Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MAiiD0RVQ6skZFp300bDsAxu5JE.roa
File: MAiiD0RVQ6skZFp300bDsAxu5JE.roa (raw, json)
Hash identifier: ae5mcCvcZX4FpHbCTZnuREOMUMOTApS+IcL/qTN8Ais=
Subject key identifier: 30:08:A2:0F:44:55:43:AB:24:64:5A:77:D3:46:C3:B0:0C:6E:E4:91
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252265E5EAAA71B220205E466659003F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MAiiD0RVQ6skZFp300bDsAxu5JE.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212703
IP address blocks: 2a10:2f00:14d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:65:e5:ea:aa:71:b2:20:20:5e:46:66:59:00:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3008a20f445543ab24645a77d346c3b00c6ee491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:42:3f:28:0e:eb:b6:10:0f:21:1a:04:33:
59:9d:a3:62:8f:cd:f6:f9:8f:75:fd:33:e6:94:42:
09:bb:50:13:b1:e5:26:3d:32:07:68:f7:75:b0:e9:
ab:9f:3b:81:c2:18:9b:90:7d:1a:1d:4d:5b:33:52:
e7:11:a7:0d:0d:23:95:85:fc:b9:30:f0:75:c4:5f:
57:55:63:9e:26:26:39:d4:aa:af:6f:ff:25:52:2b:
6f:3d:fd:ae:f9:f9:e9:00:eb:ef:e1:a8:6d:09:47:
88:05:40:21:0b:d1:8f:ec:fa:cf:86:bb:65:57:45:
aa:b1:00:f8:22:03:3e:2a:29:b9:ad:c2:c7:64:f6:
e1:f3:83:a3:7c:2f:53:34:40:b3:9b:cf:97:ef:5e:
24:f1:3a:1e:57:2b:72:bc:a5:cb:22:27:d0:7a:98:
9c:cc:d4:69:62:77:97:49:61:33:05:70:fe:9e:13:
ef:21:44:ed:94:b6:81:c6:57:e6:ec:2a:32:bf:69:
cb:43:94:80:33:ac:ae:76:a9:ec:68:2e:68:7c:2d:
86:39:5e:08:47:d3:c5:44:dd:a6:85:6e:b1:ec:90:
b1:79:64:09:3d:97:9d:6f:96:a7:92:d7:7c:9b:2f:
b6:2f:55:56:0e:f5:e2:21:69:de:f3:9e:ac:be:5f:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:A2:0F:44:55:43:AB:24:64:5A:77:D3:46:C3:B0:0C:6E:E4:91
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/MAiiD0RVQ6skZFp300bDsAxu5JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:14d::/48
Signature Algorithm: sha256WithRSAEncryption
68:c6:6b:01:70:06:6a:bd:c6:e9:69:cc:7e:7e:71:5a:ed:5e:
61:dc:f6:c3:68:43:ba:1c:61:d5:ca:e2:37:81:20:11:f6:2e:
11:55:bb:7a:5f:f0:7f:b2:6e:37:0b:62:92:fa:f5:22:4b:55:
5a:51:98:37:e8:c6:39:cc:ee:02:d4:43:48:7e:cc:a8:43:a8:
b6:1b:22:1a:18:a3:82:48:43:af:1a:28:2c:40:56:ec:49:8d:
5d:b8:ea:ed:51:23:4b:ae:df:1f:ee:f8:63:d9:89:83:d9:48:
29:8b:b5:e9:8e:f5:2c:9e:4e:74:14:1e:93:a7:a5:eb:50:dd:
10:e9:bd:96:b1:ec:8e:22:a3:11:55:c9:ca:29:36:2f:5a:dc:
8a:f7:43:22:2f:be:05:86:19:d2:f7:02:a5:19:0c:46:3c:54:
d0:1d:d6:d2:73:0e:c0:b9:7b:86:87:99:5b:e0:24:e9:1e:f7:
5b:d7:02:01:0e:bf:66:61:38:6a:ba:b4:4d:2a:fe:d8:97:48:
f9:35:fc:41:6e:05:f8:16:ea:04:30:49:c0:8a:10:b1:51:5c:
9e:ad:9b:b0:ef:5b:d9:13:99:45:3d:89:bb:46:91:6b:99:a8:
57:b6:fe:d7:f3:c7:b8:73:f0:39:51:2c:40:5f:62:2d:42:b8:
5c:8e:ac:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlImXl6qpxsiAgXkZmWQA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDA4YTIwZjQ0NTU0M2FiMjQ2NDVhNzdkMzQ2YzNiMDBjNmVlNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwFCPygO67YQDyEaBDNZnaNij832
+Y91/TPmlEIJu1ATseUmPTIHaPd1sOmrnzuBwhibkH0aHU1bM1LnEacNDSOVhfy5
MPB1xF9XVWOeJiY51Kqvb/8lUitvPf2u+fnpAOvv4ahtCUeIBUAhC9GP7PrPhrtl
V0WqsQD4IgM+Kim5rcLHZPbh84OjfC9TNECzm8+X714k8ToeVytyvKXLIifQepic
zNRpYneXSWEzBXD+nhPvIUTtlLaBxlfm7Coyv2nLQ5SAM6yudqnsaC5ofC2GOV4I
R9PFRN2mhW6x7JCxeWQJPZedb5anktd8my+2L1VWDvXiIWne856svl+m8wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDAIog9EVUOrJGRad9NGw7AMbuSRMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTUFpaUQwUlZRNnNrWkZwMzAwYkRzQXh1NUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFN
MA0GCSqGSIb3DQEBCwUAA4IBAQBoxmsBcAZqvcbpacx+fnFa7V5h3PbDaEO6HGHV
yuI3gSAR9i4RVbt6X/B/sm43C2KS+vUiS1VaUZg36MY5zO4C1ENIfsyoQ6i2GyIa
GKOCSEOvGigsQFbsSY1duOrtUSNLrt8f7vhj2YmD2Ugpi7XpjvUsnk50FB6Tp6Xr
UN0Q6b2WseyOIqMRVcnKKTYvWtyK90MiL74FhhnS9wKlGQxGPFTQHdbScw7AuXuG
h5lb4CTpHvdb1wIBDr9mYThqurRNKv7Yl0j5NfxBbgX4FuoEMEnAihCxUVyerZuw
71vZE5lFPYm7RpFrmahXtv7X88e4c/A5USxAX2ItQrhcjqzm
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:01:37 2025 by rpki-client