Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/d6jjIfZpoU5dviCc8eI-CowvAk0.roa
File: d6jjIfZpoU5dviCc8eI-CowvAk0.roa (raw, json)
Hash identifier: +Apm0894AkkpHXh4slVvz3Yax14eHhFmKvTjWItkY6I=
Subject key identifier: 77:A8:E3:21:F6:69:A1:4E:5D:BE:20:9C:F1:E2:3E:0A:8C:2F:02:4D
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C727C327B8C7051038176227F614D
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/d6jjIfZpoU5dviCc8eI-CowvAk0.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214055
IP address blocks: 2a14:67c1:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:72:7c:32:7b:8c:70:51:03:81:76:22:7f:61:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77a8e321f669a14e5dbe209cf1e23e0a8c2f024d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:86:62:5f:08:25:d3:36:5e:9a:65:5d:3b:
79:e2:64:05:50:56:56:f8:fe:98:c0:9a:a9:81:af:
ac:d3:3a:21:50:0c:48:8b:8b:ca:af:84:73:b6:c9:
94:12:3e:bd:c5:b5:5b:83:b3:61:1c:54:12:22:f8:
34:7d:84:ae:a9:9d:b2:d9:d7:2a:d2:f4:7a:8d:3b:
ac:7d:5f:6d:7f:d9:9b:a2:a1:bc:49:eb:45:9a:32:
f7:d2:e1:6b:8c:66:cb:0f:87:a2:df:70:70:fe:ae:
bf:46:14:5c:19:58:79:ff:ee:70:e1:8c:2f:b1:a8:
84:86:78:68:fc:ec:dd:78:a0:c1:bd:ac:45:b6:ae:
52:3e:2c:34:2d:7c:4c:42:ca:be:17:79:5a:fa:7a:
8a:e7:a0:d4:5c:8c:31:1d:d7:1c:3e:4a:f4:71:09:
8b:87:a6:88:a0:66:9d:35:f4:df:ae:3e:7e:fe:11:
49:18:85:e5:e3:ba:36:94:da:ab:92:cd:33:e7:2f:
01:85:58:7d:e6:29:cb:8e:dd:3d:9e:d6:2b:70:3a:
51:2f:f2:39:ac:78:83:1e:6b:af:48:c8:f7:4a:69:
2f:d4:22:c7:25:7a:c4:44:21:8d:ba:28:fc:e5:bf:
55:6b:c8:6d:f9:8d:c3:ea:31:7b:ef:20:e0:4a:18:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A8:E3:21:F6:69:A1:4E:5D:BE:20:9C:F1:E2:3E:0A:8C:2F:02:4D
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/d6jjIfZpoU5dviCc8eI-CowvAk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:300::/40
Signature Algorithm: sha256WithRSAEncryption
63:a1:ba:b1:77:d2:70:c7:ee:18:d2:78:97:d5:54:e5:42:37:
f2:7b:17:b6:b6:76:09:29:2d:aa:73:ac:1e:43:8a:2f:06:25:
8b:69:25:30:48:36:7d:1a:65:3c:9c:04:33:0c:5a:b2:40:e5:
59:37:dd:f1:b9:4b:58:dd:cb:de:38:ea:5a:e3:a1:c3:bc:7d:
f6:5a:c1:c6:99:3b:d0:a4:d6:5f:37:12:a8:49:a8:51:e4:e2:
ca:66:b8:45:64:1b:82:8a:f7:04:1d:99:58:f5:f3:0c:92:04:
2f:82:4e:f8:0d:00:ae:75:95:89:a2:86:11:ab:21:7f:19:7a:
57:35:97:0f:fc:55:9e:43:cd:ac:f9:e2:2b:dc:34:dd:2c:9d:
0f:e6:d2:b7:4c:ff:28:b6:f8:e9:0c:9e:aa:4d:9b:f8:79:f6:
e3:ff:41:e9:17:84:3c:b2:a3:fc:53:9d:81:f3:e9:1c:89:9f:
5b:61:c1:3d:35:8e:21:b5:98:3d:1b:7b:17:cd:28:32:94:cf:
19:53:c1:0a:38:19:42:26:71:72:33:b6:1d:11:63:89:45:95:
be:06:d8:de:3b:4b:0f:a6:30:61:11:87:71:94:5a:8c:76:f9:
e1:01:fd:fe:64:cd:96:6d:15:e1:6c:8e:e7:c8:e8:28:d7:49:
c2:68:5d:b7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQfjHJ8MnuMcFEDgXYif2FNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll
NGUwZTAwHhcNMjUwMTAxMDE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2E4ZTMyMWY2NjlhMTRlNWRiZTIwOWNmMWUyM2UwYThjMmYwMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/6GYl8IJdM2XpplXTt54mQFUFZW
+P6YwJqpga+s0zohUAxIi4vKr4RztsmUEj69xbVbg7NhHFQSIvg0fYSuqZ2y2dcq
0vR6jTusfV9tf9mboqG8SetFmjL30uFrjGbLD4ei33Bw/q6/RhRcGVh5/+5w4Ywv
saiEhnho/OzdeKDBvaxFtq5SPiw0LXxMQsq+F3la+nqK56DUXIwxHdccPkr0cQmL
h6aIoGadNfTfrj5+/hFJGIXl47o2lNqrks0z5y8BhVh95inLjt09ntYrcDpRL/I5
rHiDHmuvSMj3Smkv1CLHJXrERCGNuij85b9Va8ht+Y3D6jF77yDgShjyTQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHeo4yH2aaFOXb4gnPHiPgqMLwJNMB8GA1UdIwQY
MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt
ZjZjYzRlZjBmN2RmLzEvZDZqaklmWnBvVTVkdmlDYzhlSS1Db3d2QWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm
LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRnwQMw
DQYJKoZIhvcNAQELBQADggEBAGOhurF30nDH7hjSeJfVVOVCN/J7F7a2dgkpLapz
rB5Dii8GJYtpJTBINn0aZTycBDMMWrJA5Vk33fG5S1jdy9446lrjocO8ffZawcaZ
O9Ck1l83EqhJqFHk4spmuEVkG4KK9wQdmVj18wySBC+CTvgNAK51lYmihhGrIX8Z
elc1lw/8VZ5Dzaz54ivcNN0snQ/m0rdM/yi2+OkMnqpNm/h59uP/QekXhDyyo/xT
nYHz6RyJn1thwT01jiG1mD0bexfNKDKUzxlTwQo4GUImcXIzth0RY4lFlb4G2N47
Sw+mMGERh3GUWox2+eEB/f5kzZZtFeFsjufI6CjXScJoXbc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:42 2025 by rpki-client