Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/Lc0qnvo8s8IwCYgm98u-9KFti-0.roa
File: Lc0qnvo8s8IwCYgm98u-9KFti-0.roa (raw, json)
Hash identifier: 8S0Rn5tzV6kXppavnp7mZqH9zu2jurInV5YjbDZ4lms=
Subject key identifier: 2D:CD:2A:9E:FA:3C:B3:C2:30:09:88:26:F7:CB:BE:F4:A1:6D:8B:ED
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 0194DBB0867D28A6112D9832F677DB963126
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/Lc0qnvo8s8IwCYgm98u-9KFti-0.roa
Signing time: Thu 06 Feb 2025 14:36:06 +0000
ROA not before: Thu 06 Feb 2025 14:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61992
IP address blocks: 2a14:e900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:b0:86:7d:28:a6:11:2d:98:32:f6:77:db:96:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Feb 6 14:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dcd2a9efa3cb3c230098826f7cbbef4a16d8bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:57:ec:84:cc:ee:55:23:b7:54:bf:37:ac:
a9:8e:43:7a:d3:55:e3:0e:54:2f:84:51:17:a9:24:
72:67:30:77:d0:18:95:9d:8e:4a:69:5c:9b:0c:ce:
db:56:a5:8e:3b:0d:93:a3:0f:d1:6c:cd:8a:8c:1d:
d4:6d:36:80:a0:ac:1a:ee:4c:17:53:06:cf:07:ba:
8a:61:28:7b:19:2f:04:8b:3c:41:41:15:24:38:ce:
36:a2:51:0b:0f:27:93:01:10:83:6f:af:22:d0:51:
89:3a:00:08:4b:e6:af:6f:ac:87:b5:43:d5:06:6b:
33:a9:4e:89:3f:47:a3:ca:c1:d9:de:3e:e6:06:03:
57:9c:62:e9:3e:59:c8:8e:c0:b9:a0:72:4a:6b:7f:
b5:bf:16:48:91:72:9d:e6:62:f2:6e:c1:c3:73:7c:
ba:5f:15:a2:b4:d4:aa:be:5e:a2:2b:91:9f:84:a1:
2f:6a:31:b4:b4:68:21:59:6a:14:a0:1e:20:31:56:
8f:80:97:70:6e:c5:16:af:b0:e6:52:fc:30:87:67:
d3:40:c3:0f:1d:db:75:2f:b6:f4:fb:a9:c0:e4:66:
4f:40:3e:e3:0d:d1:fe:15:e5:3f:f5:02:93:06:c8:
96:62:f0:d2:c3:30:70:55:68:c4:eb:de:cb:9b:0a:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CD:2A:9E:FA:3C:B3:C2:30:09:88:26:F7:CB:BE:F4:A1:6D:8B:ED
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/Lc0qnvo8s8IwCYgm98u-9KFti-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e900::/29
Signature Algorithm: sha256WithRSAEncryption
8e:fc:d7:99:c5:07:85:05:0d:9d:1e:51:12:c9:e6:5f:09:52:
04:4c:f4:ce:12:62:19:05:ab:b6:2f:88:2f:dd:8d:f6:df:4b:
96:41:ac:ef:db:9b:1c:e2:55:6c:9f:73:42:bc:6d:7f:c2:cc:
2f:e4:d3:77:a4:e6:12:85:68:a7:8e:b0:83:8e:62:c3:db:0e:
2b:29:46:35:a3:a7:a9:e0:e8:a7:5d:42:60:3a:5b:34:70:a1:
4a:27:55:f8:71:53:23:b3:47:e6:69:d2:97:6b:c0:02:4d:9f:
7e:7f:9f:d3:25:6e:c8:29:e3:8b:b3:4b:0e:59:0e:68:b5:39:
d3:54:d6:5b:9e:3d:9c:04:68:79:fc:4c:25:fc:43:57:ba:32:
7c:22:81:48:4e:65:a4:12:16:1d:0d:f9:16:cc:af:3b:8c:ce:
46:82:5a:b3:94:17:1b:b0:6b:a5:d9:94:60:45:ce:e4:d8:97:
b3:34:2b:b8:e5:c2:a4:94:90:33:be:c2:66:0b:56:ad:d4:b1:
e6:e2:81:d0:ce:31:2c:e8:aa:ac:9a:e2:e7:1a:e9:12:5b:72:
a8:ac:f5:91:94:ec:df:0b:cb:98:a4:46:b2:ac:bd:a1:02:bd:
56:6f:f7:f4:a7:08:b8:ec:08:97:c8:69:49:5e:06:d5:3f:22:
b7:d3:57:72
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZTbsIZ9KKYRLZgy9nfbljEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmZkOWRmNDU2YWRiZTNiMWU2NjFlZTE1NjI2ODY1ZmUx
Njg4YzgwHhcNMjUwMjA2MTQzNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGNkMmE5ZWZhM2NiM2MyMzAwOTg4MjZmN2NiYmVmNGExNmQ4YmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmtX7ITM7lUjt1S/N6ypjkN601Xj
DlQvhFEXqSRyZzB30BiVnY5KaVybDM7bVqWOOw2Tow/RbM2KjB3UbTaAoKwa7kwX
UwbPB7qKYSh7GS8EizxBQRUkOM42olELDyeTARCDb68i0FGJOgAIS+avb6yHtUPV
BmszqU6JP0ejysHZ3j7mBgNXnGLpPlnIjsC5oHJKa3+1vxZIkXKd5mLybsHDc3y6
XxWitNSqvl6iK5GfhKEvajG0tGghWWoUoB4gMVaPgJdwbsUWr7DmUvwwh2fTQMMP
Hdt1L7b0+6nA5GZPQD7jDdH+FeU/9QKTBsiWYvDSwzBwVWjE697LmwqYNQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFC3NKp76PLPCMAmIJvfLvvShbYvtMB8GA1UdIwQY
MBaAFID/2d9FatvjseZh7hViaGX+FojIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQt
M2NiOGQ4MTdlMDI3LzEvTGMwcW52bzhzOEl3Q1lnbTk4dS05S0Z0aS0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi85MDBjZWYtNjQ4MS00ZmY4LThlMDQtM2NiOGQ4MTdlMDI3
LzEvZ1BfWjMwVnEyLU94NW1IdUZXSm9aZjRXaU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTpADAN
BgkqhkiG9w0BAQsFAAOCAQEAjvzXmcUHhQUNnR5REsnmXwlSBEz0zhJiGQWrti+I
L92N9t9LlkGs79ubHOJVbJ9zQrxtf8LML+TTd6TmEoVop46wg45iw9sOKylGNaOn
qeDop11CYDpbNHChSidV+HFTI7NH5mnSl2vAAk2ffn+f0yVuyCnji7NLDlkOaLU5
01TWW549nARoefxMJfxDV7oyfCKBSE5lpBIWHQ35FsyvO4zORoJas5QXG7BrpdmU
YEXO5NiXszQruOXCpJSQM77CZgtWrdSx5uKB0M4xLOiqrJri5xrpEltyqKz1kZTs
3wvLmKRGsqy9oQK9Vm/39KcIuOwIl8hpSV4G1T8it9NXcg==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:43 2025 by rpki-client