Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/VnpwcypF5ODc6lvqbRhNE3ybCw4.roa
File: VnpwcypF5ODc6lvqbRhNE3ybCw4.roa (raw, json)
Hash identifier: drIuURHVLM+Rrj256cdJyU4lGxE6mwl5FZTlOzb2kc0=
Subject key identifier: 56:7A:70:73:2A:45:E4:E0:DC:EA:5B:EA:6D:18:4D:13:7C:9B:0B:0E
Certificate issuer: /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial: 019421B24CD429F7E234F4329FE74065AE9D
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/VnpwcypF5ODc6lvqbRhNE3ybCw4.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 2a13:e2c4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4c:d4:29:f7:e2:34:f4:32:9f:e7:40:65:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567a70732a45e4e0dcea5bea6d184d137c9b0b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:c2:a4:51:11:02:60:0d:ad:cc:73:c4:d4:
a7:9a:90:f7:c9:cf:a5:f5:33:ca:04:99:a9:dd:54:
16:68:fb:23:2b:d8:a0:8d:b5:d6:1b:ab:9a:91:0f:
2b:59:80:3b:8b:6a:0c:53:e3:cd:f0:83:46:ff:c3:
15:58:ce:d6:87:21:19:7a:8a:72:b6:a7:f2:bf:c0:
20:47:5b:89:f8:54:20:a2:2b:70:9e:11:56:6a:08:
ea:2b:c6:73:ba:da:7f:f2:c2:05:88:f7:7b:34:f7:
7e:02:6b:33:e6:19:43:b6:5f:c8:d8:1d:37:0b:20:
06:ec:e9:da:12:c0:d0:ca:a1:bf:6b:35:59:f0:e6:
ab:29:0c:16:a2:02:fe:83:88:96:da:6b:29:af:63:
6f:a0:93:c5:c8:16:53:44:a8:73:eb:c8:e4:e5:de:
9e:7d:d1:3d:cd:15:86:df:82:21:5c:ba:b6:2f:80:
1b:cc:9e:fc:51:40:03:6d:01:33:f6:4c:e2:b8:87:
63:a5:40:25:29:e9:d6:d8:f2:36:93:65:f8:a7:09:
80:2d:d6:68:14:7d:07:44:6d:82:e4:db:05:37:24:
ee:a3:ba:55:e7:9b:78:4c:b2:b5:02:9f:eb:ac:64:
97:fb:b8:4d:d6:9d:e0:db:06:00:d5:11:7d:6b:6d:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7A:70:73:2A:45:E4:E0:DC:EA:5B:EA:6D:18:4D:13:7C:9B:0B:0E
X509v3 Authority Key Identifier:
keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/VnpwcypF5ODc6lvqbRhNE3ybCw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e2c4::/32
Signature Algorithm: sha256WithRSAEncryption
34:70:19:59:43:9e:a9:35:22:e1:1a:d5:31:02:78:10:fb:14:
9d:58:ea:6b:27:ce:02:a1:5a:3a:78:64:6c:ab:ae:e1:ab:ca:
3c:8b:16:2d:db:06:b3:79:16:3e:bf:60:b2:50:7a:a1:90:30:
f9:12:aa:c0:e7:07:ae:d9:81:62:e8:12:af:ac:25:62:7c:95:
45:32:fa:d5:20:af:97:e9:28:1c:96:5a:2e:99:56:e9:64:ae:
4a:f0:61:c2:7e:2b:b4:ad:17:8c:d2:fc:bf:8b:e5:d1:3e:4e:
c2:8f:83:df:69:fd:d7:08:d4:4a:01:b0:42:89:c3:67:0c:4c:
73:25:5f:47:aa:22:9e:a1:85:74:e4:0a:6a:c3:17:a0:ec:bc:
05:36:e1:ff:77:cb:93:93:4c:0f:02:3f:c6:5f:d0:1c:62:f7:
c3:68:04:af:d9:92:dd:86:a4:6b:ad:fe:e3:98:4b:df:ab:40:
1c:45:c3:bc:1d:f6:f9:0f:16:42:00:98:54:9a:a0:06:38:ae:
a2:a2:c8:c5:b3:3d:cd:e7:c0:40:8b:c6:8f:87:14:0d:3d:8c:
34:ff:81:2c:86:4f:88:16:de:49:83:26:88:a3:3f:2f:ba:36:
0d:63:6e:2f:e5:94:3a:55:3b:7a:9d:08:41:a0:b0:d3:1b:d7:
d0:c9:4e:cc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQhskzUKffiNPQyn+dAZa6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTUwZDQ2M2MzMjY2N2M2YTkyOTZjOGQyNWJiMzgzY2Y0
MTljNjEwHhcNMjUwMTAxMTE0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjdhNzA3MzJhNDVlNGUwZGNlYTViZWE2ZDE4NGQxMzdjOWIwYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjrCpFERAmANrcxzxNSnmpD3yc+l
9TPKBJmp3VQWaPsjK9igjbXWG6uakQ8rWYA7i2oMU+PN8ING/8MVWM7WhyEZeopy
tqfyv8AgR1uJ+FQgoitwnhFWagjqK8Zzutp/8sIFiPd7NPd+Amsz5hlDtl/I2B03
CyAG7OnaEsDQyqG/azVZ8OarKQwWogL+g4iW2mspr2NvoJPFyBZTRKhz68jk5d6e
fdE9zRWG34IhXLq2L4AbzJ78UUADbQEz9kziuIdjpUAlKenW2PI2k2X4pwmALdZo
FH0HRG2C5NsFNyTuo7pV55t4TLK1Ap/rrGSX+7hN1p3g2wYA1RF9a23iJQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFZ6cHMqReTg3Opb6m0YTRN8mwsOMB8GA1UdIwQY
MBaAFEIVDUY8MmZ8apKWyNJbs4PPQZxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhVTlJqd3labnhxa3BiSTBsdXpnODlCbkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wNzlmNjctNThmNy00YmQ4LWI3ZGIt
YmUyNjdlNmExNmQ4LzEvVm5wd2N5cEY1T0RjNmx2cWJSaE5FM3liQ3c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wNzlmNjctNThmNy00YmQ4LWI3ZGItYmUyNjdlNmExNmQ4
LzEvUWhVTlJqd3labnhxa3BiSTBsdXpnODlCbkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPixDAN
BgkqhkiG9w0BAQsFAAOCAQEANHAZWUOeqTUi4RrVMQJ4EPsUnVjqayfOAqFaOnhk
bKuu4avKPIsWLdsGs3kWPr9gslB6oZAw+RKqwOcHrtmBYugSr6wlYnyVRTL61SCv
l+koHJZaLplW6WSuSvBhwn4rtK0XjNL8v4vl0T5Owo+D32n91wjUSgGwQonDZwxM
cyVfR6oinqGFdOQKasMXoOy8BTbh/3fLk5NMDwI/xl/QHGL3w2gEr9mS3Yaka63+
45hL36tAHEXDvB32+Q8WQgCYVJqgBjiuoqLIxbM9zefAQIvGj4cUDT2MNP+BLIZP
iBbeSYMmiKM/L7o2DWNuL+WUOlU7ep0IQaCw0xvX0MlOzA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:08:02 2025 by rpki-client