Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/RQrFYttaYZP7w79BBGpHWoy0Vf8.roa
File: RQrFYttaYZP7w79BBGpHWoy0Vf8.roa (raw, json)
Hash identifier: +Cg1kkFKtdIbI/uOI/tqhmwLFs4Hzpn4OanpQq8QmfU=
Subject key identifier: 45:0A:C5:62:DB:5A:61:93:FB:C3:BF:41:04:6A:47:5A:8C:B4:55:FF
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0194258F9702A5A6827CB7B670CFB4B00F1F
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/RQrFYttaYZP7w79BBGpHWoy0Vf8.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202418
IP address blocks: 2a0d:2406:d00::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:97:02:a5:a6:82:7c:b7:b6:70:cf:b4:b0:0f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=450ac562db5a6193fbc3bf41046a475a8cb455ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:36:08:40:00:4e:65:84:23:c9:ea:e1:dc:
da:66:8f:5d:2c:d7:24:f1:96:f4:ff:1b:71:00:5a:
bc:d6:6d:64:8b:4e:a1:67:61:19:c1:10:40:2a:b6:
72:1c:e1:46:02:20:75:fe:78:45:39:4d:7f:d9:e4:
95:a6:40:f2:49:89:ef:f6:10:33:56:9c:01:67:e0:
f0:0e:e3:54:ec:85:a9:33:b9:ca:b0:b1:25:c4:9c:
82:cb:cd:db:04:82:55:5a:09:5f:ee:1a:df:91:0a:
34:bf:85:69:84:b3:43:c2:ef:13:8b:35:81:dc:08:
63:bb:8f:48:74:b3:05:c3:b9:75:c7:4b:9e:9c:9f:
ec:1b:9d:f6:65:88:2d:83:23:c5:1a:c1:d8:33:2b:
ac:cb:d0:ec:aa:c7:1c:5b:4a:5d:52:11:84:3a:50:
03:9a:23:5f:7a:d7:1c:32:e1:cf:16:b6:8f:e4:16:
fe:ce:0c:96:c7:3a:2b:95:fe:21:27:a7:be:22:c6:
00:ca:c0:7e:d6:5f:c1:a3:b1:83:23:81:e5:44:2b:
72:8c:64:34:e7:b8:68:d3:d5:ca:9c:f9:38:d1:a6:
08:bd:b2:49:cf:98:ca:2d:68:10:c6:a6:f2:b8:5a:
5f:8b:e8:52:da:25:61:51:88:dd:39:03:44:d0:44:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:C5:62:DB:5A:61:93:FB:C3:BF:41:04:6A:47:5A:8C:B4:55:FF
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/RQrFYttaYZP7w79BBGpHWoy0Vf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:d00::/44
Signature Algorithm: sha256WithRSAEncryption
15:f3:27:59:af:9f:92:6b:96:f0:b7:50:40:0b:60:ca:72:6e:
84:fb:85:2b:6f:e7:eb:39:c6:c6:34:52:3e:59:cf:7d:0e:1b:
99:0d:60:cd:d8:01:e9:d7:47:6f:26:9b:5d:12:6d:78:b5:88:
35:be:7a:e9:eb:8f:d9:7a:51:14:10:52:60:c5:19:43:2b:53:
82:04:a8:7f:31:cd:73:1e:ab:66:c6:3a:be:a0:94:56:d3:ef:
c9:29:43:54:80:2e:c5:9a:71:16:fa:d7:98:3d:08:f6:4b:15:
c1:98:7d:8e:93:c2:1a:08:27:3f:e5:01:36:1f:a5:37:2a:d3:
12:0d:07:d6:46:8d:7f:a4:b7:ba:92:5e:bf:e5:b2:5e:e8:27:
94:12:de:a4:74:e3:18:ca:5e:09:36:41:74:8b:e7:f2:28:58:
3f:cb:ed:8b:60:a1:33:92:5b:1c:97:ea:76:05:9a:f6:e5:30:
85:32:2b:e7:c5:72:19:4e:b3:5e:a8:d7:a5:dc:c7:44:e3:60:
8f:0f:db:5c:51:72:0f:7e:fd:07:72:da:39:78:a9:ae:d9:26:
54:d6:7c:cb:d2:44:85:42:44:16:e3:c3:4c:fe:ee:ca:1c:c3:
f4:cd:09:39:89:ee:13:a2:0f:3c:96:e5:46:cc:b1:57:38:43:
01:38:10:91
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlj5cCpaaCfLe2cM+0sA8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1
OGE0YzAwHhcNMjUwMTAyMDU0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTBhYzU2MmRiNWE2MTkzZmJjM2JmNDEwNDZhNDc1YThjYjQ1NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cg2CEAATmWEI8nq4dzaZo9dLNck
8Zb0/xtxAFq81m1ki06hZ2EZwRBAKrZyHOFGAiB1/nhFOU1/2eSVpkDySYnv9hAz
VpwBZ+DwDuNU7IWpM7nKsLElxJyCy83bBIJVWglf7hrfkQo0v4VphLNDwu8TizWB
3Ahju49IdLMFw7l1x0uenJ/sG532ZYgtgyPFGsHYMyusy9DsqsccW0pdUhGEOlAD
miNfetccMuHPFraP5Bb+zgyWxzorlf4hJ6e+IsYAysB+1l/Bo7GDI4HlRCtyjGQ0
57ho09XKnPk40aYIvbJJz5jKLWgQxqbyuFpfi+hS2iVhUYjdOQNE0ES5NQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEUKxWLbWmGT+8O/QQRqR1qMtFX/MB8GA1UdIwQY
MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt
Y2U1NzE1MDY5NWE5LzEvUlFyRll0dGFZWlA3dzc5QkJHcEhXb3kwVmY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5
LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg0kBg0A
MA0GCSqGSIb3DQEBCwUAA4IBAQAV8ydZr5+Sa5bwt1BAC2DKcm6E+4Urb+frOcbG
NFI+Wc99DhuZDWDN2AHp10dvJptdEm14tYg1vnrp64/ZelEUEFJgxRlDK1OCBKh/
Mc1zHqtmxjq+oJRW0+/JKUNUgC7FmnEW+teYPQj2SxXBmH2Ok8IaCCc/5QE2H6U3
KtMSDQfWRo1/pLe6kl6/5bJe6CeUEt6kdOMYyl4JNkF0i+fyKFg/y+2LYKEzklsc
l+p2BZr25TCFMivnxXIZTrNeqNel3MdE42CPD9tcUXIPfv0Hcto5eKmu2SZU1nzL
0kSFQkQW48NM/u7KHMP0zQk5ie4Tog88luVGzLFXOEMBOBCR
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:42:35 2025 by rpki-client