Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/gY6-jVr97TeobNKsJqEIsFCfx1Q.roa
File: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (raw, json)
Hash identifier: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=
Subject key identifier: 81:8E:BE:8D:5A:FD:ED:37:A8:6C:D2:AC:26:A1:08:B0:50:9F:C7:54
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019424459A33A90648519F9B439566D8607C
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/gY6-jVr97TeobNKsJqEIsFCfx1Q.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216072
IP address blocks: 2a05:4140:38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9a:33:a9:06:48:51:9f:9b:43:95:66:d8:60:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=818ebe8d5afded37a86cd2ac26a108b0509fc754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:4d:07:88:ef:ab:a2:62:24:f1:f1:3c:58:
ac:5e:a3:56:5f:b3:20:ca:40:d4:19:63:71:92:d1:
fc:65:e3:9c:ff:28:37:fa:b1:58:ac:24:46:36:ca:
ef:16:f0:77:81:34:fb:e1:fd:71:42:73:5d:57:88:
48:cf:83:9c:1c:3a:2d:a7:2e:e6:e4:88:cd:46:65:
47:25:c9:21:02:e3:30:18:00:4d:fa:c8:cb:96:f3:
14:26:18:0e:84:16:e8:2b:c9:10:ff:48:ba:7a:40:
ba:82:c1:4c:8b:d1:2c:a0:b7:96:26:2f:19:19:52:
4b:8d:27:51:d6:70:34:e7:47:25:e0:d5:63:64:2a:
69:74:bc:51:e1:66:30:1a:c1:b1:18:77:4f:84:55:
12:bc:b5:82:e5:0c:8e:a1:39:07:80:1e:ff:97:63:
f6:f4:6b:33:97:4a:6c:1f:b7:aa:24:4e:d5:17:38:
e2:1f:44:d6:06:11:02:f8:57:11:b3:2b:3b:22:da:
43:37:01:5f:59:4d:5f:d5:bd:b8:c8:96:aa:ed:27:
0f:d2:d3:66:55:b0:5d:7b:75:98:9b:4a:41:b7:f9:
8c:7e:36:43:03:41:f4:f4:ce:22:e1:74:44:6e:a2:
28:4b:8b:88:03:ab:76:49:da:a2:3f:31:3d:0e:60:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8E:BE:8D:5A:FD:ED:37:A8:6C:D2:AC:26:A1:08:B0:50:9F:C7:54
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/gY6-jVr97TeobNKsJqEIsFCfx1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:38::/48
Signature Algorithm: sha256WithRSAEncryption
22:c7:ce:2c:79:d2:d8:b6:5e:7f:d4:66:7e:cb:4c:e1:83:72:
66:76:dc:dc:67:b8:ff:91:c1:32:fa:55:9f:c5:7f:03:f3:3e:
92:50:78:fe:f9:a9:6b:f2:05:be:9f:b7:b8:d3:ac:ae:62:cb:
b2:ff:2e:f7:0d:cf:4a:c5:59:68:36:f5:4d:f7:a2:a7:9a:1e:
43:4a:54:85:db:a0:f9:40:8f:39:72:32:6a:e7:d7:9b:f8:93:
c7:43:05:67:59:10:6e:f3:23:c8:ed:76:71:e7:79:55:c2:2e:
7c:aa:22:e5:9e:77:dc:c0:92:e5:c7:b2:ef:8c:61:c7:4e:4a:
f5:95:10:58:e8:a2:fa:03:e5:19:42:b9:0c:65:21:68:dc:19:
c3:a1:1a:f4:6d:fb:76:b5:d7:cd:81:1d:2c:af:36:ab:f4:49:
08:1b:8b:ba:2c:7c:81:a3:2b:54:13:39:f4:2b:fa:01:16:56:
18:b0:32:01:8b:68:5f:11:bb:d6:e2:5f:da:f2:b1:ad:29:67:
57:4c:3b:48:91:cf:61:3f:0b:e9:0e:4b:16:93:bc:78:60:82:
09:b9:36:62:6a:f5:b6:73:c8:ba:ba:65:4f:ac:d3:66:02:24:
e6:da:45:05:0a:b9:4f:03:e3:06:60:5f:50:05:e8:5b:0e:a4:
dd:b0:cb:0e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQkRZozqQZIUZ+bQ5Vm2GB8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5
YzE4MGEwHhcNMjUwMTAxMjM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MThlYmU4ZDVhZmRlZDM3YTg2Y2QyYWMyNmExMDhiMDUwOWZjNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg1NB4jvq6JiJPHxPFisXqNWX7Mg
ykDUGWNxktH8ZeOc/yg3+rFYrCRGNsrvFvB3gTT74f1xQnNdV4hIz4OcHDotpy7m
5IjNRmVHJckhAuMwGABN+sjLlvMUJhgOhBboK8kQ/0i6ekC6gsFMi9EsoLeWJi8Z
GVJLjSdR1nA050cl4NVjZCppdLxR4WYwGsGxGHdPhFUSvLWC5QyOoTkHgB7/l2P2
9Gszl0psH7eqJE7VFzjiH0TWBhEC+FcRsys7ItpDNwFfWU1f1b24yJaq7ScP0tNm
VbBde3WYm0pBt/mMfjZDA0H09M4i4XREbqIoS4uIA6t2SdqiPzE9DmAWEQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIGOvo1a/e03qGzSrCahCLBQn8dUMB8GA1UdIwQY
MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt
ODg1ZTg0ZTc1MTJlLzEvZ1k2LWpWcjk3VGVvYk5Lc0pxRUlzRkNmeDFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl
LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgVBQAA4
MA0GCSqGSIb3DQEBCwUAA4IBAQAix84sedLYtl5/1GZ+y0zhg3JmdtzcZ7j/kcEy
+lWfxX8D8z6SUHj++alr8gW+n7e406yuYsuy/y73Dc9KxVloNvVN96Knmh5DSlSF
26D5QI85cjJq59eb+JPHQwVnWRBu8yPI7XZx53lVwi58qiLlnnfcwJLlx7LvjGHH
Tkr1lRBY6KL6A+UZQrkMZSFo3BnDoRr0bft2tdfNgR0srzar9EkIG4u6LHyBoytU
Ezn0K/oBFlYYsDIBi2hfEbvW4l/a8rGtKWdXTDtIkc9hPwvpDksWk7x4YIIJuTZi
avW2c8i6umVPrNNmAiTm2kUFCrlPA+MGYF9QBehbDqTdsMsO
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:05 2025 by rpki-client