Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ld23u8pXicwoOTy6Gjwi8Sf0TXo.roa
File: Ld23u8pXicwoOTy6Gjwi8Sf0TXo.roa (raw, json)
Hash identifier: HXJ+wsieADEmURyWOGj0o58tlKDB8uJIL4QPZsd/jOU=
Subject key identifier: 2D:DD:B7:BB:CA:57:89:CC:28:39:3C:BA:1A:3C:22:F1:27:F4:4D:7A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521F182D73D2B675B7D84A3F5FA1AC6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ld23u8pXicwoOTy6Gjwi8Sf0TXo.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 2a06:de01:70::/44 maxlen: 48
2a10:ccc2:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f1:82:d7:3d:2b:67:5b:7d:84:a3:f5:fa:1a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dddb7bbca5789cc28393cba1a3c22f127f44d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:46:da:28:2d:f7:3b:f4:af:96:c2:e4:85:
6d:52:04:e3:36:68:05:a0:63:58:e6:84:f8:68:95:
fc:8f:8a:6c:16:1c:ee:49:4f:66:ae:06:f5:3d:1f:
eb:a4:4a:9a:ff:6d:be:fb:bb:1b:bf:c9:89:cb:2a:
d9:de:e1:4c:92:88:f5:62:b0:83:5b:53:2f:d4:b8:
2b:38:55:5c:a2:0a:31:b8:81:88:a3:a0:65:a1:5e:
a1:d3:e1:a9:5f:0b:87:c4:31:36:7d:bf:73:51:b3:
72:05:56:4f:f2:2d:eb:e3:c9:c0:a8:a1:93:a4:d9:
76:86:6b:c2:1f:77:e7:a1:b2:65:43:07:b1:e3:bd:
d6:3f:e3:e6:54:54:ab:3a:6c:7c:be:0d:6f:9b:c7:
7a:48:5a:51:1f:6d:a1:ea:a4:b4:5f:1d:82:d9:4d:
55:f9:80:a8:9e:e9:b6:19:00:0c:07:66:a0:40:f4:
2b:f1:fc:c7:a4:86:44:44:37:ac:1c:0c:a6:3d:8c:
42:b3:e4:e7:db:d4:8d:3a:1e:84:99:54:41:28:c5:
16:39:ad:0b:4f:3d:52:65:a5:34:86:7e:61:0b:32:
5c:f9:4f:43:85:62:37:dc:a3:7e:58:f1:10:c1:ca:
2a:f6:47:4f:54:c8:23:6d:3e:7a:6d:d6:95:b1:20:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DD:B7:BB:CA:57:89:CC:28:39:3C:BA:1A:3C:22:F1:27:F4:4D:7A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ld23u8pXicwoOTy6Gjwi8Sf0TXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:70::/44
2a10:ccc2:10::/44
Signature Algorithm: sha256WithRSAEncryption
2b:48:d4:a3:0d:78:c2:48:1a:56:58:89:72:ed:ba:78:22:8e:
d1:1f:56:d6:58:ca:0b:bd:25:10:a1:e4:ab:b6:80:0f:14:98:
95:20:83:95:05:d5:2c:71:a0:1a:3b:35:83:44:12:81:f8:ff:
66:d4:67:b7:0a:7b:71:7e:49:79:28:2f:47:39:72:a8:f2:fd:
f3:8c:8a:ad:f0:d3:80:73:32:7a:a4:cc:59:44:8f:58:2a:63:
70:8b:67:27:1a:5a:c1:c7:69:f9:b1:36:b4:9a:64:3c:0f:ef:
4e:d0:5e:43:8b:af:ee:7f:10:42:b0:b4:49:21:de:67:03:27:
12:14:68:08:c6:d3:04:86:e6:14:82:d9:58:11:7a:54:48:eb:
2e:83:2c:af:7b:01:d1:81:55:aa:73:d6:23:d6:3a:79:2f:0e:
59:c4:4e:12:6e:62:bc:63:12:c3:ad:ca:ab:68:3c:8a:fc:de:
78:f3:db:e3:19:d7:85:df:47:1e:a8:59:ed:c0:dc:44:c1:bf:
52:2c:df:15:b9:62:35:0c:cd:2d:60:f9:73:2c:81:09:b1:35:
f6:5d:cb:82:e7:48:b6:e3:6c:cb:02:07:ec:70:59:a5:f6:dc:
42:10:f6:db:c8:12:e7:5f:db:8a:0e:43:18:3d:40:cc:75:d0:
83:2c:b7:78
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIfGC1z0rZ1t9hKP1+hrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGRkYjdiYmNhNTc4OWNjMjgzOTNjYmExYTNjMjJmMTI3ZjQ0ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCVG2igt9zv0r5bC5IVtUgTjNmgF
oGNY5oT4aJX8j4psFhzuSU9mrgb1PR/rpEqa/22++7sbv8mJyyrZ3uFMkoj1YrCD
W1Mv1LgrOFVcogoxuIGIo6BloV6h0+GpXwuHxDE2fb9zUbNyBVZP8i3r48nAqKGT
pNl2hmvCH3fnobJlQwex473WP+PmVFSrOmx8vg1vm8d6SFpRH22h6qS0Xx2C2U1V
+YConum2GQAMB2agQPQr8fzHpIZERDesHAymPYxCs+Tn29SNOh6EmVRBKMUWOa0L
Tz1SZaU0hn5hCzJc+U9DhWI33KN+WPEQwcoq9kdPVMgjbT56bdaVsSDwmQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC3dt7vKV4nMKDk8uho8IvEn9E16MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTGQyM3U4cFhpY3dvT1R5Nkdqd2k4U2YwVFhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgbeAQBw
AwcEKhDMwgAQMA0GCSqGSIb3DQEBCwUAA4IBAQArSNSjDXjCSBpWWIly7bp4Io7R
H1bWWMoLvSUQoeSrtoAPFJiVIIOVBdUscaAaOzWDRBKB+P9m1Ge3Cntxfkl5KC9H
OXKo8v3zjIqt8NOAczJ6pMxZRI9YKmNwi2cnGlrBx2n5sTa0mmQ8D+9O0F5Di6/u
fxBCsLRJId5nAycSFGgIxtMEhuYUgtlYEXpUSOsugyyvewHRgVWqc9Yj1jp5Lw5Z
xE4SbmK8YxLDrcqraDyK/N5489vjGdeF30ceqFntwNxEwb9SLN8VuWI1DM0tYPlz
LIEJsTX2XcuC50i242zLAgfscFml9txCEPbbyBLnX9uKDkMYPUDMddCDLLd4
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:44:42 2025 by rpki-client