Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa
File: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (raw, json)
Hash identifier: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=
Subject key identifier: 6A:1B:C7:ED:5C:2C:44:4C:F9:44:4F:D9:15:DD:E4:23:17:A5:80:44
Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial: 01942067EC2D145989DBA3048517FE24CB41
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9066
IP address blocks: 62.89.160.0/19 maxlen: 24
212.68.64.0/19 maxlen: 24
213.252.128.0/18 maxlen: 24
2a01:ac00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ec:2d:14:59:89:db:a3:04:85:17:fe:24:cb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a1bc7ed5c2c444cf9444fd915dde42317a58044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:8e:ee:48:1e:ec:d2:43:0e:58:ad:40:60:
b2:86:c5:4a:91:15:42:a6:4a:8d:f3:a4:e9:c8:9d:
3f:5a:57:74:91:6d:49:c3:b3:03:6a:db:c6:81:67:
ca:72:ea:41:51:78:8e:c9:a0:63:34:4a:f0:39:32:
99:fa:ba:17:6f:5f:50:cb:34:51:f2:a0:85:aa:9a:
1e:fe:f4:96:41:91:60:6d:20:20:b5:04:e0:e2:d2:
ea:b5:eb:a0:a3:e7:a1:db:5c:d2:e5:2a:39:55:e3:
76:c1:19:36:c3:9e:f7:c6:c1:d4:81:0f:d6:c3:86:
77:fe:44:73:89:bb:d8:d5:32:ef:8c:2c:31:ba:0f:
c7:df:bb:16:2d:a5:9d:4c:07:9f:74:c9:28:07:d0:
b0:b1:e6:9c:37:9b:e8:20:7b:75:1f:f5:55:53:4e:
a9:32:a0:8d:1a:dc:fd:37:32:40:da:10:43:fe:6b:
d7:52:1a:ad:c3:8a:02:cb:0f:f4:4e:85:87:d3:b8:
aa:a6:8f:94:d9:9e:24:fb:34:e3:fe:2e:25:97:0e:
aa:0d:19:8d:3d:9a:31:cf:c5:7f:55:20:91:35:a8:
74:3a:25:f4:d2:67:66:5e:9c:4a:bc:43:50:f8:15:
a8:21:b0:17:d7:82:98:ca:6e:a0:1e:6e:05:f9:d4:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1B:C7:ED:5C:2C:44:4C:F9:44:4F:D9:15:DD:E4:23:17:A5:80:44
X509v3 Authority Key Identifier:
keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.160.0/19
212.68.64.0/19
213.252.128.0/18
IPv6:
2a01:ac00::/32
Signature Algorithm: sha256WithRSAEncryption
33:cc:2c:c8:88:54:a6:18:bc:4b:a3:f0:6c:33:66:35:85:10:
50:7f:9c:55:fe:9c:ba:2d:93:8e:50:61:f9:f6:76:2e:2c:56:
85:cd:55:c3:bc:26:88:53:7d:78:fc:86:24:f5:09:45:b5:ad:
93:7a:db:56:7e:18:df:99:2f:67:bb:6d:ef:a2:23:86:fd:b3:
e4:43:dc:e4:52:64:bc:c2:69:c0:b8:60:d2:03:d9:41:28:c1:
27:d9:fa:73:36:85:b2:e0:da:84:10:f6:f2:2b:54:6c:f6:60:
3c:29:1e:3c:f8:fb:c8:9d:c0:0d:01:73:0e:2e:06:05:56:ba:
9c:4a:bd:03:af:91:8a:12:6a:e9:6f:65:a9:66:3b:48:84:f6:
70:91:9c:a0:62:37:7b:75:86:54:80:88:07:85:84:e9:c7:7c:
99:b2:67:6a:0a:19:a2:69:51:29:78:2f:33:57:c5:5a:e7:95:
bd:b8:7f:89:a7:41:88:44:67:d2:c6:a1:94:c4:1f:bd:f5:de:
ea:55:3b:40:e9:d1:89:e7:96:75:3c:ca:0e:9d:1e:32:67:76:
9d:8c:f6:c5:9f:bc:0e:3e:45:78:88:21:67:cc:ae:ad:5c:c2:
45:5a:7e:d7:ff:05:c8:c2:df:8a:3d:50:9a:87:2c:b0:8d:59:
12:c6:ec:1b
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQgZ+wtFFmJ26MEhRf+JMtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3
Zjc3NzQwHhcNMjUwMTAxMDU0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTFiYzdlZDVjMmM0NDRjZjk0NDRmZDkxNWRkZTQyMzE3YTU4MDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tKO7kge7NJDDlitQGCyhsVKkRVC
pkqN86TpyJ0/Wld0kW1Jw7MDatvGgWfKcupBUXiOyaBjNErwOTKZ+roXb19QyzRR
8qCFqpoe/vSWQZFgbSAgtQTg4tLqteugo+eh21zS5So5VeN2wRk2w573xsHUgQ/W
w4Z3/kRzibvY1TLvjCwxug/H37sWLaWdTAefdMkoB9CwseacN5voIHt1H/VVU06p
MqCNGtz9NzJA2hBD/mvXUhqtw4oCyw/0ToWH07iqpo+U2Z4k+zTj/i4llw6qDRmN
PZoxz8V/VSCRNah0OiX00mdmXpxKvENQ+BWoIbAX14KYym6gHm4F+dRhEQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGobx+1cLERM+URP2RXd5CMXpYBEMB8GA1UdIwQY
MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt
NTQ2OGIyY2YwYTc3LzEvYWh2SDdWd3NSRXo1UkVfWkZkM2tJeGVsZ0VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3
LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFPlmgAwQF
1ERAAwQG1fyAMA0EAgACMAcDBQAqAawAMA0GCSqGSIb3DQEBCwUAA4IBAQAzzCzI
iFSmGLxLo/BsM2Y1hRBQf5xV/py6LZOOUGH59nYuLFaFzVXDvCaIU314/IYk9QlF
ta2TettWfhjfmS9nu23voiOG/bPkQ9zkUmS8wmnAuGDSA9lBKMEn2fpzNoWy4NqE
EPbyK1Rs9mA8KR48+PvIncANAXMOLgYFVrqcSr0Dr5GKEmrpb2WpZjtIhPZwkZyg
Yjd7dYZUgIgHhYTpx3yZsmdqChmiaVEpeC8zV8Va55W9uH+Jp0GIRGfSxqGUxB+9
9d7qVTtA6dGJ55Z1PMoOnR4yZ3adjPbFn7wOPkV4iCFnzK6tXMJFWn7X/wXIwt+K
PVCahyywjVkSxuwb
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:05 2025 by rpki-client