Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9OqezOydhVwmxWqPTG83x2NY-wM.roa
File: 9OqezOydhVwmxWqPTG83x2NY-wM.roa (raw, json)
Hash identifier: OEPFbcOYYe8hXeVlg5GOecps8XqdPn5+ZEBUdkGfxRg=
Subject key identifier: F4:EA:9E:CC:EC:9D:85:5C:26:C5:6A:8F:4C:6F:37:C7:63:58:FB:03
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019499DF2B52618A375864FFF870D4553EB5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9OqezOydhVwmxWqPTG83x2NY-wM.roa
Signing time: Fri 24 Jan 2025 19:52:07 +0000
ROA not before: Fri 24 Jan 2025 19:52:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214243
IP address blocks: 2a06:de00:7f1::/48 maxlen: 48
2a0e:97c0:4c0::/44 maxlen: 48
2a0e:97c0:4c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:99:df:2b:52:61:8a:37:58:64:ff:f8:70:d4:55:3e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 19:52:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4ea9eccec9d855c26c56a8f4c6f37c76358fb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:2a:2e:22:87:99:9e:5d:26:6b:58:8f:f8:
97:e3:fa:4c:09:5c:b2:64:a7:ad:be:7b:f5:44:90:
09:94:9d:52:96:04:67:31:b7:b3:87:13:cf:52:58:
39:e8:3f:ab:2a:da:71:98:07:4a:5b:27:f4:43:49:
34:77:02:b2:d8:30:fd:33:f9:4a:4d:d7:1c:34:39:
de:11:80:82:2d:05:c3:54:85:cd:3e:24:cf:25:f8:
aa:66:7e:71:00:ff:15:6b:4e:c0:e1:77:8d:e7:ca:
de:4a:27:34:6e:db:07:6d:1a:8a:fc:3f:b2:27:8a:
70:db:0d:3e:1a:f2:66:85:a5:38:52:19:b0:e6:ce:
a2:53:a3:30:e4:e9:ef:81:f0:83:d2:fc:ff:16:19:
5a:5c:3b:22:f8:5e:b2:49:d3:59:31:a3:4e:98:ea:
31:46:b2:cc:d8:ee:e7:1d:6a:f0:93:fc:c2:bc:05:
cb:7f:2c:02:56:18:5c:9a:0f:0b:34:15:3f:f2:1b:
9e:e0:52:56:e6:1d:6e:8f:57:79:84:e1:0c:74:7c:
3b:25:c2:a8:40:7d:02:cc:1d:90:f8:7c:8a:84:10:
8c:c4:e3:f4:c2:a3:32:f5:48:e9:ee:d4:8d:6d:f5:
e9:e1:03:79:47:b1:a6:02:27:70:2b:e9:f5:4a:01:
dd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EA:9E:CC:EC:9D:85:5C:26:C5:6A:8F:4C:6F:37:C7:63:58:FB:03
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9OqezOydhVwmxWqPTG83x2NY-wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:7f1::/48
2a0e:97c0:4c0::/44
Signature Algorithm: sha256WithRSAEncryption
53:a0:2b:27:e4:50:21:a8:13:dd:94:4d:34:93:5d:73:99:db:
38:76:d7:ea:b4:9c:e1:60:c8:9f:7f:ef:ff:19:b1:f7:13:91:
38:10:f7:a9:45:dc:c5:be:8b:1e:9c:71:8f:4c:a3:2a:60:ef:
63:43:68:03:12:44:bb:ad:d6:cb:e5:0c:ff:5d:1d:80:11:e4:
b2:79:ba:14:e3:ec:59:9e:7f:5e:33:a4:28:60:ca:9c:0e:eb:
57:c5:0e:1f:52:75:b7:a1:90:0e:10:c5:f1:6e:6e:67:af:e1:
fa:1d:ef:4e:12:fa:0c:0e:a2:b2:a8:45:3c:68:b7:8a:98:39:
73:5a:aa:a5:87:3d:db:94:09:67:70:c1:bb:f4:a0:65:73:72:
a5:6d:77:b2:dd:80:95:57:b4:8b:87:f3:57:a1:71:58:28:5a:
b7:44:fb:89:f2:3f:70:15:6f:a3:9e:09:72:7b:0d:6d:8b:a9:
6e:72:4a:d3:8f:04:1b:b8:64:d6:0e:d3:8a:eb:ed:cc:8e:bc:
8f:8a:a9:ba:40:de:96:a8:b3:d5:a2:4b:34:1a:aa:c4:0a:04:
95:19:04:07:cd:93:1f:1c:b9:0f:b5:69:83:7a:ef:0e:60:ce:
8c:ac:ee:c4:23:10:72:0f:0b:b9:a5:ff:13:7a:29:aa:9e:32:
12:53:cf:d1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZSZ3ytSYYo3WGT/+HDUVT61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTI0MTk1MjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGVhOWVjY2VjOWQ4NTVjMjZjNTZhOGY0YzZmMzdjNzYzNThmYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qAqLiKHmZ5dJmtYj/iX4/pMCVyy
ZKetvnv1RJAJlJ1SlgRnMbezhxPPUlg56D+rKtpxmAdKWyf0Q0k0dwKy2DD9M/lK
TdccNDneEYCCLQXDVIXNPiTPJfiqZn5xAP8Va07A4XeN58reSic0btsHbRqK/D+y
J4pw2w0+GvJmhaU4Uhmw5s6iU6Mw5OnvgfCD0vz/FhlaXDsi+F6ySdNZMaNOmOox
RrLM2O7nHWrwk/zCvAXLfywCVhhcmg8LNBU/8hue4FJW5h1uj1d5hOEMdHw7JcKo
QH0CzB2Q+HyKhBCMxOP0wqMy9Ujp7tSNbfXp4QN5R7GmAidwK+n1SgHdgQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPTqnszsnYVcJsVqj0xvN8djWPsDMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOU9xZXpPeWRoVndteFdxUFRHODN4Mk5ZLXdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgbeAAfx
AwcEKg6XwATAMA0GCSqGSIb3DQEBCwUAA4IBAQBToCsn5FAhqBPdlE00k11zmds4
dtfqtJzhYMiff+//GbH3E5E4EPepRdzFvosenHGPTKMqYO9jQ2gDEkS7rdbL5Qz/
XR2AEeSyeboU4+xZnn9eM6QoYMqcDutXxQ4fUnW3oZAOEMXxbm5nr+H6He9OEvoM
DqKyqEU8aLeKmDlzWqqlhz3blAlncMG79KBlc3KlbXey3YCVV7SLh/NXoXFYKFq3
RPuJ8j9wFW+jnglyew1ti6luckrTjwQbuGTWDtOK6+3MjryPiqm6QN6WqLPVoks0
GqrECgSVGQQHzZMfHLkPtWmDeu8OYM6MrO7EIxByDwu5pf8TeimqnjISU8/R
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:55:57 2025 by rpki-client