Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bK9ciejdm-pfMbaJ9GCixvT4_tI.roa
File: bK9ciejdm-pfMbaJ9GCixvT4_tI.roa (raw, json)
Hash identifier: 57G6GRoRe7VVliQA3Gx07eIewiC0EJDScaU+22odabA=
Subject key identifier: 6C:AF:5C:89:E8:DD:9B:EA:5F:31:B6:89:F4:60:A2:C6:F4:F8:FE:D2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522863470C3CB14A36985BC08F6526E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bK9ciejdm-pfMbaJ9GCixvT4_tI.roa
Signing time: Thu 02 Jan 2025 03:50:07 +0000
ROA not before: Thu 02 Jan 2025 03:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215232
IP address blocks: 2a0e:b107:2693::/48 maxlen: 48
2a0e:b107:27de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:86:34:70:c3:cb:14:a3:69:85:bc:08:f6:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6caf5c89e8dd9bea5f31b689f460a2c6f4f8fed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:5d:57:84:c5:f6:0d:b3:c7:94:ae:52:b6:
a2:e2:1f:05:64:13:ef:ae:37:2c:5b:7b:8b:f3:c7:
9b:6f:67:d5:95:33:d2:a5:0f:d0:78:cb:eb:8c:5d:
0a:d5:da:d2:d6:d6:1c:d7:0c:c1:e0:87:ee:6e:01:
f9:98:1c:b4:5d:41:77:fc:03:28:e6:4c:f2:42:48:
bf:74:c3:8f:9e:a8:43:4d:b9:23:ed:e8:4a:bd:b3:
21:b6:39:2a:fe:5e:c8:a1:c2:ca:f3:15:ce:3c:e3:
8a:b1:99:5b:09:49:ca:27:1e:6a:86:76:ab:fb:b5:
9c:f0:7f:b9:2b:89:3e:4b:a2:ec:90:aa:bb:b5:94:
e3:64:3f:b4:d4:ec:8d:fb:0f:c8:12:98:d5:d6:05:
b7:e3:53:04:9a:54:b9:e9:e0:01:8b:59:c5:2c:0b:
36:d9:73:5d:9e:95:1c:4f:9f:24:fd:81:b0:0c:96:
88:89:35:3b:25:33:ef:f9:17:8c:c3:e2:c1:30:ff:
be:c2:12:ba:74:46:34:a7:9c:84:ed:bb:08:6f:62:
bf:03:2e:07:e5:21:f9:54:50:39:f4:e6:85:92:97:
bc:76:fb:11:13:f7:bd:9e:be:b9:5d:26:bb:ca:a9:
bb:93:99:8f:8b:f1:d5:5c:32:9b:88:43:25:42:e8:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AF:5C:89:E8:DD:9B:EA:5F:31:B6:89:F4:60:A2:C6:F4:F8:FE:D2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bK9ciejdm-pfMbaJ9GCixvT4_tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2693::/48
2a0e:b107:27de::/48
Signature Algorithm: sha256WithRSAEncryption
25:20:87:f1:62:ed:a6:89:fc:0f:99:4b:98:d6:1b:4e:93:92:
d8:e3:be:6a:26:bf:40:7b:5d:e0:c8:4d:5f:c0:8f:2d:cb:05:
54:16:a2:e5:26:d6:35:50:44:26:87:27:6f:cb:be:f7:73:71:
73:8c:2d:51:88:00:05:f7:ca:1b:ae:44:76:58:e0:45:6d:dd:
01:42:0b:b0:91:31:ec:2b:49:c3:53:8c:f4:a7:fe:17:34:83:
94:84:ed:32:33:aa:38:45:fa:30:b5:f8:3a:eb:cb:da:0f:68:
fc:23:a0:4d:9c:30:30:95:59:47:cc:d0:9c:29:af:ad:59:9c:
ea:d6:02:9b:60:6f:64:bf:ff:21:a8:b3:46:ef:a3:9e:47:c9:
8e:fd:82:6e:47:56:59:f9:8e:eb:3b:2b:20:e7:d4:6c:0b:cf:
ac:37:49:e0:cd:59:38:c8:0f:2b:9e:37:85:b7:52:8f:ce:66:
43:9d:2d:db:d4:34:f3:d3:7d:e4:0e:b6:07:51:9f:ca:9a:f5:
f2:9b:de:64:c2:11:41:16:fe:96:00:54:64:48:a9:e6:e3:f3:
0d:98:19:41:19:c5:1a:04:40:0d:66:36:fa:7a:12:8a:44:fe:
d2:ad:bb:fe:f5:f9:b4:5d:4c:fe:53:25:7a:93:26:2b:2f:79:
02:78:9b:e8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIoY0cMPLFKNphbwI9lJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2FmNWM4OWU4ZGQ5YmVhNWYzMWI2ODlmNDYwYTJjNmY0ZjhmZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr69dV4TF9g2zx5SuUrai4h8FZBPv
rjcsW3uL88ebb2fVlTPSpQ/QeMvrjF0K1drS1tYc1wzB4IfubgH5mBy0XUF3/AMo
5kzyQki/dMOPnqhDTbkj7ehKvbMhtjkq/l7IocLK8xXOPOOKsZlbCUnKJx5qhnar
+7Wc8H+5K4k+S6LskKq7tZTjZD+01OyN+w/IEpjV1gW341MEmlS56eABi1nFLAs2
2XNdnpUcT58k/YGwDJaIiTU7JTPv+ReMw+LBMP++whK6dEY0p5yE7bsIb2K/Ay4H
5SH5VFA59OaFkpe8dvsRE/e9nr65XSa7yqm7k5mPi/HVXDKbiEMlQug2twIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGyvXIno3ZvqXzG2ifRgosb0+P7SMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvYks5Y2llamRtLXBmTWJhSjlHQ2l4dlQ0X3RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6xByaT
AwcAKg6xByfeMA0GCSqGSIb3DQEBCwUAA4IBAQAlIIfxYu2mifwPmUuY1htOk5LY
475qJr9Ae13gyE1fwI8tywVUFqLlJtY1UEQmhydvy773c3FzjC1RiAAF98obrkR2
WOBFbd0BQguwkTHsK0nDU4z0p/4XNIOUhO0yM6o4Rfowtfg668vaD2j8I6BNnDAw
lVlHzNCcKa+tWZzq1gKbYG9kv/8hqLNG76OeR8mO/YJuR1ZZ+Y7rOysg59RsC8+s
N0ngzVk4yA8rnjeFt1KPzmZDnS3b1DTz033kDrYHUZ/KmvXym95kwhFBFv6WAFRk
SKnm4/MNmBlBGcUaBEANZjb6ehKKRP7Srbv+9fm0XUz+UyV6kyYrL3kCeJvo
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:28 2025 by rpki-client