Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa
File: AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa (raw, json)
Hash identifier: U4YaSKjxHoIRGGCP7ydVCxsh9Cu5QYl71iaS4zOmA2c=
Subject key identifier: 00:AB:12:E2:3D:FE:55:A3:87:05:64:8C:8F:6D:E0:EE:FC:7A:67:3E
Certificate issuer: /CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Certificate serial: 019420D5CFF58243BCF3F07F5DBB29AFEA52
Authority key identifier: 39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214450
IP address blocks: 2001:678:658::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cf:f5:82:43:bc:f3:f0:7f:5d:bb:29:af:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398847f70a35e710844e9bb8a262beddb40b7cc9
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00ab12e23dfe55a38705648c8f6de0eefc7a673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:fe:39:bc:ca:f4:81:f6:2c:fb:11:fd:c8:
eb:02:3f:b2:52:8c:ca:65:4b:f6:cc:f6:32:0d:94:
f7:8a:97:15:fa:ea:cb:9d:bf:10:b7:94:28:6f:0c:
38:ac:3b:69:af:21:f3:6b:de:98:81:5f:d6:74:5f:
5d:ea:b6:c2:28:b3:f3:3b:5d:43:c6:5d:b2:a4:41:
b4:fe:67:9b:5a:5f:d8:a5:e4:9e:2b:1e:31:23:3d:
3a:84:a6:c6:c8:ec:45:15:19:20:91:0e:09:9d:4d:
87:8f:ce:5a:47:21:45:5e:55:e2:7b:ff:27:dd:13:
37:49:29:96:4e:2c:66:f2:bb:64:00:13:7d:f7:8d:
41:c5:77:2d:79:1e:6e:87:29:ed:bd:22:13:70:7f:
36:70:be:c1:43:36:ac:f7:94:67:1f:d4:27:74:2a:
7c:b4:2c:04:bb:ef:50:54:46:2d:e6:c4:41:0f:93:
e8:8a:78:d3:5e:8d:3b:b3:25:ff:1f:34:4a:02:aa:
46:e5:8d:8d:b7:3d:1b:64:81:37:15:02:6c:00:ec:
b0:6b:3d:90:db:70:ca:46:1f:fa:64:74:36:f9:aa:
74:56:24:57:2c:2b:79:03:c8:6e:9a:28:86:3a:b1:
30:58:62:eb:50:43:0b:54:27:dc:ac:df:02:8c:7a:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AB:12:E2:3D:FE:55:A3:87:05:64:8C:8F:6D:E0:EE:FC:7A:67:3E
X509v3 Authority Key Identifier:
keyid:39:88:47:F7:0A:35:E7:10:84:4E:9B:B8:A2:62:BE:DD:B4:0B:7C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYhH9wo15xCETpu4omK-3bQLfMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/AKsS4j3-VaOHBWSMj23g7vx6Zz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/fc7657-063e-4af7-89e6-f9fea34b6b01/1/OYhH9wo15xCETpu4omK-3bQLfMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:658::/48
Signature Algorithm: sha256WithRSAEncryption
86:f0:38:37:8b:52:4e:b8:1b:91:80:cb:04:9a:e9:7a:3b:3f:
92:36:ec:e9:86:0d:b7:3a:36:35:c8:91:58:be:87:c5:b1:21:
59:3e:26:9d:b1:95:3d:51:76:af:66:d7:d5:41:7f:0e:89:ab:
4e:98:25:f0:01:b4:44:30:22:ee:32:f0:2e:85:bb:22:e3:ce:
2e:f3:63:70:37:96:f6:91:51:d1:41:c4:90:39:2a:47:f3:d4:
8c:e4:77:7d:9f:ad:ab:11:f5:f4:58:ac:b9:45:bf:e4:39:5b:
61:75:5f:2f:ff:6e:7e:49:8d:e5:f5:a9:88:dd:b6:28:b1:07:
e8:2f:a1:7d:b3:57:2d:6f:67:bd:34:4f:d8:8d:3c:0a:4a:4e:
96:1b:64:c7:0a:3b:5e:86:8d:ec:bf:35:67:83:76:e2:8a:fc:
10:88:cb:8f:61:6b:3b:05:d3:a7:f8:03:9a:92:aa:86:f7:b9:
02:01:1d:df:3b:ab:13:4e:f5:2f:63:b6:e9:d5:35:5c:a4:2f:
34:a9:1c:82:c8:42:0c:ac:cf:20:29:72:8e:57:1a:58:99:c9:
ef:c6:9b:29:10:5f:46:ac:88:50:0e:cd:7d:07:47:8b:ab:4c:
c9:42:17:fd:62:35:29:88:7d:ea:89:12:34:34:dd:e2:5a:ed:
99:3d:f0:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQg1c/1gkO88/B/Xbspr+pSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ODg0N2Y3MGEzNWU3MTA4NDRlOWJiOGEyNjJiZWRkYjQw
YjdjYzkwHhcNMjUwMTAxMDc0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGFiMTJlMjNkZmU1NWEzODcwNTY0OGM4ZjZkZTBlZWZjN2E2NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHv+ObzK9IH2LPsR/cjrAj+yUozK
ZUv2zPYyDZT3ipcV+urLnb8Qt5Qobww4rDtpryHza96YgV/WdF9d6rbCKLPzO11D
xl2ypEG0/mebWl/YpeSeKx4xIz06hKbGyOxFFRkgkQ4JnU2Hj85aRyFFXlXie/8n
3RM3SSmWTixm8rtkABN9941BxXcteR5uhyntvSITcH82cL7BQzas95RnH9QndCp8
tCwEu+9QVEYt5sRBD5PoinjTXo07syX/HzRKAqpG5Y2Ntz0bZIE3FQJsAOywaz2Q
23DKRh/6ZHQ2+ap0ViRXLCt5A8humiiGOrEwWGLrUEMLVCfcrN8CjHpOVQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFACrEuI9/lWjhwVkjI9t4O78emc+MB8GA1UdIwQY
MBaAFDmIR/cKNecQhE6buKJivt20C3zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYt
ZjlmZWEzNGI2YjAxLzEvQUtzUzRqMy1WYU9IQldTTWoyM2c3dng2Wno0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9mYzc2NTctMDYzZS00YWY3LTg5ZTYtZjlmZWEzNGI2YjAx
LzEvT1loSDl3bzE1eENFVHB1NG9tSy0zYlFMZk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAZY
MA0GCSqGSIb3DQEBCwUAA4IBAQCG8Dg3i1JOuBuRgMsEmul6Oz+SNuzphg23OjY1
yJFYvofFsSFZPiadsZU9UXavZtfVQX8OiatOmCXwAbREMCLuMvAuhbsi484u82Nw
N5b2kVHRQcSQOSpH89SM5Hd9n62rEfX0WKy5Rb/kOVthdV8v/25+SY3l9amI3bYo
sQfoL6F9s1ctb2e9NE/YjTwKSk6WG2THCjteho3svzVng3biivwQiMuPYWs7BdOn
+AOakqqG97kCAR3fO6sTTvUvY7bp1TVcpC80qRyCyEIMrM8gKXKOVxpYmcnvxpsp
EF9GrIhQDs19B0eLq0zJQhf9YjUpiH3qiRI0NN3iWu2ZPfAx
-----END CERTIFICATE-----
Generated at Sat Feb 1 01:56:55 2025 by rpki-client