Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VlFIjw5BmpOdjlgwAkhmgTJjgfU.roa
File: VlFIjw5BmpOdjlgwAkhmgTJjgfU.roa (raw, json)
Hash identifier: w31N1ok8MloHFFQBibWrZsUM5zkZpwKoal3Is41sWvs=
Subject key identifier: 56:51:48:8F:0E:41:9A:93:9D:8E:58:30:02:48:66:81:32:63:81:F5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425225E4AEF4F4C1E9FABCAB8AB7BF16A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VlFIjw5BmpOdjlgwAkhmgTJjgfU.roa
Signing time: Thu 02 Jan 2025 03:49:56 +0000
ROA not before: Thu 02 Jan 2025 03:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212270
IP address blocks: 2a0e:b107:f50::/44 maxlen: 48
2a0e:b107:1210::/44 maxlen: 48
2a0e:b107:1510::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:5e:4a:ef:4f:4c:1e:9f:ab:ca:b8:ab:7b:f1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5651488f0e419a939d8e583002486681326381f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:19:f8:6d:54:f2:63:0f:ec:12:29:25:c9:
82:a5:6c:a0:0f:fd:f2:0a:2c:e5:d5:41:3f:59:6f:
87:bb:4b:79:68:7e:11:ff:1e:d6:71:de:d6:0e:2c:
7f:05:82:28:39:40:c9:83:5f:0a:34:28:e7:9e:3f:
f2:7c:53:67:d9:4e:8a:bc:e4:bb:df:47:e4:91:b0:
e7:a5:0a:f9:1c:1b:2b:d2:bb:c5:4b:a9:da:45:f7:
70:df:59:04:2d:ee:5f:34:86:29:81:75:d6:07:21:
8e:7b:0e:02:01:a3:4d:c4:d9:b1:b3:33:30:18:41:
5a:56:15:43:60:f1:9a:c7:be:f4:c1:c2:15:18:ae:
c1:51:60:1d:71:21:68:5e:ac:6e:2b:fb:49:c0:c1:
98:38:86:c5:3d:9a:51:a7:fe:1f:7a:13:64:31:0d:
12:3e:63:ce:06:fc:2c:a3:87:2f:d0:07:8a:0c:96:
0d:24:1a:9f:4e:2a:f4:d2:f6:5f:6e:22:20:eb:29:
ed:e4:be:5e:8f:09:69:71:87:1f:5d:84:f7:02:d1:
bb:69:76:cc:f1:d8:f6:cc:bc:c1:ea:45:a7:a3:9e:
86:46:2c:dd:a2:58:76:99:21:5d:b4:4f:76:ad:e4:
94:19:af:30:ef:7c:04:31:cc:30:d8:b6:83:e3:61:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:51:48:8F:0E:41:9A:93:9D:8E:58:30:02:48:66:81:32:63:81:F5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VlFIjw5BmpOdjlgwAkhmgTJjgfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f50::/44
2a0e:b107:1210::/44
2a0e:b107:1510::/44
Signature Algorithm: sha256WithRSAEncryption
7c:f7:9c:64:7c:32:e4:73:4f:93:d8:29:4d:1b:bc:00:03:3a:
0c:be:1e:b5:54:1e:e8:d7:ad:6f:e5:b4:87:d8:34:eb:b9:0b:
7b:2d:05:c2:1d:3a:70:1a:20:6d:1d:a0:81:e4:63:c7:39:ec:
7d:73:0d:a9:1c:59:36:ea:7b:f4:40:d3:37:e0:a9:ed:c9:68:
09:76:75:eb:3c:00:f8:b0:b0:fd:74:7e:18:56:ba:22:95:54:
8b:e0:ea:5e:5b:b7:2d:40:7b:1f:f2:29:26:2d:8b:3f:44:69:
6d:83:13:92:bc:b0:40:fb:9f:c9:cf:b4:b5:51:e8:fd:0b:ea:
ff:65:1c:c9:a8:82:c3:b1:10:96:e6:39:5d:da:2d:e9:17:4d:
78:ec:16:d3:05:4f:86:e7:5d:db:5a:8e:a9:96:98:8c:18:bc:
69:f6:91:56:23:dd:2d:0b:f0:c8:87:96:d9:65:d7:ad:95:c0:
d6:09:98:1a:18:5f:60:8a:3a:2e:5d:7f:a6:99:6f:9f:80:57:
46:fe:e9:27:39:92:22:b2:76:59:e5:35:e7:ab:09:91:0b:df:
45:c9:d6:7c:6e:0d:3d:20:3f:73:1e:39:54:c5:b7:ae:32:a8:
b6:33:44:15:25:c3:da:77:35:a1:a4:8a:d2:2e:de:03:ba:f2:
ce:88:c0:49
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQlIl5K709MHp+ryrire/FqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjUxNDg4ZjBlNDE5YTkzOWQ4ZTU4MzAwMjQ4NjY4MTMyNjM4MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjwZ+G1U8mMP7BIpJcmCpWygD/3y
Cizl1UE/WW+Hu0t5aH4R/x7Wcd7WDix/BYIoOUDJg18KNCjnnj/yfFNn2U6KvOS7
30fkkbDnpQr5HBsr0rvFS6naRfdw31kELe5fNIYpgXXWByGOew4CAaNNxNmxszMw
GEFaVhVDYPGax770wcIVGK7BUWAdcSFoXqxuK/tJwMGYOIbFPZpRp/4fehNkMQ0S
PmPOBvwso4cv0AeKDJYNJBqfTir00vZfbiIg6ynt5L5ejwlpcYcfXYT3AtG7aXbM
8dj2zLzB6kWno56GRizdolh2mSFdtE92reSUGa8w73wEMcww2LaD42FEkwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFZRSI8OQZqTnY5YMAJIZoEyY4H1MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVmxGSWp3NUJtcE9kamxnd0FraG1nVEpqZ2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcEKg6xBw9Q
AwcEKg6xBxIQAwcEKg6xBxUQMA0GCSqGSIb3DQEBCwUAA4IBAQB895xkfDLkc0+T
2ClNG7wAAzoMvh61VB7o161v5bSH2DTruQt7LQXCHTpwGiBtHaCB5GPHOex9cw2p
HFk26nv0QNM34KntyWgJdnXrPAD4sLD9dH4YVroilVSL4OpeW7ctQHsf8ikmLYs/
RGltgxOSvLBA+5/Jz7S1Uej9C+r/ZRzJqILDsRCW5jld2i3pF0147BbTBU+G513b
Wo6plpiMGLxp9pFWI90tC/DIh5bZZdetlcDWCZgaGF9gijouXX+mmW+fgFdG/ukn
OZIisnZZ5TXnqwmRC99FydZ8bg09ID9zHjlUxbeuMqi2M0QVJcPadzWhpIrSLt4D
uvLOiMBJ
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:08 2025 by rpki-client