BF:FC:62:87:62:06:14:D0:93:CE:B6:4A:71:08:81
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc87:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
34:93:3a:37:6a:f3:5f:2b:62:88:b3:98:f0:ed:5d:9e:f0:b9:
46:64:ac:c7:0e:96:c8:84:da:66:7e:0f:84:ce:ca:d4:93:26:
3d:61:67:5e:86:fb:03:fb:ac:fd:36:fa:10:c5:8b:7a:43:59:
1f:96:da:df:ff:31:ce:f3:97:d5:56:f8:d0:80:22:3b:53:52:
66:46:ac:fd:2f:0a:19:83:76:a8:3e:a8:c3:66:d1:f5:d2:77:
b4:e9:af:5d:8b:a9:99:2c:60:55:7d:b9:60:ca:d5:9f:95:0d:
a2:a4:92:56:22:57:89:f4:e5:6b:a4:6c:c8:18:96:30:04:54:
7b:b6:b4:b7:56:43:c3:db:e1:8c:41:ce:cf:e7:e3:db:88:bf:
4c:27:7b:ea:ab:4c:c6:b4:81:58:f6:37:34:ad:89:e9:26:a1:
b2:db:a7:23:b8:3d:ef:fd:3e:5a:53:63:03:dc:18:5f:29:66:
05:77:70:a1:40:3a:6d:02:db:1a:5c:88:d6:78:58:f2:79:21:
d6:8f:19:c7:20:b3:49:c3:7f:cb:dc:78:de:6d:59:a4:ea:c7:
c7:5c:a1:f0:5b:27:78:87:7f:78:59:8b:61:4a:a8:0c:79:af:
0e:21:ea:98:3e:99:f9:35:b0:3b:be:e4:ed:43:fe:18:51:a4:
56:84:48:97
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZSVOs4AF3UtSo8d9trrVGsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy
YTUzYjkwHhcNMjUwMTIzMjIxNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2EyNWZmNDliYmZmYzYyODc2MjA2MTRkMDkzY2ViNjRhNzEwODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx2QxQwhuVbktXQ+N0okKBpl18gg
myVEzToHac9H8NPly9ByzS5Ozh0MhW8mXJdXSEygy91NG22ftrbgCAU4HVFOp9IR
on+GmBObTXyeDexJO5YYy1UPlGZn68gpeJiPXgq5avXCs8A7vfgXrKsBlosYIq9S
NzQ9j4Bg5A1jFtxGvEY4shYP37zBYaJ7lWTOJnF8mHniuMInq5czXjn9vLszx62v
A/oKrUocSahWF962E9DdE301DhtADBBMDHc/fJFzv58Nb3eqstG/mJcuHUVV2m7V
xvKkR1vfpSnzUMBb5EveGnn98Ywrr4ruWCZ/AHlfj5Zhhn4IpYYpm4w/AQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGeiX/Sbv/xih2IGFNCTzrZKcQiBMB8GA1UdIwQY
MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt
YjBlYjY3MTVlMGFmLzEvWjZKZjlKdV9fR0tIWWdZVTBKUE90a3B4Q0lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm
LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhPMh/4w
DQYJKoZIhvcNAQELBQADggEBADSTOjdq818rYoizmPDtXZ7wuUZkrMcOlsiE2mZ+
D4TOytSTJj1hZ16G+wP7rP02+hDFi3pDWR+W2t//Mc7zl9VW+NCAIjtTUmZGrP0v
ChmDdqg+qMNm0fXSd7Tpr12LqZksYFV9uWDK1Z+VDaKkklYiV4n05WukbMgYljAE
VHu2tLdWQ8Pb4YxBzs/n49uIv0wne+qrTMa0gVj2NzStiekmobLbpyO4Pe/9PlpT
YwPcGF8pZgV3cKFAOm0C2xpciNZ4WPJ5IdaPGccgs0nDf8vceN5tWaTqx8dcofBb
J3iHf3hZi2FKqAx5rw4h6pg+mfk1sDu+5O1D/hhRpFaESJc=
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:51:37 2025 by rpki-client