Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RCvtWKwAWDJVF_G4zin7P-RpyTc.roa
File: RCvtWKwAWDJVF_G4zin7P-RpyTc.roa (raw, json)
Hash identifier: 4CW73weZ3ztTNg0aKwdp0DPzy4mTr+z3lAWURXqfZoo=
Subject key identifier: 44:2B:ED:58:AC:00:58:32:55:17:F1:B8:CE:29:FB:3F:E4:69:C9:37
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425221B9F56430DFC805A0389A2496DAD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RCvtWKwAWDJVF_G4zin7P-RpyTc.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204750
IP address blocks: 2a0e:97c0:3d0::/44 maxlen: 48
2a0e:97c0:3d0::/48 maxlen: 48
2a0e:97c0:3d1::/48 maxlen: 48
2a0e:97c0:3d2::/48 maxlen: 48
2a0e:97c0:3d3::/48 maxlen: 48
2a0e:97c0:3d4::/48 maxlen: 48
2a0e:97c0:3d5::/48 maxlen: 48
2a0e:97c0:3d6::/48 maxlen: 48
2a0e:97c0:3d7::/48 maxlen: 48
2a0e:97c0:3d9::/48 maxlen: 48
2a0e:97c0:3df::/48 maxlen: 48
2a0e:97c0:3e8::/48 maxlen: 48
2a0e:97c0:3e9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1b:9f:56:43:0d:fc:80:5a:03:89:a2:49:6d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=442bed58ac0058325517f1b8ce29fb3fe469c937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:38:ee:05:17:7b:4b:1e:a1:47:45:37:0d:
17:a1:e1:ee:e9:4e:1d:63:d9:78:1c:19:0b:0b:f8:
b5:c4:8c:73:ce:7e:d9:a1:69:03:7f:6c:92:cc:d4:
5d:8c:44:4f:45:cc:08:c7:a6:f3:eb:bb:e3:d3:80:
a7:df:91:35:32:ec:20:bd:9f:cc:34:d5:34:b8:73:
d1:c6:9b:ae:15:04:31:d3:2f:82:0d:81:ef:af:c9:
cb:d7:77:cd:04:24:5f:1b:b3:28:24:98:fa:47:07:
18:b0:f0:a8:f1:2b:5e:05:5d:7d:6c:fb:2e:93:29:
6a:08:18:cf:e1:04:ff:d8:06:93:a5:72:6e:d4:7f:
08:06:c8:b8:42:07:c6:f3:ed:f2:da:01:84:1e:2c:
57:e6:2d:dc:9f:23:ab:39:e0:1f:54:45:23:ad:2a:
00:6c:a6:08:bc:23:21:3e:a2:4f:39:5e:44:3e:71:
c4:04:4a:0c:c9:0d:b0:19:73:f4:92:e0:39:17:c3:
28:40:a3:90:a4:a3:85:8c:89:59:95:ec:de:00:72:
64:dd:61:32:82:cd:5b:58:53:26:0d:24:d5:c2:01:
23:4b:a1:13:77:ab:dd:93:3d:5b:2e:c5:4e:d2:a6:
42:70:c8:11:89:1f:30:47:26:6b:b0:d5:2f:52:65:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2B:ED:58:AC:00:58:32:55:17:F1:B8:CE:29:FB:3F:E4:69:C9:37
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RCvtWKwAWDJVF_G4zin7P-RpyTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3d0::/44
2a0e:97c0:3e8::/47
Signature Algorithm: sha256WithRSAEncryption
9f:38:c7:c7:22:26:46:9e:0a:d8:fa:7c:09:f5:11:56:c7:42:
b8:1e:85:34:f5:46:a5:f0:e6:b8:43:79:2d:95:6a:e0:0a:b0:
17:b5:6f:43:ca:a4:7f:36:94:64:ff:8a:f3:bc:46:ec:34:44:
b7:f5:9a:9b:11:ee:44:9a:e2:e3:66:57:83:6f:7e:eb:13:3e:
4a:4b:fe:dc:91:78:7a:91:cc:c6:19:1a:8d:b2:ab:f7:6b:b6:
25:9c:9e:12:77:33:e7:52:7d:ad:63:91:b2:68:b6:01:14:7c:
d8:7b:9f:8f:29:66:e3:8d:cb:97:26:11:1b:1f:d2:92:5a:52:
ca:dd:59:f0:b6:7a:e4:b2:49:ef:62:e8:2e:1b:97:a1:b0:98:
b2:67:8d:c2:02:b1:f6:1a:6a:6b:8a:2d:bf:35:27:8e:84:11:
05:59:94:af:0f:5f:60:a6:73:24:e2:fa:83:af:42:b1:b2:06:
34:42:1e:54:e7:a7:d8:8e:65:d1:71:26:7b:56:2d:d9:37:74:
93:19:17:bf:ea:77:b1:ce:44:64:eb:a5:44:57:39:c3:da:c8:
35:43:54:fd:6c:c6:7a:67:02:8d:ed:2d:97:45:35:b5:29:89:
1a:2d:07:ce:f8:93:2d:f1:f6:5a:1e:39:68:ef:54:05:06:78:
85:e8:f5:65
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIhufVkMN/IBaA4miSW2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDJiZWQ1OGFjMDA1ODMyNTUxN2YxYjhjZTI5ZmIzZmU0NjljOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Qk47gUXe0seoUdFNw0XoeHu6U4d
Y9l4HBkLC/i1xIxzzn7ZoWkDf2ySzNRdjERPRcwIx6bz67vj04Cn35E1MuwgvZ/M
NNU0uHPRxpuuFQQx0y+CDYHvr8nL13fNBCRfG7MoJJj6RwcYsPCo8SteBV19bPsu
kylqCBjP4QT/2AaTpXJu1H8IBsi4QgfG8+3y2gGEHixX5i3cnyOrOeAfVEUjrSoA
bKYIvCMhPqJPOV5EPnHEBEoMyQ2wGXP0kuA5F8MoQKOQpKOFjIlZlezeAHJk3WEy
gs1bWFMmDSTVwgEjS6ETd6vdkz1bLsVO0qZCcMgRiR8wRyZrsNUvUmWnJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEQr7VisAFgyVRfxuM4p+z/kack3MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvUkN2dFdLd0FXREpWRl9HNHppbjdQLVJweVRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAPQ
AwcBKg6XwAPoMA0GCSqGSIb3DQEBCwUAA4IBAQCfOMfHIiZGngrY+nwJ9RFWx0K4
HoU09Ual8Oa4Q3ktlWrgCrAXtW9DyqR/NpRk/4rzvEbsNES39ZqbEe5EmuLjZleD
b37rEz5KS/7ckXh6kczGGRqNsqv3a7YlnJ4SdzPnUn2tY5GyaLYBFHzYe5+PKWbj
jcuXJhEbH9KSWlLK3VnwtnrksknvYuguG5ehsJiyZ43CArH2Gmprii2/NSeOhBEF
WZSvD19gpnMk4vqDr0KxsgY0Qh5U56fYjmXRcSZ7Vi3ZN3STGRe/6nexzkRk66VE
VznD2sg1Q1T9bMZ6ZwKN7S2XRTW1KYkaLQfO+JMt8fZaHjlo71QFBniF6PVl
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:22 2025 by rpki-client