Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PhNZ0NniuDdbwPuA6khZB_FyAfY.roa
File: PhNZ0NniuDdbwPuA6khZB_FyAfY.roa (raw, json)
Hash identifier: RSln8D/qL79DAfHpnyW/BB3F9zTUmK4FyZh67LKp0po=
Subject key identifier: 3E:13:59:D0:D9:E2:B8:37:5B:C0:FB:80:EA:48:59:07:F1:72:01:F6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220451C94744B6EB302218B290DF02
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PhNZ0NniuDdbwPuA6khZB_FyAfY.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201197
IP address blocks: 2a0e:97c0:c80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:04:51:c9:47:44:b6:eb:30:22:18:b2:90:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e1359d0d9e2b8375bc0fb80ea485907f17201f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:e6:b2:50:32:b2:2d:2b:63:af:b9:cd:73:
3e:f9:50:5b:6d:4c:7b:f8:fe:87:51:96:19:b8:6f:
57:5b:2f:2e:50:3f:e6:23:b1:51:bc:21:5e:20:8a:
d3:97:f3:85:d5:9c:20:6f:32:08:cf:ab:14:3b:43:
ce:a6:09:93:07:f6:8d:f2:f1:49:46:56:fc:f6:42:
47:fa:d3:bf:87:6d:77:9f:a8:74:b8:3d:85:da:63:
31:93:eb:a9:e7:51:7a:5e:cc:a1:d6:b9:46:12:c3:
9c:95:31:08:ce:52:7e:aa:34:d4:11:a7:4e:f8:e0:
5d:4e:49:fc:6f:de:66:e6:a2:42:5f:be:2d:cf:55:
0b:ee:bf:ea:a3:d3:95:50:b5:2d:2b:23:68:de:27:
ee:d2:6c:f3:dc:6f:19:cc:79:a4:88:38:aa:c0:35:
cf:46:ba:47:87:75:79:6e:8c:06:81:89:8b:0e:e0:
8e:41:c4:f8:2f:95:c5:06:1b:e3:64:17:4a:e1:62:
da:82:2e:a2:1c:5e:c1:91:78:92:0b:ef:96:14:0f:
49:04:72:3b:31:31:67:2c:7f:a0:07:d6:25:fa:50:
9c:6d:4a:0e:3c:dd:72:c2:4e:1f:2e:e9:47:f7:7a:
99:6b:80:5a:90:ce:42:53:eb:67:10:e2:1f:59:ca:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:13:59:D0:D9:E2:B8:37:5B:C0:FB:80:EA:48:59:07:F1:72:01:F6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PhNZ0NniuDdbwPuA6khZB_FyAfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c80::/44
Signature Algorithm: sha256WithRSAEncryption
cb:35:b3:8a:ad:da:de:9d:43:68:91:1b:50:08:07:c7:f8:ed:
55:c1:c2:49:91:58:44:c4:61:bb:e1:55:3b:8b:c6:fe:38:a5:
8b:2d:aa:57:72:0a:88:02:0e:d0:cf:0c:60:da:01:be:b9:3b:
95:01:5b:f6:2f:86:c7:1a:7c:ad:e9:5f:0a:73:23:b9:0b:dd:
5f:9e:6f:ae:3e:38:2c:de:9d:31:07:34:28:d4:83:09:74:aa:
8c:65:3b:d8:ee:71:d8:bb:8b:10:e2:4b:cc:cb:0f:b3:97:f9:
eb:2a:31:17:31:60:a1:ba:e5:48:ed:9b:10:b9:da:d8:fd:b1:
de:e2:2b:a4:04:d5:80:07:21:69:ba:59:ea:aa:f3:ad:f5:9e:
40:c1:b8:59:b7:8a:03:40:cf:d5:56:d4:d2:0e:19:78:39:9a:
86:f9:ba:d9:4c:3e:c1:00:c2:37:c6:80:2d:0f:16:41:7f:9a:
e6:58:c9:5d:3b:42:a4:c2:46:f2:22:ca:0e:fa:95:6d:88:d5:
3d:bd:c9:33:55:e4:f1:e1:9b:fb:98:78:da:d9:99:41:c7:3c:
01:46:6c:91:b2:c4:17:3c:0d:02:4c:ff:71:d2:02:09:54:aa:
c3:4a:a3:1a:58:31:22:cf:c2:4c:26:a1:0a:ee:cf:e2:91:ba:
14:46:29:4c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIgRRyUdEtuswIhiykN8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTEzNTlkMGQ5ZTJiODM3NWJjMGZiODBlYTQ4NTkwN2YxNzIwMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQnmslAysi0rY6+5zXM++VBbbUx7
+P6HUZYZuG9XWy8uUD/mI7FRvCFeIIrTl/OF1ZwgbzIIz6sUO0POpgmTB/aN8vFJ
Rlb89kJH+tO/h213n6h0uD2F2mMxk+up51F6Xsyh1rlGEsOclTEIzlJ+qjTUEadO
+OBdTkn8b95m5qJCX74tz1UL7r/qo9OVULUtKyNo3ifu0mzz3G8ZzHmkiDiqwDXP
RrpHh3V5bowGgYmLDuCOQcT4L5XFBhvjZBdK4WLagi6iHF7BkXiSC++WFA9JBHI7
MTFnLH+gB9Yl+lCcbUoOPN1ywk4fLulH93qZa4BakM5CU+tnEOIfWcqqkQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFD4TWdDZ4rg3W8D7gOpIWQfxcgH2MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUGhOWjBObml1RGRid1B1QTZraFpCX0Z5QWZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAyA
MA0GCSqGSIb3DQEBCwUAA4IBAQDLNbOKrdrenUNokRtQCAfH+O1VwcJJkVhExGG7
4VU7i8b+OKWLLapXcgqIAg7Qzwxg2gG+uTuVAVv2L4bHGnyt6V8KcyO5C91fnm+u
Pjgs3p0xBzQo1IMJdKqMZTvY7nHYu4sQ4kvMyw+zl/nrKjEXMWChuuVI7ZsQudrY
/bHe4iukBNWAByFpulnqqvOt9Z5AwbhZt4oDQM/VVtTSDhl4OZqG+brZTD7BAMI3
xoAtDxZBf5rmWMldO0KkwkbyIsoO+pVtiNU9vckzVeTx4Zv7mHja2ZlBxzwBRmyR
ssQXPA0CTP9x0gIJVKrDSqMaWDEiz8JMJqEK7s/ikboURilM
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:55:53 2025 by rpki-client