Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K_ef0mlZv05KZkAn0OLv7yHN5Ls.roa
File: K_ef0mlZv05KZkAn0OLv7yHN5Ls.roa (raw, json)
Hash identifier: /ojSbxuPLxJRT+3VH3rH46x1gni4XQ61GmZC9WuKNYU=
Subject key identifier: 2B:F7:9F:D2:69:59:BF:4E:4A:66:40:27:D0:E2:EF:EF:21:CD:E4:BB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521FC06B4845CC8219440DC4073C1C2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K_ef0mlZv05KZkAn0OLv7yHN5Ls.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199613
IP address blocks: 2a0e:b107:11b0::/44 maxlen: 48
2a0e:b107:1f20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fc:06:b4:84:5c:c8:21:94:40:dc:40:73:c1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bf79fd26959bf4e4a664027d0e2efef21cde4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:c4:25:03:89:6d:ec:03:fb:e3:b9:d6:2c:
94:5a:e9:fe:6f:06:73:54:e4:7c:74:d8:14:5e:e8:
9d:87:75:09:49:24:4f:85:6f:7b:9a:8b:31:6a:91:
00:2a:a9:c1:76:f9:55:3f:f3:24:5f:2f:06:2c:0f:
62:17:e3:ff:70:88:c6:39:44:2c:17:40:8e:e9:eb:
73:cc:08:e0:38:2a:11:54:c7:fa:93:23:5d:ae:03:
62:3c:8a:0c:a0:ee:77:15:0e:fa:2e:1b:f9:25:4e:
ff:b9:f1:94:dd:19:e6:d0:c6:10:c9:7d:69:dd:5d:
a6:e4:23:28:59:4d:9d:e4:a8:15:d5:8e:1d:a1:1d:
b3:c9:41:24:0c:af:34:03:7a:0e:02:2d:19:68:66:
1e:24:64:53:a6:19:8f:8a:7d:8c:1d:99:d4:c3:a3:
e0:68:bf:3c:6a:46:24:2b:a3:3f:51:14:a3:33:d2:
a9:3c:38:6b:4f:67:72:50:81:ad:ec:6e:60:df:77:
04:26:42:98:9b:aa:64:ab:ab:1b:7c:2b:7c:d3:ef:
cf:f5:ed:f4:98:92:62:bf:da:e7:5f:0c:8a:f8:d9:
e5:87:50:25:e3:9e:14:13:3d:c1:69:92:c0:aa:e7:
41:1a:20:90:b2:47:c1:fe:3d:52:dc:ca:0b:13:a9:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F7:9F:D2:69:59:BF:4E:4A:66:40:27:D0:E2:EF:EF:21:CD:E4:BB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K_ef0mlZv05KZkAn0OLv7yHN5Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:11b0::/44
2a0e:b107:1f20::/44
Signature Algorithm: sha256WithRSAEncryption
62:87:e7:9b:55:e3:63:af:2b:e1:1c:f7:b6:74:40:85:92:99:
86:0f:3a:83:c8:e8:96:32:5f:69:c9:2f:57:fe:6c:e7:47:49:
d1:d2:1c:08:1a:f6:8c:54:8b:08:dc:53:8e:4f:4d:ef:e3:02:
b6:47:f8:82:39:26:08:64:1f:bd:73:3e:1b:e2:e9:d8:71:50:
59:53:04:65:2f:e6:fc:8c:b4:1f:07:44:f3:81:c3:ae:52:5b:
41:cf:8e:00:fa:88:30:32:2b:94:5e:9e:0c:fd:ba:00:c8:3f:
79:54:82:27:7f:96:51:e3:91:93:6f:1f:b9:bf:54:aa:b1:2d:
4d:d5:4d:af:13:35:ba:60:c1:16:f7:dd:33:e4:73:55:dc:61:
50:20:6b:88:0c:c0:02:bb:2d:bd:70:8b:ec:7f:c0:a9:52:99:
86:da:98:cb:8a:d4:60:71:be:f3:2d:17:62:bb:89:9d:ea:8d:
93:bb:e0:be:1e:63:b2:6a:6e:83:5a:74:f2:70:50:2e:35:ff:
1f:e7:6e:6e:8e:57:4b:e5:dd:0f:42:b9:06:61:d2:32:d3:3c:
be:7b:e5:f7:7c:ea:25:6e:c1:ad:6a:1d:e0:90:d9:26:fa:3f:
b5:94:f9:ca:0b:ef:23:6a:52:09:51:65:3e:f5:ee:b0:a1:18:
29:29:1e:38
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIfwGtIRcyCGUQNxAc8HCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmY3OWZkMjY5NTliZjRlNGE2NjQwMjdkMGUyZWZlZjIxY2RlNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02HEJQOJbewD++O51iyUWun+bwZz
VOR8dNgUXuidh3UJSSRPhW97mosxapEAKqnBdvlVP/MkXy8GLA9iF+P/cIjGOUQs
F0CO6etzzAjgOCoRVMf6kyNdrgNiPIoMoO53FQ76Lhv5JU7/ufGU3Rnm0MYQyX1p
3V2m5CMoWU2d5KgV1Y4doR2zyUEkDK80A3oOAi0ZaGYeJGRTphmPin2MHZnUw6Pg
aL88akYkK6M/URSjM9KpPDhrT2dyUIGt7G5g33cEJkKYm6pkq6sbfCt80+/P9e30
mJJiv9rnXwyK+Nnlh1Al454UEz3BaZLAqudBGiCQskfB/j1S3MoLE6k1FQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCv3n9JpWb9OSmZAJ9Di7+8hzeS7MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvS19lZjBtbFp2MDVLWmtBbjBPTHY3eUhONUxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBxGw
AwcEKg6xBx8gMA0GCSqGSIb3DQEBCwUAA4IBAQBih+ebVeNjryvhHPe2dECFkpmG
DzqDyOiWMl9pyS9X/mznR0nR0hwIGvaMVIsI3FOOT03v4wK2R/iCOSYIZB+9cz4b
4unYcVBZUwRlL+b8jLQfB0TzgcOuUltBz44A+ogwMiuUXp4M/boAyD95VIInf5ZR
45GTbx+5v1SqsS1N1U2vEzW6YMEW990z5HNV3GFQIGuIDMACuy29cIvsf8CpUpmG
2pjLitRgcb7zLRdiu4md6o2Tu+C+HmOyam6DWnTycFAuNf8f525ujldL5d0PQrkG
YdIy0zy+e+X3fOolbsGtah3gkNkm+j+1lPnKC+8jalIJUWU+9e6woRgpKR44
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:00:06 2025 by rpki-client