Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0JCEoMuHTdmZFk8SuU3wWmVcsxw.roa
File: 0JCEoMuHTdmZFk8SuU3wWmVcsxw.roa (raw, json)
Hash identifier: n050tRo+bwz4lgiLvPlEuqwXhAo3j2dexbs3FdJKZjo=
Subject key identifier: D0:90:84:A0:CB:87:4D:D9:99:16:4F:12:B9:4D:F0:5A:65:5C:B3:1C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425227CDA75CF26EBF706B105E9F34365
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0JCEoMuHTdmZFk8SuU3wWmVcsxw.roa
Signing time: Thu 02 Jan 2025 03:50:04 +0000
ROA not before: Thu 02 Jan 2025 03:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214556
IP address blocks: 2a0e:97c0:440::/44 maxlen: 48
2a0e:97c0:440::/46 maxlen: 48
2a0e:97c0:444::/46 maxlen: 48
2a0e:97c0:448::/46 maxlen: 48
2a0e:97c0:44c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:7c:da:75:cf:26:eb:f7:06:b1:05:e9:f3:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d09084a0cb874dd999164f12b94df05a655cb31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:02:0b:7c:33:97:75:fe:b5:af:3b:1f:d7:
a0:cd:d3:e7:f5:21:bf:91:01:b0:8a:a8:fb:83:e9:
c1:55:89:1a:78:0a:a4:af:29:26:ed:2c:0c:7b:85:
1a:66:df:16:f2:e5:28:73:a9:4f:de:03:0d:c6:18:
ca:60:0f:60:b7:6b:68:c2:18:bf:b0:68:66:0d:b9:
5e:6b:af:71:93:8a:ec:88:ab:a8:62:d7:6d:06:c8:
62:47:a1:de:e6:1e:bb:5c:f5:a9:fe:70:20:9c:e8:
a9:8d:1d:75:19:3b:9d:fc:3a:1d:16:19:6c:e4:84:
7c:10:08:61:dc:63:bc:d9:71:28:5e:6e:b1:fe:49:
64:11:fa:ab:49:15:4b:a4:17:27:15:9a:69:79:81:
71:72:29:5e:be:d3:6a:45:b7:fc:cb:19:96:c6:ec:
55:85:7b:77:d1:24:a0:06:23:0a:57:72:dd:88:9c:
64:1d:a3:49:16:85:93:19:49:27:37:38:3d:bf:7b:
52:db:dd:ea:79:e3:a1:e4:50:ac:80:2e:4f:8a:b3:
98:bd:6b:cc:38:6e:da:cf:50:42:a2:26:3a:01:63:
03:ad:8b:a3:6b:91:94:4f:62:c4:48:5d:91:8c:12:
00:c8:90:48:ff:7c:17:bd:c3:3b:b9:2d:2d:83:a2:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:90:84:A0:CB:87:4D:D9:99:16:4F:12:B9:4D:F0:5A:65:5C:B3:1C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0JCEoMuHTdmZFk8SuU3wWmVcsxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:440::/44
Signature Algorithm: sha256WithRSAEncryption
90:b3:99:46:c9:d8:fc:1a:bf:0c:19:78:3a:9f:ae:b8:8c:18:
c2:5f:be:60:75:b2:2f:0f:c4:c8:f2:4e:59:7d:1f:66:8d:0c:
da:f9:09:da:b9:5e:28:78:ca:d1:ea:4a:d9:06:45:8e:9e:6a:
07:a4:96:38:d4:b2:bb:12:63:ec:b6:49:9d:20:4a:b2:89:3c:
62:60:00:3b:1a:d5:64:30:9e:dc:c1:83:b6:ac:60:fe:30:1e:
61:c2:a1:07:f5:a2:46:c0:95:23:c7:c4:03:e2:93:09:be:3c:
95:7b:3e:b2:69:77:11:90:b3:79:f8:7d:22:5a:6e:90:52:cd:
df:03:1c:ed:86:95:b2:7a:7d:f1:2a:03:be:c2:ce:80:de:d3:
d6:88:61:eb:ab:9b:35:e9:2f:4d:94:9b:ef:90:45:fb:6e:be:
91:f2:66:64:72:9f:03:05:a3:a9:d2:69:be:d8:ae:b8:0d:3e:
e8:c0:da:53:cf:c1:96:c5:21:0d:29:d1:d5:77:76:ca:69:c4:
14:c1:05:b0:e0:6d:20:8f:61:cd:4c:cc:1c:f2:44:89:52:39:
12:2c:06:77:dc:1f:74:ad:bd:cb:6a:f4:e5:15:55:44:af:d5:
e9:65:a6:f9:d3:2f:72:dd:f8:66:d9:48:98:8a:f2:08:d3:dc:
e0:f2:ec:ac
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlInzadc8m6/cGsQXp80NlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDkwODRhMGNiODc0ZGQ5OTkxNjRmMTJiOTRkZjA1YTY1NWNiMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkkCC3wzl3X+ta87H9egzdPn9SG/
kQGwiqj7g+nBVYkaeAqkrykm7SwMe4UaZt8W8uUoc6lP3gMNxhjKYA9gt2towhi/
sGhmDblea69xk4rsiKuoYtdtBshiR6He5h67XPWp/nAgnOipjR11GTud/DodFhls
5IR8EAhh3GO82XEoXm6x/klkEfqrSRVLpBcnFZppeYFxcilevtNqRbf8yxmWxuxV
hXt30SSgBiMKV3LdiJxkHaNJFoWTGUknNzg9v3tS293qeeOh5FCsgC5PirOYvWvM
OG7az1BCoiY6AWMDrYuja5GUT2LESF2RjBIAyJBI/3wXvcM7uS0tg6Jk3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNCQhKDLh03ZmRZPErlN8FplXLMcMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMEpDRW9NdUhUZG1aRms4U3VVM3dXbVZjc3h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwARA
MA0GCSqGSIb3DQEBCwUAA4IBAQCQs5lGydj8Gr8MGXg6n664jBjCX75gdbIvD8TI
8k5ZfR9mjQza+QnauV4oeMrR6krZBkWOnmoHpJY41LK7EmPstkmdIEqyiTxiYAA7
GtVkMJ7cwYO2rGD+MB5hwqEH9aJGwJUjx8QD4pMJvjyVez6yaXcRkLN5+H0iWm6Q
Us3fAxzthpWyen3xKgO+ws6A3tPWiGHrq5s16S9NlJvvkEX7br6R8mZkcp8DBaOp
0mm+2K64DT7owNpTz8GWxSENKdHVd3bKacQUwQWw4G0gj2HNTMwc8kSJUjkSLAZ3
3B90rb3LavTlFVVEr9XpZab50y9y3fhm2UiYivII09zg8uys
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:53:13 2025 by rpki-client