Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/00VNIWPkHk-eYeOCQl7mONDXy6M.roa
File: 00VNIWPkHk-eYeOCQl7mONDXy6M.roa (raw, json)
Hash identifier: pDq1pZp3C4Sqn1X3rX/G/la9ae1lH4HMURDoELo17/o=
Subject key identifier: D3:45:4D:21:63:E4:1E:4F:9E:61:E3:82:42:5E:E6:38:D0:D7:CB:A3
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0195C244E4E12AAED066A7C35AED1BA4484B
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/00VNIWPkHk-eYeOCQl7mONDXy6M.roa
Signing time: Sun 23 Mar 2025 09:10:49 +0000
ROA not before: Sun 23 Mar 2025 09:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210107
IP address blocks: 2a05:d740::/32 maxlen: 32
2a05:d741::/32 maxlen: 32
2a05:d742::/32 maxlen: 32
2a05:d743::/32 maxlen: 32
2a05:d744::/32 maxlen: 32
2a05:d745::/32 maxlen: 32
2a05:d746::/32 maxlen: 32
2a05:d747::/32 maxlen: 32
2a06:e901::/32 maxlen: 32
2a06:e902::/32 maxlen: 32
2a06:e903::/32 maxlen: 32
2a06:e904::/32 maxlen: 32
2a06:e905::/32 maxlen: 32
2a06:e906::/32 maxlen: 32
2a06:e907::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c2:44:e4:e1:2a:ae:d0:66:a7:c3:5a:ed:1b:a4:48:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Mar 23 09:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3454d2163e41e4f9e61e382425ee638d0d7cba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:b5:ac:d4:8d:44:22:e1:92:37:74:6a:55:
3e:96:cc:9c:0a:de:06:9e:d3:ef:a3:f4:d8:61:50:
25:aa:e9:8c:e4:57:ec:86:6e:55:c9:a7:d8:30:0d:
a7:1e:c6:6f:f5:56:74:46:77:5a:e5:4c:00:6a:81:
40:17:91:ce:55:cc:9e:da:5c:7e:46:f6:7c:33:de:
c9:fb:5a:23:47:70:0b:06:92:bf:28:a7:3c:e6:88:
6d:3b:6e:05:2e:c8:97:f9:a1:f1:28:1b:b1:31:72:
0d:4d:65:7e:08:1d:eb:fd:68:a4:70:8d:92:1d:26:
5b:89:b7:06:a7:a4:5b:2f:f1:d9:27:d2:a1:95:43:
09:27:49:55:5f:b2:e7:f0:f3:c9:35:11:b6:69:e8:
63:dc:30:c3:c5:de:b4:d4:85:ef:97:81:f3:2c:00:
45:af:4a:50:04:24:e5:ef:48:15:50:eb:74:6b:b6:
9f:74:41:ee:6c:47:72:0e:b0:98:b9:68:bc:2a:ca:
6f:a9:9c:0f:44:15:7c:e3:2c:b8:dd:87:09:00:6a:
71:9b:4d:03:cb:ed:90:d4:0b:ed:90:80:69:df:73:
50:d9:87:90:fb:da:a5:c5:99:df:59:58:1a:71:db:
b5:18:c6:56:d5:d7:e4:9a:00:b1:a1:64:f4:b5:b7:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:4D:21:63:E4:1E:4F:9E:61:E3:82:42:5E:E6:38:D0:D7:CB:A3
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/00VNIWPkHk-eYeOCQl7mONDXy6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d740::/29
2a06:e901::-2a06:e907:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:e9:21:b0:f4:69:c8:43:01:ae:ff:ad:7a:39:96:62:74:6b:
84:c6:17:72:57:9d:78:8b:34:ae:04:45:f3:80:ad:7c:c6:cb:
f8:79:12:40:25:77:c0:8b:6f:fc:70:63:6c:4c:d4:60:48:b1:
42:4f:74:5d:89:d3:d9:fd:fa:e4:07:5a:ac:04:82:de:74:c1:
a0:f5:25:ae:c4:48:1a:35:0e:73:d0:78:99:f5:29:28:55:b5:
e9:99:4b:48:0e:2f:3e:db:64:99:43:82:16:1c:e9:7c:c0:32:
6c:b5:e5:e3:ec:03:0a:78:10:6c:94:1c:80:3d:d9:e7:7b:48:
86:c3:40:b7:9a:c2:a6:e8:ca:bc:d0:a2:9c:81:26:be:36:ef:
57:53:93:df:db:49:16:b6:5c:dd:45:86:f8:cc:52:1a:9b:3e:
bd:6a:7c:1c:1b:4e:58:e7:99:cd:36:f4:7f:21:82:2d:06:b5:
44:39:65:b6:42:ac:bd:5d:5c:11:aa:a3:40:7c:05:b7:fc:be:
c7:66:0a:a6:3f:58:08:56:7c:17:62:08:9b:57:b7:87:5a:6f:
b1:72:76:93:de:9e:53:c0:33:50:0e:9c:17:8c:d5:09:7f:e0:
47:c4:1b:0c:9d:80:52:a2:cc:1b:10:b8:4d:64:41:d2:57:a7:
2e:77:c7:46
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZXCROThKq7QZqfDWu0bpEhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjUwMzIzMDkxMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQ1NGQyMTYzZTQxZTRmOWU2MWUzODI0MjVlZTYzOGQwZDdjYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhO1rNSNRCLhkjd0alU+lsycCt4G
ntPvo/TYYVAlqumM5Ffshm5VyafYMA2nHsZv9VZ0Rnda5UwAaoFAF5HOVcye2lx+
RvZ8M97J+1ojR3ALBpK/KKc85ohtO24FLsiX+aHxKBuxMXINTWV+CB3r/WikcI2S
HSZbibcGp6RbL/HZJ9KhlUMJJ0lVX7Ln8PPJNRG2aehj3DDDxd601IXvl4HzLABF
r0pQBCTl70gVUOt0a7afdEHubEdyDrCYuWi8KspvqZwPRBV84yy43YcJAGpxm00D
y+2Q1AvtkIBp33NQ2YeQ+9qlxZnfWVgacdu1GMZW1dfkmgCxoWT0tbeNVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNNFTSFj5B5PnmHjgkJe5jjQ18ujMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvMDBWTklXUGtIay1lWWVPQ1FsN21PTkRYeTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXAwUDKgXXQDAO
AwUAKgbpAQMFAyoG6QAwDQYJKoZIhvcNAQELBQADggEBAFfpIbD0achDAa7/rXo5
lmJ0a4TGF3JXnXiLNK4ERfOArXzGy/h5EkAld8CLb/xwY2xM1GBIsUJPdF2J09n9
+uQHWqwEgt50waD1Ja7ESBo1DnPQeJn1KShVtemZS0gOLz7bZJlDghYc6XzAMmy1
5ePsAwp4EGyUHIA92ed7SIbDQLeawqboyrzQopyBJr4271dTk9/bSRa2XN1FhvjM
UhqbPr1qfBwbTljnmc029H8hgi0GtUQ5ZbZCrL1dXBGqo0B8Bbf8vsdmCqY/WAhW
fBdiCJtXt4dab7FydpPenlPAM1AOnBeM1Ql/4EfEGwydgFKizBsQuE1kQdJXpy53
x0Y=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:36:39 2025 by rpki-client