Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa
File: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (raw, json)
Hash identifier: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=
Subject key identifier: 17:52:07:6F:06:08:FD:5C:36:6E:22:98:F6:A0:31:5D:78:24:23:5B
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 019580A82CA5E6902299AA9A8788A06A62EB
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa
Signing time: Mon 10 Mar 2025 15:24:19 +0000
ROA not before: Mon 10 Mar 2025 15:24:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215153
IP address blocks: 2001:67c:1b40::/48 maxlen: 48
2001:67c:1b44::/48 maxlen: 48
2001:67c:1b48::/48 maxlen: 48
2001:67c:1b4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:a8:2c:a5:e6:90:22:99:aa:9a:87:88:a0:6a:62:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Mar 10 15:24:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1752076f0608fd5c366e2298f6a0315d7824235b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:12:7f:10:8e:99:6b:79:ac:e6:73:7f:56:
df:e6:fd:29:f4:d6:5a:6a:f1:e2:86:95:7f:33:52:
cd:e0:dc:98:a2:53:1d:10:1b:2c:a5:1d:5d:87:96:
ba:5c:16:19:11:f0:c6:84:b8:12:95:20:9a:c2:f9:
09:2f:2a:a2:77:c7:2e:a8:b2:50:ce:52:5d:b4:c7:
8c:d7:d7:57:dd:2e:95:00:8d:e3:b9:16:92:7b:dd:
09:d4:e2:ef:a5:87:1f:c9:c0:fa:1f:9a:2e:89:41:
82:4c:90:1a:46:12:1e:f8:d3:72:19:9a:f4:f6:cf:
b9:16:13:59:1f:ac:8d:aa:5c:4b:32:aa:01:93:be:
b4:1a:a6:e2:53:c4:c2:8d:26:62:3b:f3:7d:ef:9b:
19:6e:58:7c:b0:ae:8f:e7:1d:fa:50:69:1c:7c:a2:
4e:97:85:83:63:07:6c:71:eb:3a:f2:96:b5:82:fd:
93:44:d8:1c:0b:81:6c:56:50:53:1b:17:96:85:85:
27:ca:8b:8a:77:47:77:72:a6:af:a4:90:cf:27:e2:
d5:40:77:38:4a:ba:7b:0a:e7:51:38:83:33:6d:b3:
48:c8:1f:e6:14:5e:59:58:06:c4:27:ed:82:de:84:
e7:0b:01:f1:6c:71:fd:0d:2e:d1:f2:e7:bf:3e:51:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:52:07:6F:06:08:FD:5C:36:6E:22:98:F6:A0:31:5D:78:24:23:5B
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1b40::/48
2001:67c:1b44::/48
2001:67c:1b48::/48
2001:67c:1b4c::/48
Signature Algorithm: sha256WithRSAEncryption
2c:70:63:7a:40:99:96:a8:4b:bd:2b:b1:d0:9e:63:a0:91:9c:
d0:9e:23:34:d2:65:06:35:06:a9:ce:35:ae:d1:a9:24:7c:4e:
1c:5f:15:b2:24:40:3b:02:11:ab:f1:2c:f2:9d:9d:75:0f:25:
62:6d:bb:1a:d7:ce:70:e5:93:1f:a1:0d:60:e7:d2:e7:bc:1b:
e0:da:c6:56:95:17:79:4d:35:63:46:ec:66:8b:6a:28:46:c0:
ea:55:3c:2e:64:e1:f1:d6:3e:9e:e2:c8:54:c7:07:ca:6f:b6:
8f:3d:c9:1c:96:7a:7d:c9:f5:40:e5:e7:76:fc:06:73:d4:8b:
57:d0:b0:68:72:72:34:8c:c9:d1:cd:97:f9:b5:62:4d:02:5e:
aa:de:1e:54:4d:1e:c2:61:bf:ed:1c:78:e9:94:e6:45:06:21:
7a:60:4b:8b:06:f8:43:e7:71:4d:56:64:bb:29:d0:9e:02:b7:
78:a3:de:9d:95:59:5e:5c:87:58:63:9d:d5:a8:0b:ce:2c:e9:
f5:38:23:bf:9d:e9:54:7c:0f:53:13:41:66:41:39:c9:f8:3c:
c4:38:c8:be:e3:b4:fe:57:9c:ac:e0:cf:77:ed:e6:61:c0:cb:
25:c6:ee:9a:eb:19:ef:8b:80:94:c8:80:f0:14:2f:e7:f0:da:
87:87:19:7a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZWAqCyl5pAimaqah4igamLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3
OTA5N2MwHhcNMjUwMzEwMTUyNDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzUyMDc2ZjA2MDhmZDVjMzY2ZTIyOThmNmEwMzE1ZDc4MjQyMzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKYSfxCOmWt5rOZzf1bf5v0p9NZa
avHihpV/M1LN4NyYolMdEBsspR1dh5a6XBYZEfDGhLgSlSCawvkJLyqid8cuqLJQ
zlJdtMeM19dX3S6VAI3juRaSe90J1OLvpYcfycD6H5ouiUGCTJAaRhIe+NNyGZr0
9s+5FhNZH6yNqlxLMqoBk760GqbiU8TCjSZiO/N975sZblh8sK6P5x36UGkcfKJO
l4WDYwdsces68pa1gv2TRNgcC4FsVlBTGxeWhYUnyouKd0d3cqavpJDPJ+LVQHc4
Srp7CudROIMzbbNIyB/mFF5ZWAbEJ+2C3oTnCwHxbHH9DS7R8ue/PlEsawIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBdSB28GCP1cNm4imPagMV14JCNbMB8GA1UdIwQY
MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt
MDU5MDhjNjNiNDVhLzEvRjFJSGJ3WUlfVncyYmlLWTlxQXhYWGdrSTFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh
LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAIAEGfBtA
AwcAIAEGfBtEAwcAIAEGfBtIAwcAIAEGfBtMMA0GCSqGSIb3DQEBCwUAA4IBAQAs
cGN6QJmWqEu9K7HQnmOgkZzQniM00mUGNQapzjWu0akkfE4cXxWyJEA7AhGr8Szy
nZ11DyVibbsa185w5ZMfoQ1g59LnvBvg2sZWlRd5TTVjRuxmi2ooRsDqVTwuZOHx
1j6e4shUxwfKb7aPPckclnp9yfVA5ed2/AZz1ItX0LBocnI0jMnRzZf5tWJNAl6q
3h5UTR7CYb/tHHjplOZFBiF6YEuLBvhD53FNVmS7KdCeArd4o96dlVleXIdYY53V
qAvOLOn1OCO/nelUfA9TE0FmQTnJ+DzEOMi+47T+V5ys4M937eZhwMslxu6a6xnv
i4CUyIDwFC/n8NqHhxl6
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:50 2025 by rpki-client