Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GX4bXRCeT2xcy2v9oRXM_vdA2o8.roa
File: GX4bXRCeT2xcy2v9oRXM_vdA2o8.roa (raw, json)
Hash identifier: RIIsUCWhkqCdMMs5XZqcR/DJoygmvkxLD7e2dc9BIGk=
Subject key identifier: 19:7E:1B:5D:10:9E:4F:6C:5C:CB:6B:FD:A1:15:CC:FE:F7:40:DA:8F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425224DFCB334488E0D0E3B8A38040730
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GX4bXRCeT2xcy2v9oRXM_vdA2o8.roa
Signing time: Thu 02 Jan 2025 03:49:52 +0000
ROA not before: Thu 02 Jan 2025 03:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211242
IP address blocks: 2a0e:b107:13c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:4d:fc:b3:34:48:8e:0d:0e:3b:8a:38:04:07:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=197e1b5d109e4f6c5ccb6bfda115ccfef740da8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bd:97:08:53:3d:12:41:b5:4b:53:2c:65:8a:
be:81:ef:f3:73:1d:14:91:20:93:75:03:67:d5:3a:
6f:5f:dc:2c:c0:85:57:8f:6e:3e:de:48:fb:bb:85:
88:dc:ef:b7:30:8f:37:db:d6:c1:b2:a9:79:45:e5:
b9:5e:98:cc:82:29:f9:c8:77:4e:cb:97:dc:11:ad:
03:b5:5f:e0:08:1c:aa:a6:44:9f:be:af:dc:79:b5:
87:78:e4:e8:a8:ee:03:8c:9c:18:40:f3:8c:7f:79:
21:11:28:24:99:28:7b:d5:12:c9:58:30:f5:95:25:
a9:99:15:8e:2b:b6:51:99:82:69:2a:4e:b1:c3:7e:
47:3c:7f:e8:ec:2b:e2:0f:34:55:f4:05:87:c0:3c:
86:0b:15:79:f7:40:6d:e7:1a:82:8f:77:df:27:82:
93:7a:b7:47:c6:ae:1f:98:ab:b5:95:82:c0:d2:40:
84:dd:5f:c7:1b:3e:78:eb:01:bb:a0:16:d1:ba:76:
a7:f3:e0:17:a5:2f:e3:38:b7:a7:4e:b0:6e:a8:28:
65:41:b6:7a:0a:f9:0f:3c:dd:59:42:2f:0c:f0:88:
66:fd:73:ec:1c:35:08:2d:01:6b:ee:08:a5:28:23:
7a:52:f0:29:1f:c6:36:da:0a:93:77:45:84:38:2e:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7E:1B:5D:10:9E:4F:6C:5C:CB:6B:FD:A1:15:CC:FE:F7:40:DA:8F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GX4bXRCeT2xcy2v9oRXM_vdA2o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:13c0::/44
Signature Algorithm: sha256WithRSAEncryption
57:c1:94:6c:57:45:23:0e:59:df:3a:85:af:89:9f:ed:d3:7d:
2e:5e:c1:c1:db:23:20:d3:d3:57:5c:9f:02:2e:36:06:44:85:
f8:51:d2:a0:45:3c:a1:9c:fb:79:ab:ad:94:11:31:79:a3:1f:
7a:a2:05:4f:93:96:71:3a:f6:7d:8e:52:84:81:0d:a6:85:fa:
24:d5:ef:52:5a:d1:7a:99:db:1e:2d:5f:9d:38:22:d6:dd:10:
4d:cf:f0:2b:d1:5f:87:0a:95:2e:6f:c2:08:68:4c:b1:3a:47:
ad:10:ff:55:ca:a1:43:89:dc:7c:ad:1f:fa:c0:e7:2f:50:e6:
c9:13:48:e4:18:27:47:43:73:6f:0b:bc:fc:5c:f7:59:14:3e:
19:7f:ad:41:a1:e2:78:39:f6:f0:ce:f1:f0:ae:e2:52:87:59:
9d:a4:db:61:b5:94:2b:ea:eb:79:d0:03:fb:b0:b4:0b:04:de:
68:6b:60:45:bb:aa:61:ba:3c:28:42:1e:51:e9:6a:a6:cb:68:
b9:5c:76:06:52:30:f6:f1:c7:15:58:1a:43:64:e3:75:d9:da:
75:e9:e1:05:4c:1f:98:a5:1b:73:77:1e:8f:9f:bc:5b:10:11:
0a:3b:bc:75:70:2e:a8:1a:79:7a:06:2f:e7:b4:2f:a6:73:04:
ea:46:85:fb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIk38szRIjg0OO4o4BAcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTdlMWI1ZDEwOWU0ZjZjNWNjYjZiZmRhMTE1Y2NmZWY3NDBkYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo72XCFM9EkG1S1MsZYq+ge/zcx0U
kSCTdQNn1TpvX9wswIVXj24+3kj7u4WI3O+3MI8329bBsql5ReW5XpjMgin5yHdO
y5fcEa0DtV/gCByqpkSfvq/cebWHeOToqO4DjJwYQPOMf3khESgkmSh71RLJWDD1
lSWpmRWOK7ZRmYJpKk6xw35HPH/o7CviDzRV9AWHwDyGCxV590Bt5xqCj3ffJ4KT
erdHxq4fmKu1lYLA0kCE3V/HGz546wG7oBbRunan8+AXpS/jOLenTrBuqChlQbZ6
CvkPPN1ZQi8M8Ihm/XPsHDUILQFr7gilKCN6UvApH8Y22gqTd0WEOC4ySQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBl+G10Qnk9sXMtr/aEVzP73QNqPMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvR1g0YlhSQ2VUMnhjeTJ2OW9SWE1fdmRBMm84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxPA
MA0GCSqGSIb3DQEBCwUAA4IBAQBXwZRsV0UjDlnfOoWviZ/t030uXsHB2yMg09NX
XJ8CLjYGRIX4UdKgRTyhnPt5q62UETF5ox96ogVPk5ZxOvZ9jlKEgQ2mhfok1e9S
WtF6mdseLV+dOCLW3RBNz/Ar0V+HCpUub8IIaEyxOketEP9VyqFDidx8rR/6wOcv
UObJE0jkGCdHQ3NvC7z8XPdZFD4Zf61BoeJ4OfbwzvHwruJSh1mdpNthtZQr6ut5
0AP7sLQLBN5oa2BFu6phujwoQh5R6Wqmy2i5XHYGUjD28ccVWBpDZON12dp16eEF
TB+YpRtzdx6Pn7xbEBEKO7x1cC6oGnl6Bi/ntC+mcwTqRoX7
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:48:23 2025 by rpki-client