Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa
File: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (raw, json)
Hash identifier: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=
Subject key identifier: 21:BF:E0:90:6D:0E:5D:A0:BD:60:68:01:1B:39:90:8F:6F:28:CB:A6
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426DA04E78B62EB84231D3D1E39493E8A
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa
Signing time: Thu 02 Jan 2025 11:50:09 +0000
ROA not before: Thu 02 Jan 2025 11:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62588
IP address blocks: 2a03:f87:aabb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:da:04:e7:8b:62:eb:84:23:1d:3d:1e:39:49:3e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21bfe0906d0e5da0bd6068011b39908f6f28cba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:42:f0:33:9b:78:0d:ae:b7:d6:d7:0a:d0:
49:5a:2e:40:32:04:77:f6:09:d0:5a:a5:da:ce:51:
0a:c5:ca:0d:ea:9f:d8:26:4b:d4:0f:13:21:fe:2f:
6c:4c:8e:b9:97:31:9a:96:d9:3c:f8:b3:ee:5d:63:
05:6a:77:92:06:96:9e:a1:08:cd:88:3a:3f:3e:7b:
f9:cf:b3:2c:9a:f6:b9:74:08:8a:6c:ef:94:58:2c:
12:74:4c:69:6f:a6:05:0f:fc:71:df:a1:be:68:9f:
57:c2:78:36:59:8b:fb:8c:7e:ff:c6:81:d9:ae:ca:
3a:01:8c:0d:48:b2:c1:22:a2:87:ca:bd:09:9a:a1:
47:4b:46:cc:58:c2:b7:18:ce:49:c8:8f:69:cf:ab:
f1:eb:ac:57:95:31:e1:a7:2b:fb:88:6d:2b:5c:ed:
8e:a8:4a:2a:96:c1:1c:74:6e:69:a8:aa:ce:7d:58:
69:07:f5:2f:c5:d5:e3:d5:34:29:55:ca:9a:0d:b7:
af:b6:96:6d:9e:15:fe:44:dc:d4:29:9e:7c:8b:fa:
f9:3f:d0:f5:fb:84:d3:0e:af:6c:42:33:71:1c:e1:
1a:bd:78:9e:96:c4:09:6b:fd:e4:6a:4e:69:4d:e4:
7a:52:fb:91:27:30:e9:f6:0c:59:ec:8f:40:23:1f:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:E0:90:6D:0E:5D:A0:BD:60:68:01:1B:39:90:8F:6F:28:CB:A6
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f87:aabb::/48
Signature Algorithm: sha256WithRSAEncryption
81:31:4e:5e:9e:e5:ed:0b:71:3c:80:a2:9f:16:6d:27:a9:e2:
98:a1:10:b8:ea:a8:5d:b8:79:7d:87:59:70:31:aa:8c:d1:5d:
05:52:94:ee:ec:09:d1:1b:57:f1:32:95:55:01:5b:22:81:7f:
3a:3d:9b:be:9b:2a:52:98:a9:62:ea:b7:c9:23:4e:51:cc:00:
7b:a5:e0:4c:ae:4b:cb:0a:ab:39:ec:5c:e7:66:18:40:24:11:
ad:45:e5:3b:2c:bb:75:e8:fa:5e:cb:b8:35:86:76:76:6d:8d:
30:46:55:3f:64:d4:81:be:42:69:91:de:f3:49:27:9b:03:99:
35:04:61:76:19:c9:ba:64:cf:33:f8:a8:41:6b:95:e9:55:63:
1b:c5:8c:6c:6d:02:7c:78:8f:1c:cb:a2:a0:e5:e8:42:57:4a:
6b:35:14:c5:11:ee:32:b5:74:c0:54:3a:69:f6:7d:6c:dc:bc:
8f:25:6b:10:97:13:1c:63:1a:a2:0a:58:7f:d7:aa:38:60:1a:
79:1d:b1:13:92:33:7b:97:00:8f:42:48:80:ed:87:8d:04:fd:
aa:3e:1f:c2:09:28:ef:f6:fd:9d:3e:4c:45:c4:37:4c:42:81:
17:ee:89:53:63:bd:96:97:03:0d:8a:7b:5f:79:b3:78:85:9c:
8b:ed:48:63
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2gTni2LrhCMdPR45ST6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjUwMTAyMTE1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWJmZTA5MDZkMGU1ZGEwYmQ2MDY4MDExYjM5OTA4ZjZmMjhjYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M5C8DObeA2ut9bXCtBJWi5AMgR3
9gnQWqXazlEKxcoN6p/YJkvUDxMh/i9sTI65lzGaltk8+LPuXWMFaneSBpaeoQjN
iDo/Pnv5z7Msmva5dAiKbO+UWCwSdExpb6YFD/xx36G+aJ9Xwng2WYv7jH7/xoHZ
rso6AYwNSLLBIqKHyr0JmqFHS0bMWMK3GM5JyI9pz6vx66xXlTHhpyv7iG0rXO2O
qEoqlsEcdG5pqKrOfVhpB/UvxdXj1TQpVcqaDbevtpZtnhX+RNzUKZ58i/r5P9D1
+4TTDq9sQjNxHOEavXielsQJa/3kak5pTeR6UvuRJzDp9gxZ7I9AIx90gQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCG/4JBtDl2gvWBoARs5kI9vKMumMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvSWJfZ2tHME9YYUM5WUdnQkd6bVFqMjhveTZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMPh6q7
MA0GCSqGSIb3DQEBCwUAA4IBAQCBMU5enuXtC3E8gKKfFm0nqeKYoRC46qhduHl9
h1lwMaqM0V0FUpTu7AnRG1fxMpVVAVsigX86PZu+mypSmKli6rfJI05RzAB7peBM
rkvLCqs57FznZhhAJBGtReU7LLt16Ppey7g1hnZ2bY0wRlU/ZNSBvkJpkd7zSSeb
A5k1BGF2Gcm6ZM8z+KhBa5XpVWMbxYxsbQJ8eI8cy6Kg5ehCV0prNRTFEe4ytXTA
VDpp9n1s3LyPJWsQlxMcYxqiClh/16o4YBp5HbETkjN7lwCPQkiA7YeNBP2qPh/C
CSjv9v2dPkxFxDdMQoEX7olTY72WlwMNintfebN4hZyL7Uhj
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:39 2025 by rpki-client