Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/FJ0LM5QkppmLkXmvBjJZbmHVnO4.roa
File: FJ0LM5QkppmLkXmvBjJZbmHVnO4.roa (raw, json)
Hash identifier: AH4wLU/NNdSpA7PMHLLsRZ3gLPqLHQmT2fjdQWziC7U=
Subject key identifier: 14:9D:0B:33:94:24:A6:99:8B:91:79:AF:06:32:59:6E:61:D5:9C:EE
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 0196A602E83CCCB5E518F26C197856A979C2
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/FJ0LM5QkppmLkXmvBjJZbmHVnO4.roa
Signing time: Tue 06 May 2025 14:32:10 +0000
ROA not before: Tue 06 May 2025 14:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a0d:adc6::/32 maxlen: 32
2a11:d707::/32 maxlen: 32
2a12:41c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:02:e8:3c:cc:b5:e5:18:f2:6c:19:78:56:a9:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: May 6 14:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=149d0b339424a6998b9179af0632596e61d59cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:5e:4a:db:e6:d9:e4:cf:d4:c9:ac:38:ec:
25:a7:ad:0d:4a:6f:f9:6a:47:6d:c9:20:d5:1a:ce:
83:f1:0a:8d:5e:11:7c:26:84:b8:79:ec:88:6a:50:
91:1d:e9:ca:dd:b7:69:ca:ec:02:88:26:b1:7e:d9:
6f:a3:fa:cf:31:8a:c2:f7:99:fe:69:db:6d:f6:64:
8f:a7:e7:34:67:00:c9:cc:fe:c0:1f:23:9c:98:7a:
5e:0d:75:83:83:3a:c4:6d:ef:25:65:70:e5:19:1e:
05:de:6a:bc:0c:c5:fc:40:f8:5a:23:41:b5:e2:fa:
d8:10:c5:e1:f1:f7:a1:ef:93:08:5c:4b:13:88:9a:
5f:c6:2b:ce:4a:2f:9d:eb:60:60:d9:f4:e1:f4:f6:
f9:3f:ea:93:46:b1:27:ee:70:15:d5:dc:bc:68:a6:
78:2b:60:70:7f:d4:cc:b3:65:45:f1:8b:a3:e8:12:
8d:bb:59:39:68:e8:90:90:d8:82:2a:03:42:16:7d:
b3:32:61:a6:d5:6a:81:6f:21:d5:92:bc:62:40:fb:
6f:29:90:11:4b:76:6e:83:c9:e2:37:9c:f3:af:2d:
b6:d1:a2:0c:62:57:c2:6e:a3:a6:83:b2:bc:5b:f1:
42:f7:3b:ac:19:9c:6a:bb:ba:52:b3:a4:c5:f5:fe:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9D:0B:33:94:24:A6:99:8B:91:79:AF:06:32:59:6E:61:D5:9C:EE
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/FJ0LM5QkppmLkXmvBjJZbmHVnO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:adc6::/32
2a11:d707::/32
2a12:41c2::/32
Signature Algorithm: sha256WithRSAEncryption
b3:e8:04:02:62:dd:78:9e:5d:33:75:11:df:96:55:2e:2b:6a:
8e:6d:a0:0b:98:37:85:19:7d:21:5e:db:37:7d:41:51:5d:3c:
ba:a5:20:a4:f6:63:d4:cb:bf:3c:91:ab:93:d1:ed:53:13:c9:
dd:9a:14:da:08:b9:5b:1b:a7:fa:48:5b:de:fe:81:9e:f8:67:
37:3a:a8:8d:59:70:2c:b6:f2:c0:41:ce:ff:a7:89:b8:a8:56:
2d:b4:0b:17:be:49:a1:e2:c7:0a:d9:76:45:47:2d:66:51:b6:
90:3f:22:54:1e:03:82:52:c5:72:d4:65:ae:4e:1d:2a:6a:8d:
6a:d0:e0:64:fa:89:1b:20:82:f6:c5:b4:4a:9c:a3:e5:4f:39:
51:a0:7f:76:0f:ec:76:82:ef:5a:06:71:28:d0:55:3b:12:66:
16:9a:71:5d:96:24:b6:da:95:c4:42:67:2d:65:d6:d3:5b:c8:
3c:bc:70:c6:f3:c0:0e:a1:6e:62:27:f7:ba:42:45:4e:10:d3:
af:02:87:ec:74:70:82:78:48:f7:87:a7:41:b5:0e:15:1a:78:
ae:9b:63:c2:b9:15:e3:62:92:60:84:aa:d7:57:0e:c4:e7:4f:
74:d6:d0:38:69:1f:69:b8:c1:7d:db:85:dd:1f:66:96:e5:da:
17:3f:ba:99
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZamAug8zLXlGPJsGXhWqXnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk
NTBjM2YwHhcNMjUwNTA2MTQzMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDlkMGIzMzk0MjRhNjk5OGI5MTc5YWYwNjMyNTk2ZTYxZDU5Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzleStvm2eTP1MmsOOwlp60NSm/5
akdtySDVGs6D8QqNXhF8JoS4eeyIalCRHenK3bdpyuwCiCaxftlvo/rPMYrC95n+
adtt9mSPp+c0ZwDJzP7AHyOcmHpeDXWDgzrEbe8lZXDlGR4F3mq8DMX8QPhaI0G1
4vrYEMXh8feh75MIXEsTiJpfxivOSi+d62Bg2fTh9Pb5P+qTRrEn7nAV1dy8aKZ4
K2Bwf9TMs2VF8Yuj6BKNu1k5aOiQkNiCKgNCFn2zMmGm1WqBbyHVkrxiQPtvKZAR
S3Zug8niN5zzry220aIMYlfCbqOmg7K8W/FC9zusGZxqu7pSs6TF9f4eIwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBSdCzOUJKaZi5F5rwYyWW5h1ZzuMB8GA1UdIwQY
MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt
OWZjZWI0NWQ2ZmRiLzEvRkowTE01UWtwcG1Ma1htdkJqSlpibUhWbk80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi
LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKg2txgMF
ACoR1wcDBQAqEkHCMA0GCSqGSIb3DQEBCwUAA4IBAQCz6AQCYt14nl0zdRHfllUu
K2qObaALmDeFGX0hXts3fUFRXTy6pSCk9mPUy788kauT0e1TE8ndmhTaCLlbG6f6
SFve/oGe+Gc3OqiNWXAstvLAQc7/p4m4qFYttAsXvkmh4scK2XZFRy1mUbaQPyJU
HgOCUsVy1GWuTh0qao1q0OBk+okbIIL2xbRKnKPlTzlRoH92D+x2gu9aBnEo0FU7
EmYWmnFdliS22pXEQmctZdbTW8g8vHDG88AOoW5iJ/e6QkVOENOvAofsdHCCeEj3
h6dBtQ4VGnium2PCuRXjYpJghKrXVw7E50901tA4aR9puMF924XdH2aW5doXP7qZ
-----END CERTIFICATE-----
Generated at Thu May 8 15:23:35 2025 by rpki-client