Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/8ye5aMnDN3H7sXuqJJReuxUEJXk.roa
File: 8ye5aMnDN3H7sXuqJJReuxUEJXk.roa (raw, json)
Hash identifier: 5SBqUuPfoMeImGa+JEq3mqC1lLk8F5qTvpo0BQMOKDI=
Subject key identifier: F3:27:B9:68:C9:C3:37:71:FB:B1:7B:AA:24:94:5E:BB:15:04:25:79
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C3433CC6EA82441A6E70AFA97F88
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/8ye5aMnDN3H7sXuqJJReuxUEJXk.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199962
IP address blocks: 2a05:b0c7:101::/48 maxlen: 48
2a05:b0c7:103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c3:43:3c:c6:ea:82:44:1a:6e:70:af:a9:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f327b968c9c33771fbb17baa24945ebb15042579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:cc:71:bc:c3:07:fc:ed:7e:b6:7e:17:73:
94:d6:d3:96:f3:c3:e5:ec:a8:3e:8c:c3:3a:94:eb:
ba:4f:e8:d1:50:7c:e2:26:d4:19:99:9e:75:51:b6:
a3:ac:08:6a:02:b2:30:7f:4a:e7:4a:c4:37:c1:59:
02:df:c2:29:c4:63:a4:03:c3:a7:45:bd:40:60:28:
74:3f:67:77:b6:5a:e6:41:0d:f7:f5:f1:9a:76:de:
a2:53:44:f6:e7:e7:a0:01:b1:00:63:60:ca:af:c0:
d4:30:da:71:9c:5c:51:fd:cf:42:ff:d3:98:6a:99:
27:97:3d:98:9e:64:e0:fd:e7:92:9a:76:3f:76:82:
68:c5:fd:9e:4b:d5:38:28:ea:d0:75:f1:59:76:40:
36:3b:49:a4:01:9a:f6:aa:30:4a:b0:3a:97:da:69:
a8:17:26:02:62:b1:33:df:d3:fb:32:57:3a:75:a3:
c3:23:e4:5f:31:27:6c:7c:55:de:c1:5a:68:f3:e5:
d5:0a:af:6b:d8:77:91:4b:9b:36:dd:05:82:34:68:
5f:d9:25:56:87:7e:c5:58:4b:a2:2d:a4:ae:99:07:
32:26:00:7d:8e:b8:b1:80:30:60:80:d1:f9:ac:83:
ed:7d:34:ea:c1:82:93:82:6b:7c:50:f5:cb:35:a4:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:27:B9:68:C9:C3:37:71:FB:B1:7B:AA:24:94:5E:BB:15:04:25:79
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/8ye5aMnDN3H7sXuqJJReuxUEJXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:101::/48
2a05:b0c7:103::/48
Signature Algorithm: sha256WithRSAEncryption
5e:69:b4:9b:57:a4:16:6a:fa:74:e1:a2:1a:ad:17:ad:63:15:
13:00:90:57:82:59:fe:ee:f6:7d:e4:d9:cd:62:b9:71:ad:3a:
ef:ff:09:6e:9e:02:53:95:eb:29:75:f4:d2:06:d2:c2:da:86:
44:97:5c:f3:a6:82:ed:ff:4d:91:87:ee:ad:69:45:7b:3e:7e:
a9:13:31:5b:91:0f:92:3d:77:90:fc:a4:66:bc:14:5f:25:ba:
93:81:db:15:18:33:8d:e6:69:70:d9:61:46:37:88:ac:04:ed:
f1:ed:0a:be:60:9d:1b:fa:e0:73:61:9e:13:86:c5:4a:5d:95:
0d:84:7a:47:02:c2:b7:9f:42:e5:a8:99:5f:63:e9:e7:78:25:
c0:19:85:d0:c5:7d:dd:11:70:5e:a6:81:81:c8:d6:22:16:7c:
4d:84:2d:c6:87:64:45:8f:bd:4f:a1:64:5c:8d:21:eb:39:0b:
d7:d5:f1:c2:d4:4d:36:3f:b3:90:f8:c1:30:36:4c:50:4a:9e:
14:e4:91:da:fb:d8:df:b5:ad:f6:13:5e:83:78:ad:0d:9c:b5:
a9:17:95:4c:79:cd:b2:71:5c:ef:15:94:1d:36:85:04:95:37:
6c:59:fe:05:70:a4:21:92:ba:5b:f5:5e:33:28:40:b3:21:9f:
32:de:13:f4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnR8NDPMbqgkQabnCvqX+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjUwMTAyMTM1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzI3Yjk2OGM5YzMzNzcxZmJiMTdiYWEyNDk0NWViYjE1MDQyNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslvMcbzDB/ztfrZ+F3OU1tOW88Pl
7Kg+jMM6lOu6T+jRUHziJtQZmZ51UbajrAhqArIwf0rnSsQ3wVkC38IpxGOkA8On
Rb1AYCh0P2d3tlrmQQ339fGadt6iU0T25+egAbEAY2DKr8DUMNpxnFxR/c9C/9OY
apknlz2YnmTg/eeSmnY/doJoxf2eS9U4KOrQdfFZdkA2O0mkAZr2qjBKsDqX2mmo
FyYCYrEz39P7Mlc6daPDI+RfMSdsfFXewVpo8+XVCq9r2HeRS5s23QWCNGhf2SVW
h37FWEuiLaSumQcyJgB9jrixgDBggNH5rIPtfTTqwYKTgmt8UPXLNaSY2wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPMnuWjJwzdx+7F7qiSUXrsVBCV5MB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvOHllNWFNbkROM0g3c1h1cUpKUmV1eFVFSlhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgWwxwEB
AwcAKgWwxwEDMA0GCSqGSIb3DQEBCwUAA4IBAQBeabSbV6QWavp04aIarRetYxUT
AJBXgln+7vZ95NnNYrlxrTrv/wlungJTlespdfTSBtLC2oZEl1zzpoLt/02Rh+6t
aUV7Pn6pEzFbkQ+SPXeQ/KRmvBRfJbqTgdsVGDON5mlw2WFGN4isBO3x7Qq+YJ0b
+uBzYZ4ThsVKXZUNhHpHAsK3n0LlqJlfY+nneCXAGYXQxX3dEXBepoGByNYiFnxN
hC3Gh2RFj71PoWRcjSHrOQvX1fHC1E02P7OQ+MEwNkxQSp4U5JHa+9jfta32E16D
eK0NnLWpF5VMec2ycVzvFZQdNoUElTdsWf4FcKQhkrpb9V4zKECzIZ8y3hP0
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:03:14 2025 by rpki-client