Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wIJzurEZu5ljpd2voxRvOici9Tg.roa
File: wIJzurEZu5ljpd2voxRvOici9Tg.roa (raw, json)
Hash identifier: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=
Subject key identifier: C0:82:73:BA:B1:19:BB:99:63:A5:DD:AF:A3:14:6F:3A:27:22:F5:38
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAF8B6A19D638BF127C68C4E817BCF
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wIJzurEZu5ljpd2voxRvOici9Tg.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60614
IP address blocks: 2a0f:607:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f8:b6:a1:9d:63:8b:f1:27:c6:8c:4e:81:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c08273bab119bb9963a5ddafa3146f3a2722f538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:40:2b:44:80:ce:cb:a1:61:55:66:de:c1:
d5:59:5d:0f:fd:3d:ac:57:c9:20:d2:84:d3:55:e2:
f4:8d:40:95:ed:a9:01:35:c3:9f:f5:fe:b6:c9:44:
b5:ca:bb:6d:71:3b:36:57:ac:43:f7:af:0d:cc:d3:
65:7f:b6:9d:46:e3:a6:db:ee:fd:b1:e7:84:a9:9f:
f7:d4:81:9b:6e:f9:56:3d:7d:c3:05:8e:47:b2:60:
08:3b:61:3f:c5:e1:13:b1:01:c3:af:42:dc:4d:e3:
aa:49:22:49:fa:9c:0e:5a:c1:40:37:02:24:d7:b1:
44:31:00:af:95:d3:4e:9f:ed:ce:9f:6f:53:a4:a6:
52:c8:56:63:ee:65:b2:e7:3f:e3:5c:53:b6:11:23:
21:6b:ef:b0:a6:a1:58:bd:35:b0:90:96:87:85:05:
75:5d:4d:ad:f6:38:6c:33:86:04:c8:3a:ef:50:75:
d5:0d:2b:47:e0:ac:3f:92:16:a1:c7:37:42:8f:3c:
23:77:4d:18:ee:c5:7b:e9:cc:96:d3:52:ee:c4:3a:
6e:15:37:33:b7:17:30:68:67:11:4e:de:07:77:ae:
0b:b1:3e:7b:83:c9:fb:79:2f:59:c2:bc:83:42:20:
be:ef:08:5e:6c:53:a3:1e:e4:9a:07:b9:14:a9:05:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:82:73:BA:B1:19:BB:99:63:A5:DD:AF:A3:14:6F:3A:27:22:F5:38
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/wIJzurEZu5ljpd2voxRvOici9Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1000::/40
Signature Algorithm: sha256WithRSAEncryption
2f:d6:32:47:85:e1:cf:86:96:c7:c6:e0:53:7e:5f:b0:a0:b2:
a6:2c:30:13:52:5d:8e:e1:14:2f:a2:7a:9e:43:e6:7d:e2:2f:
99:9f:03:bb:92:6c:4c:05:11:a7:b5:3b:e8:0c:3d:f9:5c:26:
2a:8e:57:61:af:92:4a:d9:d7:a6:d5:28:c4:de:e6:55:89:b8:
e6:3f:43:fa:c9:86:1f:33:66:2e:19:76:c9:dc:6f:62:f5:83:
c0:27:7e:97:25:9a:3e:e8:5d:8b:e8:13:31:36:0e:f1:3a:3f:
11:08:75:d0:a3:7f:4e:06:7e:08:9d:16:64:3d:b2:78:a5:30:
3a:af:17:34:34:17:cb:84:ab:cd:7b:39:63:c1:5f:0f:f2:a5:
c0:d4:5c:b4:a7:32:2d:c0:df:30:17:75:4f:af:da:af:3c:f7:
15:ec:f9:93:14:d4:49:fb:19:e7:99:5a:6e:b4:32:94:e7:1c:
36:8d:51:6b:e7:76:2f:88:81:2b:e4:e6:7d:2c:1b:b4:6e:48:
5c:83:96:d5:c5:0e:c5:b0:43:68:c6:3e:10:de:f5:81:dc:d7:
aa:e9:6a:ff:05:4d:7b:04:79:f6:1e:ee:cc:e1:5d:35:0d:f6:
e1:32:b6:15:22:19:c1:a3:49:35:55:24:17:9a:19:e8:d2:3b:
ae:1c:ba:46
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQi+vi2oZ1ji/EnxoxOgXvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5
NWRmYzYwHhcNMjUwMTAxMTc0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDgyNzNiYWIxMTliYjk5NjNhNWRkYWZhMzE0NmYzYTI3MjJmNTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCFAK0SAzsuhYVVm3sHVWV0P/T2s
V8kg0oTTVeL0jUCV7akBNcOf9f62yUS1yrttcTs2V6xD968NzNNlf7adRuOm2+79
seeEqZ/31IGbbvlWPX3DBY5HsmAIO2E/xeETsQHDr0LcTeOqSSJJ+pwOWsFANwIk
17FEMQCvldNOn+3On29TpKZSyFZj7mWy5z/jXFO2ESMha++wpqFYvTWwkJaHhQV1
XU2t9jhsM4YEyDrvUHXVDStH4Kw/khahxzdCjzwjd00Y7sV76cyW01LuxDpuFTcz
txcwaGcRTt4Hd64LsT57g8n7eS9ZwryDQiC+7whebFOjHuSaB7kUqQWw0wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMCCc7qxGbuZY6Xdr6MUbzonIvU4MB8GA1UdIwQY
MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut
YTM0NzU2NDE1OGY4LzEvd0lKenVyRVp1NWxqcGQydm94UnZPaWNpOVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4
LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg8GBxAw
DQYJKoZIhvcNAQELBQADggEBAC/WMkeF4c+GlsfG4FN+X7CgsqYsMBNSXY7hFC+i
ep5D5n3iL5mfA7uSbEwFEae1O+gMPflcJiqOV2GvkkrZ16bVKMTe5lWJuOY/Q/rJ
hh8zZi4Zdsncb2L1g8Anfpclmj7oXYvoEzE2DvE6PxEIddCjf04GfgidFmQ9snil
MDqvFzQ0F8uEq817OWPBXw/ypcDUXLSnMi3A3zAXdU+v2q889xXs+ZMU1En7GeeZ
Wm60MpTnHDaNUWvndi+IgSvk5n0sG7RuSFyDltXFDsWwQ2jGPhDe9YHc16rpav8F
TXsEefYe7szhXTUN9uEythUiGcGjSTVVJBeaGejSO64cukY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:45 2025 by rpki-client