Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J4a0RBNa8Pb48vGV3QLqVpobF_Q.roa
File: J4a0RBNa8Pb48vGV3QLqVpobF_Q.roa (raw, json)
Hash identifier: EY3+j6Iq28kTiNHAkHeoIcI+oigRfR2rKQsInFZ4nqc=
Subject key identifier: 27:86:B4:44:13:5A:F0:F6:F8:F2:F1:95:DD:02:EA:56:9A:1B:17:F4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252212F1093B76F5B49AB76A2BF898A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J4a0RBNa8Pb48vGV3QLqVpobF_Q.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203655
IP address blocks: 2a0e:b107:1b60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:12:f1:09:3b:76:f5:b4:9a:b7:6a:2b:f8:98:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2786b444135af0f6f8f2f195dd02ea569a1b17f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:b9:61:98:bc:9c:d4:7a:82:1b:af:85:d3:
47:33:2f:81:df:72:9d:09:dd:72:6b:4d:32:27:15:
cb:c2:79:8c:cf:a3:95:8c:81:b7:6a:3d:d2:eb:36:
01:0f:2a:a7:b0:0c:4a:c5:2f:75:6a:31:6a:af:ee:
9f:0a:75:6a:ca:28:26:6b:d0:2f:4d:e7:2b:17:42:
fd:b4:ce:5d:4d:01:bb:71:b5:ab:51:22:ae:8b:c9:
23:0f:00:7a:e7:5e:19:bd:29:4e:86:85:0f:54:ff:
f5:94:2e:15:00:47:78:83:c4:80:4d:68:7a:b3:58:
b9:7e:b2:df:e4:23:6f:77:2b:13:3f:f2:2a:62:6c:
cd:56:ee:da:2e:76:eb:8f:9e:3e:8b:29:08:54:cc:
92:e0:be:32:22:61:56:bc:6b:de:0c:ec:30:e0:eb:
45:37:9f:12:ab:c4:ba:5b:58:3f:f9:1b:a0:7a:61:
91:d8:23:5f:d2:19:69:1e:de:a3:c3:d9:69:de:31:
70:51:c2:2f:64:a8:f7:be:4a:80:ae:73:c1:9e:fb:
26:25:c9:6d:d2:64:9d:63:88:fa:68:df:b3:d8:68:
a8:9f:f9:6c:79:9b:f0:07:70:59:cc:2e:74:1a:3f:
57:68:03:99:ac:97:67:dd:d0:81:40:85:9c:92:75:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:86:B4:44:13:5A:F0:F6:F8:F2:F1:95:DD:02:EA:56:9A:1B:17:F4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/J4a0RBNa8Pb48vGV3QLqVpobF_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1b60::/44
Signature Algorithm: sha256WithRSAEncryption
06:69:95:5e:01:bf:c5:db:ea:b3:5d:15:5d:d1:9e:36:31:9a:
a1:bc:d9:2d:4d:ea:6f:c0:52:33:9c:c9:55:34:c8:b3:90:ee:
de:ae:3f:ff:97:1e:62:5e:4a:71:3e:70:f0:ad:0b:7b:95:87:
dd:98:88:a8:ea:8e:2a:c6:a4:11:98:21:85:de:e8:76:53:2a:
d8:34:3d:19:b4:06:b8:7a:d7:29:06:32:5b:b7:a5:72:87:1e:
3a:e7:45:5a:ec:a2:50:8d:3d:e8:08:0d:fb:1d:e6:dd:8d:fa:
8d:e3:cd:ed:cf:70:2f:8b:a1:b8:ae:7a:6a:af:89:d5:f1:b7:
16:55:fc:39:24:6f:20:10:28:4c:63:9e:a1:d9:d0:2e:48:36:
02:69:1f:14:97:3f:f3:14:28:8a:14:93:94:0d:fd:2a:51:a7:
5c:d8:94:8c:02:ba:cb:37:bb:3d:e4:79:f2:17:c9:6b:77:25:
62:3d:29:71:ea:b5:5e:6d:85:18:dd:d7:d5:60:1d:6d:96:0d:
63:da:85:f2:8b:a2:de:88:05:7c:71:4e:45:04:30:0b:d8:ed:
0c:dc:8e:ab:bb:53:98:9f:8d:ab:d2:fa:fe:1b:77:0b:6e:4e:
01:f2:a2:91:8e:07:61:17:6a:9d:3b:82:ab:ad:24:c9:ce:2d:
a7:57:31:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIhLxCTt29bSat2or+JihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzg2YjQ0NDEzNWFmMGY2ZjhmMmYxOTVkZDAyZWE1NjlhMWIxN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtii5YZi8nNR6ghuvhdNHMy+B33Kd
Cd1ya00yJxXLwnmMz6OVjIG3aj3S6zYBDyqnsAxKxS91ajFqr+6fCnVqyigma9Av
TecrF0L9tM5dTQG7cbWrUSKui8kjDwB6514ZvSlOhoUPVP/1lC4VAEd4g8SATWh6
s1i5frLf5CNvdysTP/IqYmzNVu7aLnbrj54+iykIVMyS4L4yImFWvGveDOww4OtF
N58Sq8S6W1g/+RugemGR2CNf0hlpHt6jw9lp3jFwUcIvZKj3vkqArnPBnvsmJclt
0mSdY4j6aN+z2Gion/lseZvwB3BZzC50Gj9XaAOZrJdn3dCBQIWcknW5CwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCeGtEQTWvD2+PLxld0C6laaGxf0MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSjRhMFJCTmE4UGI0OHZHVjNRTHFWcG9iRl9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxtg
MA0GCSqGSIb3DQEBCwUAA4IBAQAGaZVeAb/F2+qzXRVd0Z42MZqhvNktTepvwFIz
nMlVNMizkO7erj//lx5iXkpxPnDwrQt7lYfdmIio6o4qxqQRmCGF3uh2UyrYND0Z
tAa4etcpBjJbt6Vyhx4650Va7KJQjT3oCA37HebdjfqN483tz3Avi6G4rnpqr4nV
8bcWVfw5JG8gEChMY56h2dAuSDYCaR8Ulz/zFCiKFJOUDf0qUadc2JSMArrLN7s9
5HnyF8lrdyViPSlx6rVebYUY3dfVYB1tlg1j2oXyi6LeiAV8cU5FBDAL2O0M3I6r
u1OYn42r0vr+G3cLbk4B8qKRjgdhF2qdO4KrrSTJzi2nVzEM
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:47:21 2025 by rpki-client