Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O2Xw3rZ5wcv9b1WuPdiBVh4m7Cc.roa
File: O2Xw3rZ5wcv9b1WuPdiBVh4m7Cc.roa (raw, json)
Hash identifier: GYtyfC6a7lqrQzthmhOkz4gVOBW1dg35ww2HLaQi9ug=
Subject key identifier: 3B:65:F0:DE:B6:79:C1:CB:FD:6F:55:AE:3D:D8:81:56:1E:26:EC:27
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425228E7A804785C13787EA80A729657E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O2Xw3rZ5wcv9b1WuPdiBVh4m7Cc.roa
Signing time: Thu 02 Jan 2025 03:50:09 +0000
ROA not before: Thu 02 Jan 2025 03:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215747
IP address blocks: 2a06:de00:710::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:8e:7a:80:47:85:c1:37:87:ea:80:a7:29:65:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b65f0deb679c1cbfd6f55ae3dd881561e26ec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:be:43:e7:2a:ad:0d:bf:f5:f8:cf:85:96:
de:05:e3:f6:c5:0c:2b:db:50:3b:63:c9:4f:47:76:
26:c3:51:82:f7:34:ef:0f:94:26:51:5c:fa:64:89:
cb:45:f8:89:d3:a3:d7:04:d4:23:d1:4a:56:b7:ad:
9c:81:60:a3:a2:ab:83:28:d7:a1:5b:a7:75:10:0f:
62:e7:ff:d8:fd:3c:19:19:2a:14:9e:a0:b0:dc:31:
fe:22:3c:6f:e5:b9:6f:91:ce:22:13:d7:2f:31:c3:
3a:e6:1c:6a:19:b9:a7:5e:b9:7c:72:ba:a5:0f:43:
b8:08:ef:cd:25:45:d3:5d:1e:83:0b:37:fd:6b:86:
e0:66:42:34:8a:c4:1d:77:bf:93:e2:14:11:c1:a6:
ea:85:95:5e:f9:db:26:57:b8:48:5a:e4:f0:9c:7b:
85:90:8e:63:a7:25:f5:15:69:b1:f1:34:9f:de:2a:
ba:cf:a7:1f:95:2b:35:1f:99:c8:8c:d6:d2:7c:e6:
3e:77:14:29:21:3e:84:af:c9:8f:90:fe:aa:a4:4b:
56:ab:59:d5:04:40:e7:5b:d3:c7:30:59:af:05:c5:
13:ba:72:b0:df:3a:ac:ce:e9:50:53:a0:ce:7d:06:
33:34:8b:b3:9a:02:54:ab:46:3e:fa:db:8e:8a:eb:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:F0:DE:B6:79:C1:CB:FD:6F:55:AE:3D:D8:81:56:1E:26:EC:27
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O2Xw3rZ5wcv9b1WuPdiBVh4m7Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:710::/44
Signature Algorithm: sha256WithRSAEncryption
aa:e9:35:87:8b:52:1a:a4:8c:bd:72:df:ad:a4:48:3a:47:01:
7f:f2:78:42:56:7c:0b:01:03:90:28:ce:fb:c4:7f:60:3f:0d:
28:79:3e:05:b1:ce:93:eb:d9:fd:15:05:42:1f:0c:df:ad:f4:
26:8f:45:74:65:b2:46:ef:90:fc:a2:ae:f8:22:e6:a2:94:8c:
ba:0a:22:09:e5:30:52:27:ba:f4:98:90:31:07:f5:ed:f3:07:
eb:1e:41:4b:e5:82:cf:fb:84:ee:52:0a:43:1e:af:f5:0f:44:
1e:cb:69:57:97:08:87:1b:17:93:70:fe:95:32:5b:19:c8:a6:
60:09:0a:5b:d2:b6:97:fc:79:63:ee:d4:4c:41:9a:c6:e9:92:
99:c5:fd:75:6a:1b:20:79:50:d9:b3:c8:8b:d4:91:02:a1:fc:
7d:5b:af:5e:e0:2b:38:5f:92:59:e1:8b:6a:b0:97:b5:33:c6:
4a:04:a5:01:cd:1e:20:12:b3:4f:e8:39:90:ee:a4:30:4b:f2:
64:82:4e:c6:77:8f:57:9d:25:36:f8:63:d1:97:37:41:cc:cb:
c0:d1:0f:9a:67:91:84:7e:e1:41:f3:06:17:44:f8:85:1d:a3:
1f:0e:88:57:38:be:df:fc:77:ce:e7:92:69:3b:58:86:a7:5c:
d3:c7:bc:af
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIo56gEeFwTeH6oCnKWV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjY1ZjBkZWI2NzljMWNiZmQ2ZjU1YWUzZGQ4ODE1NjFlMjZlYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCK+Q+cqrQ2/9fjPhZbeBeP2xQwr
21A7Y8lPR3Ymw1GC9zTvD5QmUVz6ZInLRfiJ06PXBNQj0UpWt62cgWCjoquDKNeh
W6d1EA9i5//Y/TwZGSoUnqCw3DH+Ijxv5blvkc4iE9cvMcM65hxqGbmnXrl8crql
D0O4CO/NJUXTXR6DCzf9a4bgZkI0isQdd7+T4hQRwabqhZVe+dsmV7hIWuTwnHuF
kI5jpyX1FWmx8TSf3iq6z6cflSs1H5nIjNbSfOY+dxQpIT6Er8mPkP6qpEtWq1nV
BEDnW9PHMFmvBcUTunKw3zqszulQU6DOfQYzNIuzmgJUq0Y++tuOiusIJwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDtl8N62ecHL/W9Vrj3YgVYeJuwnMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvTzJYdzNyWjV3Y3Y5YjFXdVBkaUJWaDRtN0NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeAAcQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCq6TWHi1IapIy9ct+tpEg6RwF/8nhCVnwLAQOQ
KM77xH9gPw0oeT4Fsc6T69n9FQVCHwzfrfQmj0V0ZbJG75D8oq74IuailIy6CiIJ
5TBSJ7r0mJAxB/Xt8wfrHkFL5YLP+4TuUgpDHq/1D0Qey2lXlwiHGxeTcP6VMlsZ
yKZgCQpb0raX/Hlj7tRMQZrG6ZKZxf11ahsgeVDZs8iL1JECofx9W69e4Cs4X5JZ
4YtqsJe1M8ZKBKUBzR4gErNP6DmQ7qQwS/Jkgk7Gd49XnSU2+GPRlzdBzMvA0Q+a
Z5GEfuFB8wYXRPiFHaMfDohXOL7f/HfO55JpO1iGp1zTx7yv
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:40 2025 by rpki-client