Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/_Ja5VSGfVwaP_RssqzUEn4YMRnM.roa
File: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (raw, json)
Hash identifier: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=
Subject key identifier: FC:96:B9:55:21:9F:57:06:8F:FD:1B:2C:AB:35:04:9F:86:0C:46:73
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426D9FC405780BB34A0F9E2E7CC5FA47C
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/_Ja5VSGfVwaP_RssqzUEn4YMRnM.roa
Signing time: Thu 02 Jan 2025 11:50:07 +0000
ROA not before: Thu 02 Jan 2025 11:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33891
IP address blocks: 2a03:f85:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:fc:40:57:80:bb:34:a0:f9:e2:e7:cc:5f:a4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc96b955219f57068ffd1b2cab35049f860c4673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:d7:e3:91:1c:69:c3:55:d5:1e:b9:8e:b2:
82:e3:ce:08:13:c5:64:7e:b5:0b:5f:9e:8a:cf:12:
23:7d:63:01:dd:dd:3a:66:2c:c5:a0:50:95:90:51:
83:87:04:49:52:eb:f8:e6:f4:75:b6:3a:3d:ca:e5:
a8:51:08:47:ee:fc:9b:5d:86:21:40:3c:21:b6:09:
97:f8:ec:c2:4b:09:7c:ab:64:e7:10:60:da:c6:9c:
4c:cd:09:a2:60:73:ba:43:35:3e:97:2a:30:f3:23:
31:ba:3b:83:5c:e8:8a:a0:31:55:2e:53:7b:b1:5c:
b8:65:f5:5e:ce:19:b0:1d:d4:13:e0:e8:e4:48:9f:
68:d1:30:e5:2e:c0:f6:c8:11:85:46:a9:ea:28:90:
a9:7f:fd:86:54:97:b5:62:ce:a5:8c:41:48:7c:37:
d5:8b:53:8a:9f:15:15:00:ea:02:a7:46:a6:e1:ce:
7c:d0:a2:48:bc:dc:14:01:38:a2:b7:72:75:cc:b2:
73:72:74:86:b4:9b:8b:14:88:39:71:26:e4:0b:95:
bc:20:16:94:c9:c5:fb:bc:9c:ac:a0:75:93:6d:ad:
44:9d:42:ed:8d:dd:9b:f9:2c:5f:a9:9c:72:cf:e8:
47:03:6d:73:0e:06:14:ec:31:3c:0e:be:9c:f4:e4:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:B9:55:21:9F:57:06:8F:FD:1B:2C:AB:35:04:9F:86:0C:46:73
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/_Ja5VSGfVwaP_RssqzUEn4YMRnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f85:4::/48
Signature Algorithm: sha256WithRSAEncryption
47:af:87:61:b0:d1:74:87:5f:e2:e9:9c:73:ef:b2:e3:b2:c1:
b1:83:e4:8a:d2:da:57:4b:34:46:e5:99:ce:f1:cc:9a:4f:97:
cf:87:7e:ee:c4:e8:b3:31:15:91:68:16:58:50:44:98:38:93:
96:5f:4f:39:9f:a8:bf:ae:7f:c5:86:7a:ab:f8:89:64:10:8d:
eb:1e:7c:b5:f0:11:29:d1:b1:58:43:2c:df:f9:a0:42:24:ab:
51:c6:65:82:b0:dc:e6:b6:ca:77:ec:bd:33:2f:00:69:da:97:
41:f5:5b:15:c4:f7:14:dc:6a:c0:aa:b5:c9:4a:17:29:65:5e:
b4:c5:b2:67:e1:85:5f:35:42:a2:09:83:d9:5e:76:a6:66:c6:
c9:f9:78:06:ec:7e:d8:1a:93:a0:c0:be:d1:71:d3:47:80:c9:
25:3f:73:66:18:8e:35:32:6d:67:83:ea:22:79:88:e7:19:6e:
fc:6e:ee:d9:0e:53:72:26:24:5d:de:34:62:67:9f:e8:8e:b9:
c3:17:97:50:96:fa:59:77:a4:fd:83:6c:5f:33:d6:d1:97:fa:
88:c7:70:6d:25:af:bb:f3:52:09:ea:54:33:cf:53:34:a9:e9:
45:f2:49:24:16:f8:ab:54:3b:cc:f4:3c:b6:65:42:cd:77:b1:
23:b3:c2:5f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2fxAV4C7NKD54ufMX6R8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj
MjhmNmEwHhcNMjUwMTAyMTE1MDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzk2Yjk1NTIxOWY1NzA2OGZmZDFiMmNhYjM1MDQ5Zjg2MGM0NjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSTX45EcacNV1R65jrKC484IE8Vk
frULX56KzxIjfWMB3d06ZizFoFCVkFGDhwRJUuv45vR1tjo9yuWoUQhH7vybXYYh
QDwhtgmX+OzCSwl8q2TnEGDaxpxMzQmiYHO6QzU+lyow8yMxujuDXOiKoDFVLlN7
sVy4ZfVezhmwHdQT4OjkSJ9o0TDlLsD2yBGFRqnqKJCpf/2GVJe1Ys6ljEFIfDfV
i1OKnxUVAOoCp0am4c580KJIvNwUATiit3J1zLJzcnSGtJuLFIg5cSbkC5W8IBaU
ycX7vJysoHWTba1EnULtjd2b+SxfqZxyz+hHA21zDgYU7DE8Dr6c9OTzcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPyWuVUhn1cGj/0bLKs1BJ+GDEZzMB8GA1UdIwQY
MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt
YjM4ZTI2NzdiM2RjLzEvX0phNVZTR2ZWd2FQX1Jzc3F6VUVuNFlNUm5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj
LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgMPhQAE
MA0GCSqGSIb3DQEBCwUAA4IBAQBHr4dhsNF0h1/i6Zxz77LjssGxg+SK0tpXSzRG
5ZnO8cyaT5fPh37uxOizMRWRaBZYUESYOJOWX085n6i/rn/Fhnqr+IlkEI3rHny1
8BEp0bFYQyzf+aBCJKtRxmWCsNzmtsp37L0zLwBp2pdB9VsVxPcU3GrAqrXJShcp
ZV60xbJn4YVfNUKiCYPZXnamZsbJ+XgG7H7YGpOgwL7RcdNHgMklP3NmGI41Mm1n
g+oieYjnGW78bu7ZDlNyJiRd3jRiZ5/ojrnDF5dQlvpZd6T9g2xfM9bRl/qIx3Bt
Ja+781IJ6lQzz1M0qelF8kkkFvirVDvM9Dy2ZULNd7Ejs8Jf
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:23:35 2025 by rpki-client