Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/a44sy3HYySYYWzX1Xc0gD8ljcUU.roa
File: a44sy3HYySYYWzX1Xc0gD8ljcUU.roa (raw, json)
Hash identifier: mG+H6uo6FVVDTMv9HhWuPrvRA4BkbeYs8ovYondFREA=
Subject key identifier: 6B:8E:2C:CB:71:D8:C9:26:18:5B:35:F5:5D:CD:20:0F:C9:63:71:45
Certificate issuer: /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial: 019425FDECFD079BCAC1FAFE2017975BA747
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/a44sy3HYySYYWzX1Xc0gD8ljcUU.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211275
IP address blocks: 2a14:7240:410::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ec:fd:07:9b:ca:c1:fa:fe:20:17:97:5b:a7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b8e2ccb71d8c926185b35f55dcd200fc9637145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:ca:f4:e3:c3:74:ec:f1:13:fe:62:6a:e6:
43:27:3f:7e:55:52:99:0b:c7:22:9a:c2:25:af:0d:
3c:90:87:b9:b0:d7:9e:64:ca:44:9f:97:8c:81:24:
12:63:a3:86:50:76:df:a5:75:3f:6b:f8:d7:24:1e:
3c:5b:3f:70:18:c1:7b:13:a2:42:7d:1a:02:c9:e1:
b1:a8:75:88:1e:b2:69:63:f5:a7:48:6b:f2:52:eb:
e8:7a:52:31:ef:d4:c9:85:d4:70:56:9d:46:59:3f:
bb:1c:8b:98:79:62:e9:23:d4:77:ee:83:4f:8a:2e:
0f:e1:0b:9a:5c:f4:96:fa:38:36:37:19:11:e3:0c:
fe:c8:57:ed:64:51:5c:be:c5:da:3a:e5:f9:60:6e:
74:48:02:d6:02:3d:f4:68:cb:a5:76:7a:c5:0a:94:
7b:08:fe:00:f2:7c:6f:71:35:6b:a3:96:d2:78:12:
f2:7e:63:05:0a:ed:63:57:6e:b8:58:2a:03:3c:e2:
b3:06:7a:c8:0f:d9:86:28:da:92:ca:28:94:0d:91:
fa:06:1a:eb:bc:b1:bf:6b:3a:fd:88:63:27:32:df:
de:7f:46:7b:d0:e2:a5:91:a5:35:1f:90:1e:0d:f5:
85:78:d4:ac:a9:3a:88:5a:63:f5:5a:40:5e:d4:75:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8E:2C:CB:71:D8:C9:26:18:5B:35:F5:5D:CD:20:0F:C9:63:71:45
X509v3 Authority Key Identifier:
keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/a44sy3HYySYYWzX1Xc0gD8ljcUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7240:410::/44
Signature Algorithm: sha256WithRSAEncryption
41:0d:6f:86:f7:44:28:4a:d2:96:dc:4e:fb:81:26:4c:af:5f:
9e:88:36:47:8e:9a:33:a8:d7:32:d8:4a:3a:e2:fc:10:10:65:
a3:73:02:35:60:cd:03:47:f2:c9:44:26:e0:66:ad:ef:d8:bd:
56:4f:54:f4:42:04:4c:38:86:12:8c:44:5f:d6:68:5b:5e:fa:
e9:1e:76:fe:70:38:c2:d9:6d:c9:df:a5:a0:53:6f:cc:92:01:
62:40:26:7d:78:e9:39:f5:99:42:0f:b7:4b:c1:84:ae:de:7f:
b8:68:ce:d3:3a:30:55:bd:3a:f2:15:44:b6:09:a4:ac:d2:9a:
1c:fb:f9:90:18:42:67:51:8c:c8:01:51:d7:80:56:28:49:02:
11:82:33:89:aa:d8:ed:b2:ae:e3:ef:9e:e9:0f:e4:b6:38:b8:
56:28:1d:91:15:a9:9a:c3:80:c4:c8:e8:5e:fe:2a:ca:b5:5c:
65:e1:3c:e5:d3:53:e6:0e:70:f0:d2:39:8c:18:44:fc:bb:07:
45:ec:38:21:f4:a7:fb:a5:cd:55:b0:94:52:15:7b:8b:24:b6:
62:e9:2d:b9:10:77:dc:29:40:f8:92:07:16:a6:ac:6c:14:36:
8d:cb:74:72:c8:12:1a:80:39:6e:c8:8b:62:e6:a5:8a:da:7e:
85:d5:4b:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQl/ez9B5vKwfr+IBeXW6dHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYWNjYmFjNzE0NzdiOTQwZTVjZDQxMDNlM2VlZTYxZGI2
MTU5MTUwHhcNMjUwMTAyMDc0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjhlMmNjYjcxZDhjOTI2MTg1YjM1ZjU1ZGNkMjAwZmM5NjM3MTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+XK9OPDdOzxE/5iauZDJz9+VVKZ
C8cimsIlrw08kIe5sNeeZMpEn5eMgSQSY6OGUHbfpXU/a/jXJB48Wz9wGMF7E6JC
fRoCyeGxqHWIHrJpY/WnSGvyUuvoelIx79TJhdRwVp1GWT+7HIuYeWLpI9R37oNP
ii4P4QuaXPSW+jg2NxkR4wz+yFftZFFcvsXaOuX5YG50SALWAj30aMuldnrFCpR7
CP4A8nxvcTVro5bSeBLyfmMFCu1jV264WCoDPOKzBnrID9mGKNqSyiiUDZH6Bhrr
vLG/azr9iGMnMt/ef0Z70OKlkaU1H5AeDfWFeNSsqTqIWmP1WkBe1HUoLQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGuOLMtx2MkmGFs19V3NIA/JY3FFMB8GA1UdIwQY
MBaAFI+sy6xxR3uUDlzUED4+7mHbYVkVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZ6THJIRkhlNVFPWE5RUVBqN3VZZHRoV1JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wMTdlZWYtYzQ5ZS00N2E3LTllZDMt
MDk4ZGIzYTI0ZmYwLzEvYTQ0c3kzSFl5U1lZV3pYMVhjMGdEOGxqY1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wMTdlZWYtYzQ5ZS00N2E3LTllZDMtMDk4ZGIzYTI0ZmYw
LzEvajZ6THJIRkhlNVFPWE5RUVBqN3VZZHRoV1JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRyQAQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBBDW+G90QoStKW3E77gSZMr1+eiDZHjpozqNcy
2Eo64vwQEGWjcwI1YM0DR/LJRCbgZq3v2L1WT1T0QgRMOIYSjERf1mhbXvrpHnb+
cDjC2W3J36WgU2/MkgFiQCZ9eOk59ZlCD7dLwYSu3n+4aM7TOjBVvTryFUS2CaSs
0poc+/mQGEJnUYzIAVHXgFYoSQIRgjOJqtjtsq7j757pD+S2OLhWKB2RFamaw4DE
yOhe/irKtVxl4Tzl01PmDnDw0jmMGET8uwdF7Dgh9Kf7pc1VsJRSFXuLJLZi6S25
EHfcKUD4kgcWpqxsFDaNy3RyyBIagDluyIti5qWK2n6F1Us/
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:56 2025 by rpki-client