Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M3FlZMzJQ0Lr_Lx0csOi5iLdUGw.roa
File: M3FlZMzJQ0Lr_Lx0csOi5iLdUGw.roa (raw, json)
Hash identifier: hOooKmS5NjbVzaifT3A8yA8z9iiD2vTNPyaYFUXVXNE=
Subject key identifier: 33:71:65:64:CC:C9:43:42:EB:FC:BC:74:72:C3:A2:E6:22:DD:50:6C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252264CDCF4F459345DD105133160201
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M3FlZMzJQ0Lr_Lx0csOi5iLdUGw.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212516
IP address blocks: 2a0e:97c0:64c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:64:cd:cf:4f:45:93:45:dd:10:51:33:16:02:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33716564ccc94342ebfcbc7472c3a2e622dd506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:ed:63:2b:c7:94:23:20:71:e8:6e:73:f3:
be:9a:38:f8:40:3e:f0:de:92:2f:a8:af:6e:e8:63:
07:66:f2:08:72:53:09:c3:46:12:b9:13:35:6a:c0:
fb:8f:d2:1f:77:77:92:15:53:04:8c:1f:74:28:f0:
d7:98:70:b1:47:15:fb:39:fd:8e:04:87:ad:53:8b:
fd:4d:f9:23:aa:c7:64:4f:4a:e8:d3:c4:db:4c:a7:
06:67:83:0c:8f:f7:d9:6a:9d:b1:c0:b5:27:ff:52:
c4:ae:e7:62:51:7c:20:7a:78:3d:12:bb:72:ec:4d:
c4:da:98:f9:a6:2c:cf:99:0c:d4:20:41:05:c1:28:
bc:4a:ff:79:d8:e4:37:e8:1b:61:e3:eb:12:bd:15:
74:87:83:9f:e4:66:41:6e:f6:db:bb:5e:a1:cc:08:
2d:ea:56:49:c6:73:1f:8e:09:4b:81:5f:50:b2:10:
1e:d4:0a:26:bf:00:02:81:b6:fc:51:9f:70:4f:5e:
2f:b5:18:06:00:e8:ae:7d:3a:63:dd:56:c9:23:dd:
3f:76:e3:31:f5:4c:c3:f4:13:73:43:4f:6f:a6:d7:
a2:e0:95:a3:f5:15:5f:f0:79:c3:60:a6:0e:82:52:
a8:04:59:28:17:56:e3:41:8d:c9:5e:0e:2b:82:3d:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:65:64:CC:C9:43:42:EB:FC:BC:74:72:C3:A2:E6:22:DD:50:6C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M3FlZMzJQ0Lr_Lx0csOi5iLdUGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:64c::/48
Signature Algorithm: sha256WithRSAEncryption
1b:f7:a0:57:6e:2a:6f:f2:f1:c1:5f:69:86:e8:62:7e:17:f6:
7a:fa:da:c3:ea:9b:6d:e3:a7:cc:33:7e:3d:6c:99:97:56:7c:
6b:d0:4d:fd:c7:ec:ca:00:4e:00:0e:a4:76:00:16:67:2c:f2:
34:70:79:38:d8:e4:aa:69:a4:54:9e:c4:9a:86:34:92:2a:ad:
c3:36:1e:c3:94:b0:73:0f:c9:71:75:ac:37:c2:cc:d8:e1:91:
4c:e6:a4:07:12:5d:fa:40:48:3c:c8:02:6a:83:be:30:2a:b3:
32:56:33:5b:68:f5:76:ac:33:4a:35:d3:53:40:7e:ea:4e:8c:
63:98:b1:e3:ff:f0:fa:a5:19:5e:cd:db:31:c6:bf:fe:e7:2e:
b7:5e:6e:7a:a7:75:19:e7:47:23:22:83:7c:07:85:e5:88:36:
54:cb:42:ac:00:0f:b7:27:b7:7f:59:55:b1:f5:48:ab:3d:92:
8b:22:d2:5a:e0:a3:7c:64:7a:e3:cb:2f:83:f8:18:eb:e8:f1:
61:3c:54:ec:de:20:a4:01:3a:73:48:d1:69:ce:bf:10:58:08:
cd:d7:82:fe:5a:ce:d1:85:06:3d:a0:89:4f:42:81:9b:ab:24:
a1:59:ca:64:7c:fb:97:9e:6b:50:d4:26:fd:fa:65:85:73:ef:
10:ac:91:d4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlImTNz09Fk0XdEFEzFgIBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzcxNjU2NGNjYzk0MzQyZWJmY2JjNzQ3MmMzYTJlNjIyZGQ1MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01rtYyvHlCMgcehuc/O+mjj4QD7w
3pIvqK9u6GMHZvIIclMJw0YSuRM1asD7j9Ifd3eSFVMEjB90KPDXmHCxRxX7Of2O
BIetU4v9TfkjqsdkT0ro08TbTKcGZ4MMj/fZap2xwLUn/1LErudiUXwgeng9Erty
7E3E2pj5pizPmQzUIEEFwSi8Sv952OQ36Bth4+sSvRV0h4Of5GZBbvbbu16hzAgt
6lZJxnMfjglLgV9QshAe1AomvwACgbb8UZ9wT14vtRgGAOiufTpj3VbJI90/duMx
9UzD9BNzQ09vptei4JWj9RVf8HnDYKYOglKoBFkoF1bjQY3JXg4rgj05XwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDNxZWTMyUNC6/y8dHLDouYi3VBsMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTTNGbFpNekpRMExyX0x4MGNzT2k1aUxkVUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAZM
MA0GCSqGSIb3DQEBCwUAA4IBAQAb96BXbipv8vHBX2mG6GJ+F/Z6+trD6ptt46fM
M349bJmXVnxr0E39x+zKAE4ADqR2ABZnLPI0cHk42OSqaaRUnsSahjSSKq3DNh7D
lLBzD8lxdaw3wszY4ZFM5qQHEl36QEg8yAJqg74wKrMyVjNbaPV2rDNKNdNTQH7q
ToxjmLHj//D6pRlezdsxxr/+5y63Xm56p3UZ50cjIoN8B4XliDZUy0KsAA+3J7d/
WVWx9UirPZKLItJa4KN8ZHrjyy+D+Bjr6PFhPFTs3iCkATpzSNFpzr8QWAjN14L+
Ws7RhQY9oIlPQoGbqyShWcpkfPuXnmtQ1Cb9+mWFc+8QrJHU
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:40:49 2025 by rpki-client