Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2b0USWsHBxtigkAnmoOpRBHdZEc.roa
File: 2b0USWsHBxtigkAnmoOpRBHdZEc.roa (raw, json)
Hash identifier: bx95QO4rMU4kQAlzSZcwda9iv/Ve/J+mTFRMFrPGY3g=
Subject key identifier: D9:BD:14:49:6B:07:07:1B:62:82:40:27:9A:83:A9:44:11:DD:64:47
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425227E2BC8C7A5ACA3DE1F4C533ED97A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2b0USWsHBxtigkAnmoOpRBHdZEc.roa
Signing time: Thu 02 Jan 2025 03:50:05 +0000
ROA not before: Thu 02 Jan 2025 03:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214598
IP address blocks: 2a0e:97c0:3a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:7e:2b:c8:c7:a5:ac:a3:de:1f:4c:53:3e:d9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9bd14496b07071b628240279a83a94411dd6447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:bf:c4:06:4f:6e:a0:f2:1e:ea:46:05:84:
c3:2e:23:0f:37:02:27:ff:8c:75:60:de:62:aa:82:
74:7e:a8:80:be:0f:40:9a:92:0f:89:56:f2:0e:f2:
05:6f:11:e1:bb:77:30:05:9f:c5:f7:b3:a9:10:3a:
51:5c:c6:40:7d:e3:bd:b9:e2:86:3a:d3:c0:8a:47:
79:d0:12:52:6d:8e:bb:88:cc:1a:72:0c:63:4c:49:
c3:6e:95:f6:f2:9b:52:89:c3:74:79:d0:e6:54:e6:
72:61:b8:03:0a:8c:46:a3:bb:37:3b:0d:db:8f:36:
66:60:06:b0:2c:3c:b6:da:0b:0d:5a:0b:08:08:3b:
41:06:3c:81:5e:e3:49:74:90:10:28:22:ef:1b:91:
f2:2e:9b:6c:fb:21:39:ae:42:36:99:fc:f5:71:b1:
e9:dc:90:d8:c2:fc:1a:08:33:13:78:7e:51:d6:96:
8e:7e:15:e2:81:c1:9f:2a:67:74:ee:8e:50:15:2d:
a6:86:f7:d9:b5:07:30:15:d3:69:3c:60:3c:d3:20:
52:74:36:e3:8b:35:6f:c2:e8:1d:fd:22:0e:1b:20:
1e:e1:b5:41:d5:9b:44:f3:94:88:58:a9:4f:c0:31:
3d:16:24:00:76:da:2a:38:2b:f6:e6:40:37:a4:18:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:14:49:6B:07:07:1B:62:82:40:27:9A:83:A9:44:11:DD:64:47
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2b0USWsHBxtigkAnmoOpRBHdZEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3a0::/44
Signature Algorithm: sha256WithRSAEncryption
27:a0:a7:7d:43:c3:d3:83:11:19:5d:1e:2a:74:9c:ef:8c:36:
a8:a5:1a:d9:d4:da:2c:0a:b1:09:db:db:ce:a3:60:e8:ae:a5:
88:9b:c3:bf:cc:e5:d7:4d:74:ce:9d:8d:09:64:fe:83:06:5c:
c2:bc:d8:20:37:39:b5:86:0c:e2:6e:c5:44:00:c8:8a:74:81:
72:79:5e:22:43:07:7a:29:6c:22:e3:04:0b:94:ed:b2:94:62:
34:aa:3e:47:fa:ee:74:e2:a2:08:28:7b:9d:c2:5a:d2:58:05:
d1:38:43:ef:f7:a4:88:3c:c4:67:63:75:04:b4:54:55:23:0d:
10:3b:f2:01:12:1e:5c:17:70:fa:30:11:8c:93:f8:4a:d4:d5:
d8:4d:80:48:07:17:8e:2f:cd:70:5e:00:2b:81:f3:85:bf:d2:
93:cc:47:52:ee:69:e5:b7:73:01:06:99:fb:b1:14:31:d4:76:
a7:88:df:21:0c:95:f8:b9:c8:4d:e5:1b:6f:60:cb:9c:e6:8c:
82:ad:71:a9:7d:0b:ea:76:a0:e4:65:db:82:bc:1e:b0:79:ca:
c5:27:e0:ed:bd:16:43:82:0f:2a:3d:05:e5:8d:79:d7:8a:bd:
07:eb:31:31:a3:b7:8c:06:fa:05:a4:a7:ed:28:ba:62:a5:ba:
9c:fe:a9:28
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIn4ryMelrKPeH0xTPtl6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWJkMTQ0OTZiMDcwNzFiNjI4MjQwMjc5YTgzYTk0NDExZGQ2NDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17G/xAZPbqDyHupGBYTDLiMPNwIn
/4x1YN5iqoJ0fqiAvg9AmpIPiVbyDvIFbxHhu3cwBZ/F97OpEDpRXMZAfeO9ueKG
OtPAikd50BJSbY67iMwacgxjTEnDbpX28ptSicN0edDmVOZyYbgDCoxGo7s3Ow3b
jzZmYAawLDy22gsNWgsICDtBBjyBXuNJdJAQKCLvG5HyLpts+yE5rkI2mfz1cbHp
3JDYwvwaCDMTeH5R1paOfhXigcGfKmd07o5QFS2mhvfZtQcwFdNpPGA80yBSdDbj
izVvwugd/SIOGyAe4bVB1ZtE85SIWKlPwDE9FiQAdtoqOCv25kA3pBjMrQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNm9FElrBwcbYoJAJ5qDqUQR3WRHMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvMmIwVVNXc0hCeHRpZ2tBbm1vT3BSQkhkWkVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAOg
MA0GCSqGSIb3DQEBCwUAA4IBAQAnoKd9Q8PTgxEZXR4qdJzvjDaopRrZ1NosCrEJ
29vOo2DorqWIm8O/zOXXTXTOnY0JZP6DBlzCvNggNzm1hgzibsVEAMiKdIFyeV4i
Qwd6KWwi4wQLlO2ylGI0qj5H+u504qIIKHudwlrSWAXROEPv96SIPMRnY3UEtFRV
Iw0QO/IBEh5cF3D6MBGMk/hK1NXYTYBIBxeOL81wXgArgfOFv9KTzEdS7mnlt3MB
Bpn7sRQx1HaniN8hDJX4uchN5RtvYMuc5oyCrXGpfQvqdqDkZduCvB6wecrFJ+Dt
vRZDgg8qPQXljXnXir0H6zExo7eMBvoFpKftKLpipbqc/qko
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:47:49 2025 by rpki-client