Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0fbsxj2gSK8QAyaSRCzYsYVWgRo.roa
File: 0fbsxj2gSK8QAyaSRCzYsYVWgRo.roa (raw, json)
Hash identifier: er8Gh4AkHPOJQLquCkOb4TkBBSrir6X8pTEAXcpWPws=
Subject key identifier: D1:F6:EC:C6:3D:A0:48:AF:10:03:26:92:44:2C:D8:B1:85:56:81:1A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425226FC97B968DC76807FAFAD6DFBB54
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0fbsxj2gSK8QAyaSRCzYsYVWgRo.roa
Signing time: Thu 02 Jan 2025 03:50:01 +0000
ROA not before: Thu 02 Jan 2025 03:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213286
IP address blocks: 2a10:2f00:131::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:6f:c9:7b:96:8d:c7:68:07:fa:fa:d6:df:bb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1f6ecc63da048af10032692442cd8b18556811a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:b1:e1:c6:56:47:82:ac:e0:64:47:bf:36:
dc:f1:8f:cc:0f:eb:05:06:72:f7:f2:d7:57:70:ad:
7d:52:42:37:dc:91:25:de:4e:8c:59:ab:ae:cc:09:
ac:0d:e2:c0:e0:b0:65:d3:70:9f:c4:ff:f9:3f:61:
28:ff:d2:73:5d:d8:92:bf:5a:a6:0e:22:7f:b3:5e:
63:15:76:8e:40:d6:57:7d:4a:cd:35:38:7c:64:5a:
f1:42:85:27:69:53:30:70:4b:b7:02:c3:be:bd:ee:
0a:06:c6:74:48:81:af:5d:28:e5:6a:c6:44:b7:b6:
40:4b:3c:40:52:22:7c:fd:7d:94:4c:bd:47:44:8d:
2c:9e:bf:6f:da:59:98:35:52:0c:e1:72:6e:3e:50:
86:23:35:25:0f:4e:89:f8:c3:c1:c2:49:63:7c:d2:
9b:13:bd:3d:16:76:f7:cc:27:93:46:e8:d5:36:18:
46:95:32:95:a3:ef:41:96:57:81:f4:5a:c7:16:4b:
0b:bf:97:9a:fa:7f:da:24:7f:a2:a7:f1:75:7b:14:
c8:46:0e:23:27:9e:3d:f6:8b:56:d7:2a:09:a3:21:
1a:c1:dd:37:88:65:07:a8:8a:ad:b2:33:e1:18:e3:
48:cc:5b:db:43:4e:a6:9d:55:e6:05:06:52:bb:27:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:EC:C6:3D:A0:48:AF:10:03:26:92:44:2C:D8:B1:85:56:81:1A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0fbsxj2gSK8QAyaSRCzYsYVWgRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:131::/48
Signature Algorithm: sha256WithRSAEncryption
a9:2d:de:30:0c:79:1e:03:67:57:ab:c6:39:f7:4f:b5:ce:2a:
f7:bc:ee:75:34:a8:b7:09:7c:a4:4b:8e:81:8f:1a:52:82:64:
f1:6f:22:8a:5d:97:5a:02:8c:8b:44:c2:f8:67:64:19:90:cd:
c4:45:4c:53:16:d0:bf:9f:5d:3f:4e:ee:44:53:16:d8:9b:b4:
39:d4:f2:1b:54:7b:c8:22:2d:46:72:c2:2d:7a:76:c9:73:6e:
2e:19:b4:cc:1b:d8:98:21:39:b5:ca:4a:4a:64:79:f2:30:85:
52:e5:fe:85:f8:d3:20:b6:1e:98:84:63:78:26:c5:d2:4f:d5:
36:c3:2c:5b:f5:d6:50:ea:2f:1f:f3:2a:44:30:6c:3c:66:63:
ed:14:96:8c:60:a4:2b:9d:40:ce:77:a6:d3:2e:9e:af:d3:76:
ab:85:1b:b8:34:e3:ed:f1:ce:7f:9e:15:30:1c:e3:fa:c7:88:
08:a9:6d:7f:e7:34:0f:3a:0d:66:f3:80:77:8d:27:02:f9:63:
06:3e:4f:8d:32:34:c8:eb:b5:c6:f5:b3:c7:df:c0:d9:4a:33:
32:5f:38:9b:69:04:33:1b:35:c3:92:f9:dd:a2:eb:93:f0:a4:
4c:1d:88:a1:64:ba:67:b2:ea:55:d3:24:c9:d5:cc:f2:95:e0:
3b:25:ad:68
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIm/Je5aNx2gH+vrW37tUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWY2ZWNjNjNkYTA0OGFmMTAwMzI2OTI0NDJjZDhiMTg1NTY4MTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApROx4cZWR4Ks4GRHvzbc8Y/MD+sF
BnL38tdXcK19UkI33JEl3k6MWauuzAmsDeLA4LBl03CfxP/5P2Eo/9JzXdiSv1qm
DiJ/s15jFXaOQNZXfUrNNTh8ZFrxQoUnaVMwcEu3AsO+ve4KBsZ0SIGvXSjlasZE
t7ZASzxAUiJ8/X2UTL1HRI0snr9v2lmYNVIM4XJuPlCGIzUlD06J+MPBwkljfNKb
E709Fnb3zCeTRujVNhhGlTKVo+9BlleB9FrHFksLv5ea+n/aJH+ip/F1exTIRg4j
J5499otW1yoJoyEawd03iGUHqIqtsjPhGONIzFvbQ06mnVXmBQZSuyep4wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNH27MY9oEivEAMmkkQs2LGFVoEaMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMGZic3hqMmdTSzhRQXlhU1JDellzWVZXZ1JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAEx
MA0GCSqGSIb3DQEBCwUAA4IBAQCpLd4wDHkeA2dXq8Y590+1zir3vO51NKi3CXyk
S46BjxpSgmTxbyKKXZdaAoyLRML4Z2QZkM3ERUxTFtC/n10/Tu5EUxbYm7Q51PIb
VHvIIi1GcsItenbJc24uGbTMG9iYITm1ykpKZHnyMIVS5f6F+NMgth6YhGN4JsXS
T9U2wyxb9dZQ6i8f8ypEMGw8ZmPtFJaMYKQrnUDOd6bTLp6v03arhRu4NOPt8c5/
nhUwHOP6x4gIqW1/5zQPOg1m84B3jScC+WMGPk+NMjTI67XG9bPH38DZSjMyXzib
aQQzGzXDkvndouuT8KRMHYihZLpnsupV0yTJ1czyleA7Ja1o
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:11 2025 by rpki-client