Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/gJ2DRfyIFwoifDuIH0TYQRTN3eA.roa
File: gJ2DRfyIFwoifDuIH0TYQRTN3eA.roa (raw, json)
Hash identifier: 4VeOaPqPseoiVbcbvYCyDjMEUbGNTG6Bvx1ZrBamY64=
Subject key identifier: 80:9D:83:45:FC:88:17:0A:22:7C:3B:88:1F:44:D8:41:14:CD:DD:E0
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422204B89AB5B0AC653B3F111C45D76BC
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/gJ2DRfyIFwoifDuIH0TYQRTN3eA.roa
Signing time: Wed 01 Jan 2025 13:48:49 +0000
ROA not before: Wed 01 Jan 2025 13:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213248
IP address blocks: 2a0e:8f02:2160::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:4b:89:ab:5b:0a:c6:53:b3:f1:11:c4:5d:76:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=809d8345fc88170a227c3b881f44d84114cddde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:50:1b:91:16:d8:3c:a9:ee:43:02:a0:19:
8d:33:e8:b6:ae:90:f3:b8:4e:42:c3:c3:e7:18:72:
a6:84:9e:5b:13:8c:42:f2:aa:fb:84:bc:f0:96:4c:
28:33:76:72:63:a6:12:ca:ea:47:23:15:39:26:1f:
6e:63:03:e0:01:e7:df:5b:63:34:7e:c1:65:c9:6a:
73:bc:89:23:37:60:c4:a2:09:a9:23:9e:9f:74:3f:
1f:4d:0b:93:81:7e:55:55:2f:7e:0c:28:0f:26:84:
e2:df:d2:b1:35:91:ac:d4:d9:fc:94:60:97:34:68:
0a:a5:f7:e3:a0:49:ea:b2:f7:c5:46:30:7e:fe:80:
5b:2e:5b:18:7e:73:05:d5:14:0d:42:ae:40:4d:0d:
c4:aa:37:43:6e:40:e1:e0:7f:18:7f:82:0c:cb:c8:
07:af:09:33:89:3d:56:d9:e2:f7:2a:f9:0b:85:af:
c0:c5:2d:03:20:11:33:cd:bd:67:1d:44:e1:d1:28:
a4:d9:26:14:3b:73:b3:cb:c6:c8:0d:e7:20:b0:2a:
bb:e2:5c:b4:33:9e:38:28:6c:b7:69:5d:14:cd:ae:
42:fc:d8:ab:f2:f9:f0:73:a1:43:04:79:28:a5:42:
cf:17:cd:91:41:5c:6b:ee:50:85:d2:c1:88:9b:19:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:83:45:FC:88:17:0A:22:7C:3B:88:1F:44:D8:41:14:CD:DD:E0
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/gJ2DRfyIFwoifDuIH0TYQRTN3eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2160::/44
Signature Algorithm: sha256WithRSAEncryption
0e:36:72:eb:24:8d:3c:d8:39:9d:af:d3:d4:24:ce:c9:dd:b8:
53:49:57:9a:65:1c:d7:64:5d:5b:67:a8:7f:3f:60:02:e7:fa:
07:a7:7b:e9:2e:22:e7:40:e1:65:14:62:da:6f:80:3e:c2:5c:
9b:fa:4c:ea:8b:bc:bf:71:8e:e6:8b:40:1a:e1:b4:ff:bc:5d:
08:46:4b:75:18:c5:74:e4:37:7a:60:6e:89:eb:47:40:5f:03:
4a:0a:9a:ed:e9:a3:95:a7:b1:d5:b6:7a:8a:fa:5f:de:9f:9b:
92:2f:0b:1e:f0:18:2c:4c:c3:2b:a6:df:07:a6:3e:6e:4f:dd:
12:d6:3a:b8:b9:9c:6f:87:f9:46:20:e6:f0:d3:de:d6:20:1f:
79:1a:13:b0:0f:bf:b2:89:ce:48:fe:ae:04:3e:a9:c7:85:3e:
33:10:c8:81:25:31:1d:40:dc:2e:e3:a3:47:02:62:0c:ba:e5:
a2:2b:4e:de:ab:ce:4c:85:8e:ff:70:18:4e:f5:da:47:23:d6:
98:6e:8c:f0:a0:6b:a7:04:e8:21:33:db:ea:f7:24:9e:e3:83:
a9:06:aa:8c:0d:38:ac:4f:85:cc:85:9a:a7:a0:0d:68:34:74:
7c:65:5f:c3:d7:8d:cd:7a:f8:fc:fb:08:ad:85:63:5d:7c:97:
9d:60:ca:bd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiIEuJq1sKxlOz8RHEXXa8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjUwMTAxMTM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDlkODM0NWZjODgxNzBhMjI3YzNiODgxZjQ0ZDg0MTE0Y2RkZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVFQG5EW2Dyp7kMCoBmNM+i2rpDz
uE5Cw8PnGHKmhJ5bE4xC8qr7hLzwlkwoM3ZyY6YSyupHIxU5Jh9uYwPgAeffW2M0
fsFlyWpzvIkjN2DEogmpI56fdD8fTQuTgX5VVS9+DCgPJoTi39KxNZGs1Nn8lGCX
NGgKpffjoEnqsvfFRjB+/oBbLlsYfnMF1RQNQq5ATQ3EqjdDbkDh4H8Yf4IMy8gH
rwkziT1W2eL3KvkLha/AxS0DIBEzzb1nHUTh0Sik2SYUO3Ozy8bIDecgsCq74ly0
M544KGy3aV0Uza5C/Nir8vnwc6FDBHkopULPF82RQVxr7lCF0sGImxnZ6wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFICdg0X8iBcKInw7iB9E2EEUzd3gMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvZ0oyRFJmeUlGd29pZkR1SUgwVFlRUlROM2VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiFg
MA0GCSqGSIb3DQEBCwUAA4IBAQAONnLrJI082Dmdr9PUJM7J3bhTSVeaZRzXZF1b
Z6h/P2AC5/oHp3vpLiLnQOFlFGLab4A+wlyb+kzqi7y/cY7mi0Aa4bT/vF0IRkt1
GMV05Dd6YG6J60dAXwNKCprt6aOVp7HVtnqK+l/en5uSLwse8BgsTMMrpt8Hpj5u
T90S1jq4uZxvh/lGIObw097WIB95GhOwD7+yic5I/q4EPqnHhT4zEMiBJTEdQNwu
46NHAmIMuuWiK07eq85MhY7/cBhO9dpHI9aYbozwoGunBOghM9vq9ySe44OpBqqM
DTisT4XMhZqnoA1oNHR8ZV/D143Nevj8+withWNdfJedYMq9
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:50:40 2025 by rpki-client