Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l-ZBFDqFe8FHsJvCRVhZHW9WuAw.roa
File: l-ZBFDqFe8FHsJvCRVhZHW9WuAw.roa (raw, json)
Hash identifier: AcxF5dBxXA2zUkCvHTu9B50nVeO9tvS3qk1qQejBooY=
Subject key identifier: 97:E6:41:14:3A:85:7B:C1:47:B0:9B:C2:45:58:59:1D:6F:56:B8:0C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01967E23B1AEBCAB030597CF040921DAF042
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l-ZBFDqFe8FHsJvCRVhZHW9WuAw.roa
Signing time: Mon 28 Apr 2025 20:43:10 +0000
ROA not before: Mon 28 Apr 2025 20:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210106
IP address blocks: 2a0c:9a40:8810::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:23:b1:ae:bc:ab:03:05:97:cf:04:09:21:da:f0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 28 20:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97e641143a857bc147b09bc24558591d6f56b80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:fa:70:62:9d:01:1a:44:7f:08:43:2e:fe:
28:58:08:4b:fb:9f:a4:ff:cd:a7:36:d6:df:ac:2a:
c0:14:e9:4d:3d:66:19:ea:58:0b:06:9b:1f:7e:4c:
85:f7:67:07:f2:5c:a6:e0:33:f8:14:c2:96:74:56:
c9:b5:04:19:8c:f7:e7:9d:b5:ce:5e:aa:75:be:5e:
66:38:95:2f:6e:08:23:d6:3a:4c:42:2c:a7:b3:70:
89:80:24:b7:cf:24:d5:ef:f3:ed:75:23:da:1e:48:
d0:7e:f7:81:1c:15:36:6b:db:ec:6b:23:e6:ba:6d:
b6:97:8f:d7:1d:47:87:87:5c:26:04:5b:bf:a5:ba:
1c:5f:98:64:42:e1:7d:ed:2b:ab:76:6a:cd:f2:2d:
e9:b8:fc:61:24:81:f0:a4:d5:08:78:0d:33:0e:96:
84:07:1d:c3:29:5a:fb:e1:16:19:2d:6b:64:4e:e5:
b1:c0:ab:9e:d9:94:39:eb:45:28:fd:92:09:74:b6:
e8:68:a9:ed:4a:75:9d:58:79:12:fe:64:1c:c1:09:
17:72:31:38:fb:e5:5d:0a:d5:af:f6:8b:c4:02:4f:
58:cc:4f:95:a6:14:d8:c4:d7:c5:bd:f6:6e:2e:ec:
5b:3c:1b:59:b8:48:5e:ab:58:17:7b:11:f7:4c:25:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E6:41:14:3A:85:7B:C1:47:B0:9B:C2:45:58:59:1D:6F:56:B8:0C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l-ZBFDqFe8FHsJvCRVhZHW9WuAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8810::/48
Signature Algorithm: sha256WithRSAEncryption
6b:ca:73:f8:9d:77:ed:85:dd:3f:f8:43:42:36:d7:b6:6a:5c:
27:8b:e4:3b:a0:38:f0:ca:f2:d3:ab:23:1e:9f:15:a4:3c:aa:
4f:ec:ad:40:7b:c1:43:ab:45:15:99:75:1f:db:2c:94:65:8c:
78:bd:ad:ac:74:81:48:80:7f:b0:29:44:d1:86:d4:5e:c8:09:
7e:c4:86:f3:9a:dd:9c:5f:f5:09:32:7b:23:7d:d0:1f:8e:81:
bc:0a:d9:c0:e8:c3:ff:a1:fa:27:bb:4b:b8:9f:fd:80:11:69:
a1:dc:72:87:74:5b:7a:06:ec:54:88:ac:07:35:e9:24:7f:de:
07:76:d4:7f:fa:1d:ed:e6:e0:51:b1:42:21:df:b3:a1:3d:c8:
33:9a:bf:1c:e5:20:2e:49:ca:45:20:e6:ca:06:8f:77:d6:ed:
48:a7:16:0c:30:c7:ee:69:ca:54:d2:23:40:a6:21:c2:cc:eb:
16:8a:88:65:4d:23:b5:6d:de:12:4b:10:a9:21:de:8d:97:c8:
b4:1d:6e:bf:fc:80:c9:af:d8:8a:d2:1b:a5:e2:0c:94:1d:95:
14:ba:c9:00:b5:36:50:1b:74:49:04:c3:11:ac:63:c1:1e:a6:
b2:f9:8f:00:64:85:1e:34:ec:dd:c6:b6:12:9d:8a:b7:c2:e4:
bd:9b:ff:42
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZZ+I7GuvKsDBZfPBAkh2vBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwNDI4MjA0MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2U2NDExNDNhODU3YmMxNDdiMDliYzI0NTU4NTkxZDZmNTZiODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tT6cGKdARpEfwhDLv4oWAhL+5+k
/82nNtbfrCrAFOlNPWYZ6lgLBpsffkyF92cH8lym4DP4FMKWdFbJtQQZjPfnnbXO
Xqp1vl5mOJUvbggj1jpMQiyns3CJgCS3zyTV7/PtdSPaHkjQfveBHBU2a9vsayPm
um22l4/XHUeHh1wmBFu/pbocX5hkQuF97SurdmrN8i3puPxhJIHwpNUIeA0zDpaE
Bx3DKVr74RYZLWtkTuWxwKue2ZQ560Uo/ZIJdLboaKntSnWdWHkS/mQcwQkXcjE4
++VdCtWv9ovEAk9YzE+VphTYxNfFvfZuLuxbPBtZuEheq1gXexH3TCWQSQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJfmQRQ6hXvBR7CbwkVYWR1vVrgMMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvbC1aQkZEcUZlOEZIc0p2Q1JWaFpIVzlXdUF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIgQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBrynP4nXfthd0/+ENCNte2alwni+Q7oDjwyvLT
qyMenxWkPKpP7K1Ae8FDq0UVmXUf2yyUZYx4va2sdIFIgH+wKUTRhtReyAl+xIbz
mt2cX/UJMnsjfdAfjoG8CtnA6MP/ofonu0u4n/2AEWmh3HKHdFt6BuxUiKwHNekk
f94HdtR/+h3t5uBRsUIh37OhPcgzmr8c5SAuScpFIObKBo931u1IpxYMMMfuacpU
0iNApiHCzOsWiohlTSO1bd4SSxCpId6Nl8i0HW6//IDJr9iK0hul4gyUHZUUuskA
tTZQG3RJBMMRrGPBHqay+Y8AZIUeNOzdxrYSnYq3wuS9m/9C
-----END CERTIFICATE-----
Generated at Sat May 10 17:05:22 2025 by rpki-client