Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/wtC2uqCyAY1EaN9QwS8TP1Kn0VI.roa
File: wtC2uqCyAY1EaN9QwS8TP1Kn0VI.roa (raw, json)
Hash identifier: db0oe3co74b5HA+JQAKN4n6gQCMTGZCJAz+X0/LsIjQ=
Subject key identifier: C2:D0:B6:BA:A0:B2:01:8D:44:68:DF:50:C1:2F:13:3F:52:A7:D1:52
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0194266B470C9CE3FF52D36DBE90B45D878D
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/wtC2uqCyAY1EaN9QwS8TP1Kn0VI.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10104
IP address blocks: 2a12:f8c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:47:0c:9c:e3:ff:52:d3:6d:be:90:b4:5d:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2d0b6baa0b2018d4468df50c12f133f52a7d152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:7d:c0:d6:18:31:2a:c0:38:5f:bc:f7:9b:
77:0a:f5:9d:c1:e2:c3:84:ca:f0:de:69:e9:87:28:
29:61:4c:b6:98:df:d1:ab:55:11:46:c9:84:39:39:
3e:a1:9f:e0:46:4c:84:a0:e3:78:78:a0:36:6c:08:
e8:38:10:a1:06:4d:09:82:2a:50:b5:c8:b0:bc:f9:
3c:ba:36:e5:9a:ff:f2:79:29:e8:c9:18:56:a8:4e:
39:c5:6c:39:a3:6d:79:be:d8:4e:ec:8c:b0:97:e2:
65:c9:84:be:23:7f:5d:74:9d:29:42:93:6f:f6:44:
55:0d:b7:d0:a1:3c:23:b2:61:ea:81:5e:fe:97:e7:
9d:d3:24:46:30:6e:ce:82:fb:22:74:db:fb:64:26:
8f:00:9d:2a:3d:3f:ba:d2:97:89:3a:72:f3:9b:9a:
8d:ce:33:70:bf:2b:7d:8f:aa:07:60:59:0d:c0:05:
47:27:4d:f7:f7:c1:58:0f:56:f9:ca:77:92:01:9e:
a9:cb:51:83:d0:7a:95:2d:61:ac:4d:ef:4a:5b:59:
80:1e:f2:b3:39:d3:76:20:b1:44:f7:1f:e7:06:0c:
55:84:62:31:37:36:5c:80:3a:3e:bf:e9:c9:b5:db:
de:8c:36:cd:77:f6:35:ae:43:d5:7e:4b:a1:a8:95:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:B6:BA:A0:B2:01:8D:44:68:DF:50:C1:2F:13:3F:52:A7:D1:52
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/wtC2uqCyAY1EaN9QwS8TP1Kn0VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c0::/32
Signature Algorithm: sha256WithRSAEncryption
03:5a:67:b0:65:c2:f4:a9:77:53:88:0c:30:71:f9:2b:a4:b1:
50:26:f8:01:86:60:5b:e9:f2:78:71:35:0f:ec:18:07:16:34:
ff:0c:69:2a:3b:70:72:80:8f:cd:d4:57:cc:2c:de:e3:a1:16:
9f:e3:3e:fd:df:86:a3:51:1a:15:fb:e1:9d:8b:d6:c8:00:f9:
40:e5:40:94:a5:7f:a8:cf:28:0e:79:53:29:be:76:63:d4:13:
88:86:57:fd:99:41:d6:94:4f:fb:1d:9d:34:2c:a1:14:59:86:
2a:7b:7e:b8:74:fc:77:b0:66:71:48:7f:87:44:34:1c:2a:19:
cf:3b:d6:68:fb:67:85:be:06:3c:6b:a8:65:88:13:f2:f4:a1:
2e:be:85:47:28:f9:91:2a:1c:92:40:e8:5f:6a:72:a6:08:da:
67:a9:e5:f7:b7:eb:e8:85:97:e0:04:f7:82:24:5c:6f:f4:3d:
a1:70:d8:96:55:75:e9:f7:6a:4c:38:10:0b:fa:31:08:19:5f:
4c:33:74:fc:67:89:c7:46:33:7a:d0:b6:e4:03:49:51:a8:fd:
1e:a4:dc:18:6e:65:d5:bc:71:3d:64:05:65:1b:62:06:85:f4:
d6:df:2c:86:fa:97:3b:98:83:40:04:48:78:06:84:db:17:36:
f1:6b:f3:1f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQma0cMnOP/UtNtvpC0XYeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjUwMTAyMDk0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmQwYjZiYWEwYjIwMThkNDQ2OGRmNTBjMTJmMTMzZjUyYTdkMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H99wNYYMSrAOF+895t3CvWdweLD
hMrw3mnphygpYUy2mN/Rq1URRsmEOTk+oZ/gRkyEoON4eKA2bAjoOBChBk0JgipQ
tciwvPk8ujblmv/yeSnoyRhWqE45xWw5o215vthO7Iywl+JlyYS+I39ddJ0pQpNv
9kRVDbfQoTwjsmHqgV7+l+ed0yRGMG7OgvsidNv7ZCaPAJ0qPT+60peJOnLzm5qN
zjNwvyt9j6oHYFkNwAVHJ03398FYD1b5yneSAZ6py1GD0HqVLWGsTe9KW1mAHvKz
OdN2ILFE9x/nBgxVhGIxNzZcgDo+v+nJtdvejDbNd/Y1rkPVfkuhqJXTSQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMLQtrqgsgGNRGjfUMEvEz9Sp9FSMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvd3RDMnVxQ3lBWTFFYU45UXdTOFRQMUtuMFZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhL4wDAN
BgkqhkiG9w0BAQsFAAOCAQEAA1pnsGXC9Kl3U4gMMHH5K6SxUCb4AYZgW+nyeHE1
D+wYBxY0/wxpKjtwcoCPzdRXzCze46EWn+M+/d+Go1EaFfvhnYvWyAD5QOVAlKV/
qM8oDnlTKb52Y9QTiIZX/ZlB1pRP+x2dNCyhFFmGKnt+uHT8d7BmcUh/h0Q0HCoZ
zzvWaPtnhb4GPGuoZYgT8vShLr6FRyj5kSockkDoX2pypgjaZ6nl97fr6IWX4AT3
giRcb/Q9oXDYllV16fdqTDgQC/oxCBlfTDN0/GeJx0YzetC25ANJUaj9HqTcGG5l
1bxxPWQFZRtiBoX01t8shvqXO5iDQARIeAaE2xc28WvzHw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:47:14 2025 by rpki-client