Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/_SYIhCf3pmsd3GO_bPZ9LmXX9yI.roa
File: _SYIhCf3pmsd3GO_bPZ9LmXX9yI.roa (raw, json)
Hash identifier: yLq+2S7VzCleP2MSt8WxD7vanT3ofV/BHsfwwfGB6uA=
Subject key identifier: FD:26:08:84:27:F7:A6:6B:1D:DC:63:BF:6C:F6:7D:2E:65:D7:F7:22
Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial: 01942067FF5000F901F54545D71854947002
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/_SYIhCf3pmsd3GO_bPZ9LmXX9yI.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 62.240.232.0/24 maxlen: 24
2001:a70:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ff:50:00:f9:01:f5:45:45:d7:18:54:94:70:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd26088427f7a66b1ddc63bf6cf67d2e65d7f722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:79:cc:e0:85:00:e5:09:69:8b:50:ac:55:
2b:7f:6f:b3:eb:c1:33:e9:bc:e8:ae:3b:b5:4d:5b:
aa:eb:00:8f:09:b3:3f:b0:8d:73:87:0c:de:da:c6:
f5:03:7d:50:c3:22:fc:69:61:a1:dc:47:f7:23:74:
93:4c:95:80:c8:4b:58:df:09:05:bf:8c:39:0a:d1:
e8:93:06:42:48:ca:b5:5b:65:8d:df:e1:70:97:ec:
3a:5c:c5:df:ab:80:08:18:62:76:25:db:79:da:42:
4e:2a:e6:eb:0b:7f:76:70:11:3c:8c:47:c9:73:06:
6b:6a:97:4a:34:3b:27:1b:10:c4:7c:40:e5:34:30:
d3:f1:c2:24:da:80:b9:a5:6e:46:f8:e9:3f:03:f9:
45:1b:02:93:d0:0b:39:85:8b:e1:07:9b:68:d4:23:
71:de:58:c7:98:9a:9d:e2:d3:54:10:fd:6f:1b:9f:
6b:d9:fb:3d:22:57:17:c8:7e:8f:9d:10:6d:67:04:
d8:18:7f:9b:58:95:94:26:03:ab:66:f6:c1:0b:55:
93:32:10:b7:76:06:81:60:0c:fe:1e:8b:92:1b:fe:
de:71:35:35:a4:da:05:41:66:bf:51:63:03:a8:d8:
0e:91:b1:22:95:bb:f0:00:a1:88:58:e0:91:4a:c8:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:26:08:84:27:F7:A6:6B:1D:DC:63:BF:6C:F6:7D:2E:65:D7:F7:22
X509v3 Authority Key Identifier:
keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/_SYIhCf3pmsd3GO_bPZ9LmXX9yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.232.0/24
IPv6:
2001:a70:100::/48
Signature Algorithm: sha256WithRSAEncryption
0b:f7:98:d4:f9:fa:f6:a3:3b:74:4e:ab:62:6f:0e:63:c0:2c:
0f:e0:24:2e:64:19:76:20:9a:f2:5d:71:60:a9:75:0c:b1:43:
91:86:93:71:b6:cc:72:2a:2e:05:91:c6:45:0b:27:72:68:d1:
a1:86:42:79:8c:b4:d4:7f:83:17:6c:c9:fa:cb:d8:4a:cc:92:
b2:74:ce:f9:7f:2d:27:e1:a2:e7:b3:5d:74:0d:29:62:2d:89:
56:b5:e8:53:58:4b:82:16:63:eb:14:61:a9:f6:cc:43:e6:a9:
9a:b1:6a:d1:27:16:46:59:2e:d4:c8:9f:5c:95:92:1e:e3:49:
85:43:1d:d7:4e:2b:9f:c8:49:36:22:5c:d4:3d:ed:9a:ec:e8:
82:cf:ad:57:79:bf:c2:5b:e8:e5:09:b6:25:42:97:ff:a0:af:
a6:58:ba:7d:8f:8e:53:05:02:aa:f7:bb:77:b5:a0:13:de:6a:
c0:3f:f3:cb:a2:02:2e:50:25:53:0f:d7:df:8e:9c:01:00:47:
39:83:2f:b7:5a:b7:a8:4f:9b:96:99:61:8b:61:ae:59:5b:fc:
77:aa:ca:ca:f3:25:fd:14:63:97:bf:fb:5c:b7:17:4d:81:10:
cd:06:2d:0a:e2:71:94:dc:3c:95:10:d4:02:66:46:03:ff:ec:
fe:21:6c:65
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQgZ/9QAPkB9UVF1xhUlHACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMjM5Njg1NDA5ZjY0YmExYzNhNTRhOGVmMTQxYzkyNGU3
MWQ4OTIwHhcNMjUwMTAxMDU0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDI2MDg4NDI3ZjdhNjZiMWRkYzYzYmY2Y2Y2N2QyZTY1ZDdmNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFJ5zOCFAOUJaYtQrFUrf2+z68Ez
6bzorju1TVuq6wCPCbM/sI1zhwze2sb1A31QwyL8aWGh3Ef3I3STTJWAyEtY3wkF
v4w5CtHokwZCSMq1W2WN3+Fwl+w6XMXfq4AIGGJ2Jdt52kJOKubrC392cBE8jEfJ
cwZrapdKNDsnGxDEfEDlNDDT8cIk2oC5pW5G+Ok/A/lFGwKT0As5hYvhB5to1CNx
3ljHmJqd4tNUEP1vG59r2fs9IlcXyH6PnRBtZwTYGH+bWJWUJgOrZvbBC1WTMhC3
dgaBYAz+HouSG/7ecTU1pNoFQWa/UWMDqNgOkbEilbvwAKGIWOCRSsgqpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP0mCIQn96ZrHdxjv2z2fS5l1/ciMB8GA1UdIwQY
MBaAFNsjloVAn2S6HDpUqO8UHJJOcdiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmIt
MmVmNDQ3ZTFiMDhjLzEvX1NZSWhDZjNwbXNkM0dPX2JQWjlMbVhYOXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84ZDZmZDctMWNiMy00MTNjLWEzMmItMmVmNDQ3ZTFiMDhj
LzEvMnlPV2hVQ2ZaTG9jT2xTbzd4UWNrazV4MkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAPvDoMA8E
AgACMAkDBwAgAQpwAQAwDQYJKoZIhvcNAQELBQADggEBAAv3mNT5+vajO3ROq2Jv
DmPALA/gJC5kGXYgmvJdcWCpdQyxQ5GGk3G2zHIqLgWRxkULJ3Jo0aGGQnmMtNR/
gxdsyfrL2ErMkrJ0zvl/LSfhouezXXQNKWItiVa16FNYS4IWY+sUYan2zEPmqZqx
atEnFkZZLtTIn1yVkh7jSYVDHddOK5/ISTYiXNQ97Zrs6ILPrVd5v8Jb6OUJtiVC
l/+gr6ZYun2PjlMFAqr3u3e1oBPeasA/88uiAi5QJVMP19+OnAEARzmDL7dat6hP
m5aZYYthrllb/HeqysrzJf0UY5e/+1y3F02BEM0GLQricZTcPJUQ1AJmRgP/7P4h
bGU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:57:58 2025 by rpki-client