Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4qbyZXp0VorbYU3U21JHzvmj1po.roa
File: 4qbyZXp0VorbYU3U21JHzvmj1po.roa (raw, json)
Hash identifier: 506aS3VI5M2X5bR0jFf0HqZwaGxTgpsZ9AVWmXGk0WE=
Subject key identifier: E2:A6:F2:65:7A:74:56:8A:DB:61:4D:D4:DB:52:47:CE:F9:A3:D6:9A
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422203316B863B956602DA581C60B0B74
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4qbyZXp0VorbYU3U21JHzvmj1po.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207071
IP address blocks: 2a0e:8f02:2280::/44 maxlen: 48
2a0e:8f02:f029::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:33:16:b8:63:b9:56:60:2d:a5:81:c6:0b:0b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2a6f2657a74568adb614dd4db5247cef9a3d69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:42:5c:d8:ed:8a:12:59:a5:89:e7:70:66:
dc:f8:41:cc:3c:34:cb:b3:0e:f3:4e:24:0d:67:e6:
7a:05:91:48:bf:f3:ea:fb:06:22:bc:54:82:fc:d1:
a4:e8:82:b7:2c:a3:d0:24:65:a2:cf:30:b6:b9:71:
4c:dd:4d:ba:38:a8:d2:36:9d:30:18:2a:45:44:40:
32:cb:0f:d6:e5:bd:70:e4:3d:bd:6b:34:36:05:cd:
8b:3b:ca:34:29:48:ed:1f:0d:88:32:4f:92:42:2c:
ab:60:e0:78:8c:7f:dd:df:d5:ee:01:01:7a:93:56:
90:54:80:47:87:90:d1:86:64:5f:af:08:e4:9c:31:
d5:6e:5a:56:68:96:64:e4:bf:d0:4d:f6:dd:ec:ac:
ca:f7:cf:b9:20:73:02:83:5d:d8:13:4e:08:67:5c:
a4:98:a4:e9:0d:c3:e4:3d:19:38:cf:8f:af:bc:99:
cd:95:cd:ce:70:15:a4:ad:34:fb:c9:28:b7:49:e7:
71:c3:19:69:83:e2:df:7d:b6:cb:69:6f:ca:f3:1a:
a6:3c:ad:b2:83:a6:4a:3c:9e:ef:cc:bf:b5:45:76:
e3:8c:48:21:4a:fc:74:72:09:a8:98:d1:4b:3f:5f:
9d:df:04:1f:18:c4:24:40:c9:8d:25:6d:41:e9:61:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A6:F2:65:7A:74:56:8A:DB:61:4D:D4:DB:52:47:CE:F9:A3:D6:9A
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/4qbyZXp0VorbYU3U21JHzvmj1po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2280::/44
2a0e:8f02:f029::/48
Signature Algorithm: sha256WithRSAEncryption
85:a0:8f:74:f1:32:88:d7:8c:45:65:b6:45:6e:15:f2:7a:2b:
87:a0:5a:a7:80:55:0a:82:79:b7:11:ed:ba:e4:aa:c2:d9:94:
aa:73:cc:ab:a0:24:a9:28:41:63:97:eb:f7:26:f3:6f:40:83:
c0:ce:69:6b:a6:f9:a8:66:b8:87:ba:e5:1f:d9:d1:74:95:df:
20:be:c9:dc:61:2a:cc:fb:9c:96:a7:b6:b4:34:23:21:fc:6f:
70:55:c1:3d:4e:61:f7:ef:75:41:e5:ed:52:7c:ec:59:7d:d9:
62:1d:6a:0a:9c:02:24:40:61:e6:e3:81:e9:62:39:a6:1b:86:
90:90:8e:f5:b2:3f:09:73:4d:6c:12:ae:c6:a2:04:bf:24:a6:
5f:ff:d3:e8:f5:ef:0f:57:08:27:66:4a:81:c4:9e:a2:af:e3:
e8:c2:19:6b:bf:af:ee:85:e2:3d:ad:c3:80:5c:15:cf:61:55:
ab:39:4e:f2:b6:db:c7:f0:af:fa:88:45:1c:9a:4b:85:89:bb:
64:f0:d1:35:3d:16:2e:2b:25:70:d1:00:6f:1b:00:e8:ad:ea:
e0:6a:d9:85:d0:5e:ca:ab:b3:c6:4a:a8:ee:5f:e2:d3:e1:04:
7c:0d:6c:20:59:d4:ad:cb:4a:22:eb:46:b2:da:ae:d1:ec:83:
f9:e5:08:2f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQiIDMWuGO5VmAtpYHGCwt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmE2ZjI2NTdhNzQ1NjhhZGI2MTRkZDRkYjUyNDdjZWY5YTNkNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1RCXNjtihJZpYnncGbc+EHMPDTL
sw7zTiQNZ+Z6BZFIv/Pq+wYivFSC/NGk6IK3LKPQJGWizzC2uXFM3U26OKjSNp0w
GCpFREAyyw/W5b1w5D29azQ2Bc2LO8o0KUjtHw2IMk+SQiyrYOB4jH/d39XuAQF6
k1aQVIBHh5DRhmRfrwjknDHVblpWaJZk5L/QTfbd7KzK98+5IHMCg13YE04IZ1yk
mKTpDcPkPRk4z4+vvJnNlc3OcBWkrTT7ySi3Sedxwxlpg+LffbbLaW/K8xqmPK2y
g6ZKPJ7vzL+1RXbjjEghSvx0cgmomNFLP1+d3wQfGMQkQMmNJW1B6WFERwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOKm8mV6dFaK22FN1NtSR875o9aaMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvNHFieVpYcDBWb3JiWVUzVTIxSkh6dm1qMXBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6PAiKA
AwcAKg6PAvApMA0GCSqGSIb3DQEBCwUAA4IBAQCFoI908TKI14xFZbZFbhXyeiuH
oFqngFUKgnm3Ee265KrC2ZSqc8yroCSpKEFjl+v3JvNvQIPAzmlrpvmoZriHuuUf
2dF0ld8gvsncYSrM+5yWp7a0NCMh/G9wVcE9TmH373VB5e1SfOxZfdliHWoKnAIk
QGHm44HpYjmmG4aQkI71sj8Jc01sEq7GogS/JKZf/9Po9e8PVwgnZkqBxJ6ir+Po
whlrv6/uheI9rcOAXBXPYVWrOU7yttvH8K/6iEUcmkuFibtk8NE1PRYuKyVw0QBv
GwDorergatmF0F7Kq7PGSqjuX+LT4QR8DWwgWdSty0oi60ay2q7R7IP55Qgv
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:26 2025 by rpki-client