Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/wqY_ixYVjH1acrjorGcEZywYgRk.roa
File: wqY_ixYVjH1acrjorGcEZywYgRk.roa (raw, json)
Hash identifier: XpP+SvIXR1YO15boQPEoJQXvWDeccH3hUbCAlDZexo8=
Subject key identifier: C2:A6:3F:8B:16:15:8C:7D:5A:72:B8:E8:AC:67:04:67:2C:18:81:19
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 019427B53E40EA4821427198B2502FFA9CE5
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/wqY_ixYVjH1acrjorGcEZywYgRk.roa
Signing time: Thu 02 Jan 2025 15:49:36 +0000
ROA not before: Thu 02 Jan 2025 15:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5482
IP address blocks: 2a0b:5f00::/29 maxlen: 48
2a0b:5f04::/39 maxlen: 39
2a0b:5f04:1000::/39 maxlen: 39
2a0b:5f04:4000::/39 maxlen: 39
2a0b:5f04:5000::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:3e:40:ea:48:21:42:71:98:b2:50:2f:fa:9c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Jan 2 15:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2a63f8b16158c7d5a72b8e8ac6704672c188119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:c5:61:d3:f6:2f:33:47:12:56:87:04:3b:
6c:ad:c9:10:0e:a4:a8:e6:d7:79:6f:71:53:55:3f:
2d:de:f1:d9:4f:fb:d3:6a:3b:e9:7e:23:19:95:18:
ba:7f:ab:4d:00:a8:75:25:84:52:06:9e:9c:85:2e:
d7:e9:3f:49:41:3f:90:79:78:06:d4:98:ab:38:52:
66:b4:36:9d:af:c3:78:a5:96:8d:b0:10:da:1c:7c:
ee:2f:8e:65:99:5f:40:62:2d:b4:43:c5:14:ad:48:
fd:77:74:3f:df:1a:27:37:9b:ce:cb:b7:20:f3:05:
58:66:64:16:ec:b1:e2:42:3a:b2:ff:68:20:5e:11:
01:8c:81:80:45:ce:02:ea:88:ae:7a:ef:20:cd:0b:
e4:bd:58:f6:1e:17:fd:eb:2a:f3:f7:26:0e:4d:61:
cf:fb:0b:22:c3:fe:e6:e7:71:86:6b:46:2b:ee:e7:
b2:3c:a7:66:d4:cb:d2:10:09:1e:16:23:04:23:c0:
9a:d3:d9:a0:68:3f:3f:1d:d0:79:5b:ab:b1:ff:71:
d6:71:44:f6:5b:60:81:e4:bf:80:e9:4a:a9:f1:97:
5a:d4:71:12:e6:5f:0a:e0:63:12:22:ed:a2:a5:27:
30:e9:c6:a5:2c:8d:d7:0c:59:7a:98:38:4a:c2:fc:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A6:3F:8B:16:15:8C:7D:5A:72:B8:E8:AC:67:04:67:2C:18:81:19
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/wqY_ixYVjH1acrjorGcEZywYgRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
4c:5a:0b:60:b1:2a:c9:df:80:d3:66:ac:c8:8e:c7:58:77:ea:
0c:93:44:9f:18:b5:84:e2:23:27:cd:9a:84:88:19:6e:ad:08:
30:4a:28:79:2e:52:36:d8:f1:97:e0:db:11:3c:13:70:bb:3e:
9b:8f:58:b2:20:5e:c9:7d:df:44:ac:cc:26:91:a2:15:c4:4a:
24:e4:55:ba:60:db:5e:e7:e9:b1:4a:ad:58:ae:f3:47:8f:c0:
34:11:0b:f4:20:d2:3e:50:2e:de:49:4a:4b:d2:a3:b0:83:62:
88:96:62:db:d2:47:92:51:3b:ed:73:02:05:07:fb:60:4f:64:
56:25:68:07:a6:1a:94:d3:5b:23:db:2f:c6:61:87:cf:73:e3:
a6:b1:1d:3e:27:7c:46:76:5c:99:ca:12:c7:f7:3f:47:4c:f0:
95:5e:f5:e8:ff:0a:27:4d:45:b2:0c:0b:31:71:0c:99:71:1b:
e5:49:0d:04:5e:9f:06:bf:e2:1f:d9:c5:a6:d1:db:29:67:e4:
cf:65:eb:ba:70:47:bd:f2:41:dd:d9:c7:f1:03:fa:a0:7a:6a:
45:07:e6:1f:8c:f4:1b:32:16:1a:7f:a2:71:49:73:e2:83:0e:
c7:7a:ba:94:92:e3:f0:34:6a:e9:99:f5:bf:75:e9:f0:0b:b9:
ff:4a:b9:61
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQntT5A6kghQnGYslAv+pzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNWZlMDU2Zjc2NzdlNDNhNmVmMWFhMWEwYTA1YzA3YzRi
NGI2NWMwHhcNMjUwMTAyMTU0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmE2M2Y4YjE2MTU4YzdkNWE3MmI4ZThhYzY3MDQ2NzJjMTg4MTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqfFYdP2LzNHElaHBDtsrckQDqSo
5td5b3FTVT8t3vHZT/vTajvpfiMZlRi6f6tNAKh1JYRSBp6chS7X6T9JQT+QeXgG
1JirOFJmtDadr8N4pZaNsBDaHHzuL45lmV9AYi20Q8UUrUj9d3Q/3xonN5vOy7cg
8wVYZmQW7LHiQjqy/2ggXhEBjIGARc4C6oiueu8gzQvkvVj2Hhf96yrz9yYOTWHP
+wsiw/7m53GGa0Yr7ueyPKdm1MvSEAkeFiMEI8Ca09mgaD8/HdB5W6ux/3HWcUT2
W2CB5L+A6Uqp8Zda1HES5l8K4GMSIu2ipScw6calLI3XDFl6mDhKwvyaUQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMKmP4sWFYx9WnK46KxnBGcsGIEZMB8GA1UdIwQY
MBaAFC1f4Fb3Z35Dpu8aoaCgXAfEtLZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZfZ1Z2ZG5ma09tN3hxaG9LQmNCOFMwdGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jN2I0OTUtMDExOS00Y2Y5LWIwYjIt
ZDIwNjBkM2E0MzMyLzEvd3FZX2l4WVZqSDFhY3Jqb3JHY0VaeXdZZ1JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jN2I0OTUtMDExOS00Y2Y5LWIwYjItZDIwNjBkM2E0MzMy
LzEvTFZfZ1Z2ZG5ma09tN3hxaG9LQmNCOFMwdGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgtfADAN
BgkqhkiG9w0BAQsFAAOCAQEATFoLYLEqyd+A02asyI7HWHfqDJNEnxi1hOIjJ82a
hIgZbq0IMEooeS5SNtjxl+DbETwTcLs+m49YsiBeyX3fRKzMJpGiFcRKJORVumDb
XufpsUqtWK7zR4/ANBEL9CDSPlAu3klKS9KjsINiiJZi29JHklE77XMCBQf7YE9k
ViVoB6YalNNbI9svxmGHz3PjprEdPid8RnZcmcoSx/c/R0zwlV716P8KJ01FsgwL
MXEMmXEb5UkNBF6fBr/iH9nFptHbKWfkz2XrunBHvfJB3dnH8QP6oHpqRQfmH4z0
GzIWGn+icUlz4oMOx3q6lJLj8DRq6Zn1v3Xp8Au5/0q5YQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:13 2025 by rpki-client