Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/s_SOeCU2ZSlKaABMzyI1A92STj8.roa
File: s_SOeCU2ZSlKaABMzyI1A92STj8.roa (raw, json)
Hash identifier: 6Ea34PFLl9Lnz9BrVAkfmVoBNWpp0IKT4SIgHazKH4s=
Subject key identifier: B3:F4:8E:78:25:36:65:29:4A:68:00:4C:CF:22:35:03:DD:92:4E:3F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0195149EBF53B1EFB436E7DF50F2ACFFF502
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/s_SOeCU2ZSlKaABMzyI1A92STj8.roa
Signing time: Mon 17 Feb 2025 15:55:02 +0000
ROA not before: Mon 17 Feb 2025 15:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36832
IP address blocks: 2a0f:b244:600::/40 maxlen: 48
2a0f:b246::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:9e:bf:53:b1:ef:b4:36:e7:df:50:f2:ac:ff:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 17 15:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3f48e78253665294a68004ccf223503dd924e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:18:9a:9a:d1:df:37:8c:a3:83:66:5d:36:
73:ec:51:1e:d2:1e:04:b8:65:df:72:bc:59:9f:57:
4b:22:bc:9d:fa:1f:4c:7f:0c:77:94:6d:f2:fe:99:
81:76:58:8b:13:8d:1a:34:11:ff:36:f2:3c:8a:a9:
d7:db:a5:e1:0f:ec:e0:68:e3:d1:d8:4f:33:c1:58:
83:57:dd:4e:89:70:db:50:fb:b1:cc:89:fc:48:94:
11:20:e0:1f:40:aa:6a:18:e8:5b:1e:90:ed:a5:1a:
ed:b6:24:cb:c3:fe:1f:f9:37:b5:db:ce:86:ee:55:
02:bf:98:de:db:51:7b:7c:08:94:bf:fe:43:f2:a4:
81:72:37:58:7f:7e:fa:f6:59:54:91:1f:73:14:48:
d1:f9:f2:60:b7:c9:24:65:32:94:8b:dd:31:a3:ee:
fe:d9:3d:3f:27:e8:35:ae:91:14:8b:7e:40:1b:3e:
23:60:0d:4b:41:c9:98:50:ec:9a:96:98:52:3a:93:
d2:9c:83:e6:84:c8:16:fb:7c:90:f3:7b:e3:aa:2d:
87:af:ca:c7:32:97:2f:ff:e0:b0:46:c1:19:c9:a5:
b7:6f:98:67:ae:77:4d:c6:f4:13:cc:52:99:d7:24:
0a:04:6e:ad:e0:dd:8f:77:df:47:b6:ac:b1:55:b8:
7e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:8E:78:25:36:65:29:4A:68:00:4C:CF:22:35:03:DD:92:4E:3F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/s_SOeCU2ZSlKaABMzyI1A92STj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:600::/40
2a0f:b246::/32
Signature Algorithm: sha256WithRSAEncryption
80:60:50:5f:41:86:31:9c:d7:61:c4:89:ec:e2:6d:f0:42:ea:
3f:a7:25:78:7a:44:3c:41:42:3f:da:a0:6f:62:63:92:6d:d8:
dc:8f:de:10:ec:3c:40:10:a2:a6:eb:be:b6:97:c3:70:a2:68:
c0:01:db:73:12:43:cb:1c:1b:be:e7:8a:01:14:1c:dc:bb:c6:
95:21:23:37:b4:c9:48:eb:15:1a:33:b7:e3:7c:bf:35:94:75:
fd:44:e1:a8:a9:bf:f0:3b:5e:22:e6:80:89:15:52:8a:19:a7:
2f:e2:7f:1e:2b:e9:ed:e0:d1:75:49:d9:d4:cc:f3:18:30:7e:
2e:51:69:ee:d2:8f:19:81:bd:86:ea:72:64:c0:fa:82:cf:49:
51:b5:68:b9:b1:99:00:83:cf:cc:df:5f:f1:d2:8d:3e:89:48:
3d:a2:0b:e9:3a:d1:d2:a0:2e:1c:e5:73:43:c9:62:d5:4f:37:
e8:fb:d4:d4:5e:62:39:74:07:e5:e9:d3:34:09:af:05:f6:eb:
6b:a6:90:c8:ec:87:99:5e:0b:01:c8:76:47:43:39:07:4c:37:
84:4e:ab:b2:3d:7c:72:59:7e:ba:1c:c8:66:36:f4:43:05:6b:
7b:04:17:91:e3:3a:28:e0:e3:c7:6c:70:68:b1:02:9c:7f:bd:
9a:bf:cd:a8
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAZUUnr9Tse+0NuffUPKs//UCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUwMjE3MTU1NTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2Y0OGU3ODI1MzY2NTI5NGE2ODAwNGNjZjIyMzUwM2RkOTI0ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIYYmprR3zeMo4NmXTZz7FEe0h4E
uGXfcrxZn1dLIryd+h9Mfwx3lG3y/pmBdliLE40aNBH/NvI8iqnX26XhD+zgaOPR
2E8zwViDV91OiXDbUPuxzIn8SJQRIOAfQKpqGOhbHpDtpRrttiTLw/4f+Te1286G
7lUCv5je21F7fAiUv/5D8qSBcjdYf3769llUkR9zFEjR+fJgt8kkZTKUi90xo+7+
2T0/J+g1rpEUi35AGz4jYA1LQcmYUOyalphSOpPSnIPmhMgW+3yQ83vjqi2Hr8rH
Mpcv/+CwRsEZyaW3b5hnrndNxvQTzFKZ1yQKBG6t4N2Pd99HtqyxVbh+QQIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFLP0jnglNmUpSmgATM8iNQPdkk4/MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvc19TT2VDVTJaU2xLYUFCTXp5STFBOTJTVGo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAAjAPAwYAKg+yRAYD
BQAqD7JGMA0GCSqGSIb3DQEBCwUAA4IBAQCAYFBfQYYxnNdhxIns4m3wQuo/pyV4
ekQ8QUI/2qBvYmOSbdjcj94Q7DxAEKKm6762l8NwomjAAdtzEkPLHBu+54oBFBzc
u8aVISM3tMlI6xUaM7fjfL81lHX9ROGoqb/wO14i5oCJFVKKGacv4n8eK+nt4NF1
SdnUzPMYMH4uUWnu0o8Zgb2G6nJkwPqCz0lRtWi5sZkAg8/M31/x0o0+iUg9ogvp
OtHSoC4c5XNDyWLVTzfo+9TUXmI5dAfl6dM0Ca8F9utrppDI7IeZXgsByHZHQzkH
TDeETquyPXxyWX66HMhmNvRDBWt7BBeR4zoo4OPHbHBosQKcf72av82o
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:08:01 2025 by rpki-client