Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-VJB7wI25Hl1rKpOJJTc2V1bQ3c.roa
File: 1-VJB7wI25Hl1rKpOJJTc2V1bQ3c.roa (raw, json)
Hash identifier: ithZxW8sUJ8/me9HzXk3ebE+gRKGtn+QJbcCG9G8uDA=
Subject key identifier: F9:52:41:EF:02:36:E4:79:75:AC:AA:4E:24:94:DC:D9:5D:5B:43:77
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220938D1FA6F7E69503F1DDB0E0BF9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-VJB7wI25Hl1rKpOJJTc2V1bQ3c.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202256
IP address blocks: 2a06:de01:800::/38 maxlen: 48
2a10:ccc7:9000::/40 maxlen: 48
2a10:ccc7:9200::/40 maxlen: 48
2a10:ccc7:9300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:09:38:d1:fa:6f:7e:69:50:3f:1d:db:0e:0b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f95241ef0236e47975acaa4e2494dcd95d5b4377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:50:a5:07:a4:bf:ee:7b:85:6e:83:ce:cb:
4e:65:05:1e:5c:1f:0e:9d:16:a3:0d:e2:09:de:1b:
ef:3f:cf:41:cf:58:ef:30:9f:29:f0:cd:7a:30:92:
cb:87:e2:65:9e:09:4c:43:7b:fc:d5:02:79:81:d6:
88:64:64:93:6b:7a:06:6a:ad:4c:7c:fd:8c:b1:e0:
ad:c9:d4:34:c3:c5:d8:d7:f6:e1:80:f2:b8:33:f1:
b6:58:98:d0:a7:bd:6c:57:86:21:fe:9b:af:a2:bf:
ce:e5:5e:7c:d2:8f:e2:ba:f6:c4:a2:d2:0d:41:38:
92:18:09:4b:a1:ab:3a:e8:ee:1a:13:2c:b0:23:e4:
83:99:6a:0f:fc:1b:ba:77:cf:5b:b9:b3:20:42:aa:
54:64:15:ec:05:f5:30:a4:47:08:c2:f3:95:59:c2:
61:59:37:ed:9a:d8:9c:ec:26:28:35:e7:49:80:d6:
7c:6d:bb:36:bf:69:15:bf:ff:a0:84:0e:1b:1a:09:
4b:f9:a9:3e:14:ed:96:4c:c1:f5:7b:99:62:13:98:
59:03:0b:1e:b8:a2:16:e1:c5:18:fb:f5:94:a1:84:
0e:a1:47:2a:67:61:f0:ac:b5:fc:a8:de:d5:c3:44:
b9:6e:7a:39:9a:40:8b:f7:fd:83:b3:0e:fb:bf:40:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:41:EF:02:36:E4:79:75:AC:AA:4E:24:94:DC:D9:5D:5B:43:77
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-VJB7wI25Hl1rKpOJJTc2V1bQ3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:800::/38
2a10:ccc7:9000::/40
2a10:ccc7:9200::/39
Signature Algorithm: sha256WithRSAEncryption
7a:e4:ce:39:92:c7:6a:f2:aa:20:8e:be:5a:53:46:fb:0b:8e:
f2:f9:a0:8d:c9:de:4f:59:39:3b:a7:cc:d7:5d:ea:f1:7e:f4:
56:b5:d6:28:7a:39:cf:2a:fc:ff:06:03:fb:2a:81:77:76:a3:
72:e5:31:95:93:96:75:b0:84:22:d5:57:64:93:50:6a:a9:99:
41:c0:7c:61:c0:c9:cf:f3:36:5a:fd:1b:27:ef:3f:e5:49:64:
1a:3e:e4:5a:b8:93:0f:59:8d:e1:b7:9e:b8:bf:09:32:0c:e6:
bf:df:ba:c8:d3:d4:94:19:7a:3a:18:14:2d:f4:79:a6:bb:05:
19:61:1f:de:97:9f:6b:cd:b0:49:8f:63:77:2e:15:2c:58:01:
f7:e9:9f:e7:a3:1f:df:ff:82:b6:77:b8:14:ef:e8:43:79:72:
92:68:92:59:21:9e:a6:0b:bb:2c:51:bc:10:54:8a:3e:e3:b8:
c3:bf:00:a8:81:d6:77:f3:3f:ac:4a:59:fa:fc:93:8a:7e:49:
63:bb:63:56:91:22:9f:98:31:1b:9c:2b:fb:31:99:5a:7a:bd:
dd:33:82:30:09:75:b2:67:05:e7:45:10:29:86:f6:ea:4d:2e:
22:86:df:95:9f:cd:91:85:c3:f2:e2:03:22:01:12:63:6e:c2:
2d:b5:3a:89
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZQlIgk40fpvfmlQPx3bDgv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTUyNDFlZjAyMzZlNDc5NzVhY2FhNGUyNDk0ZGNkOTVkNWI0Mzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF5QpQekv+57hW6DzstOZQUeXB8O
nRajDeIJ3hvvP89Bz1jvMJ8p8M16MJLLh+JlnglMQ3v81QJ5gdaIZGSTa3oGaq1M
fP2MseCtydQ0w8XY1/bhgPK4M/G2WJjQp71sV4Yh/puvor/O5V580o/iuvbEotIN
QTiSGAlLoas66O4aEyywI+SDmWoP/Bu6d89bubMgQqpUZBXsBfUwpEcIwvOVWcJh
WTftmtic7CYoNedJgNZ8bbs2v2kVv/+ghA4bGglL+ak+FO2WTMH1e5liE5hZAwse
uKIW4cUY+/WUoYQOoUcqZ2HwrLX8qN7Vw0S5bno5mkCL9/2Dsw77v0CQYwIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFPlSQe8CNuR5dayqTiSU3NldW0N3MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMS1WSkI3d0kyNUhsMXJLcE9KSlRjMlYxYlEzYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZh
NS8xL1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAIwGAMGAioG3gEI
AwYAKhDMx5ADBgEqEMzHkjANBgkqhkiG9w0BAQsFAAOCAQEAeuTOOZLHavKqII6+
WlNG+wuO8vmgjcneT1k5O6fM113q8X70VrXWKHo5zyr8/wYD+yqBd3ajcuUxlZOW
dbCEItVXZJNQaqmZQcB8YcDJz/M2Wv0bJ+8/5UlkGj7kWriTD1mN4beeuL8JMgzm
v9+6yNPUlBl6OhgULfR5prsFGWEf3pefa82wSY9jdy4VLFgB9+mf56Mf3/+Ctne4
FO/oQ3lykmiSWSGepgu7LFG8EFSKPuO4w78AqIHWd/M/rEpZ+vyTin5JY7tjVpEi
n5gxG5wr+zGZWnq93TOCMAl1smcF50UQKYb26k0uIobflZ/NkYXD8uIDIgESY27C
LbU6iQ==
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:11 2025 by rpki-client