Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hD4ZaQ6hLIDPNuh0s-1J4Aopvro.roa
File: hD4ZaQ6hLIDPNuh0s-1J4Aopvro.roa (raw, json)
Hash identifier: g89xuzodKIlQCGjhvlQtb4yeUEjgKi05baECaJEX59o=
Subject key identifier: 84:3E:19:69:0E:A1:2C:80:CF:36:E8:74:B3:ED:49:E0:0A:29:BE:BA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425226F60541CC75E7C2FC82EA8AECAB9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hD4ZaQ6hLIDPNuh0s-1J4Aopvro.roa
Signing time: Thu 02 Jan 2025 03:50:01 +0000
ROA not before: Thu 02 Jan 2025 03:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213263
IP address blocks: 2a0e:b107:980::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:6f:60:54:1c:c7:5e:7c:2f:c8:2e:a8:ae:ca:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=843e19690ea12c80cf36e874b3ed49e00a29beba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:6f:b3:d1:2c:ff:2c:70:61:01:62:14:c8:
2b:f9:de:ab:70:28:64:1b:7e:27:1b:00:71:5f:9b:
61:cf:ea:ee:e1:e2:78:7b:5f:1f:c5:13:39:75:1b:
a9:ad:c3:43:e7:d2:c7:bc:4f:bd:bf:c6:80:d2:62:
40:df:7c:33:9b:08:04:e3:eb:48:3e:dd:9d:73:0d:
c3:39:d4:b0:b9:9c:bd:da:49:ae:67:75:c5:55:cc:
6f:11:25:64:cd:96:d3:ec:ec:99:6a:33:0e:af:9f:
dc:ed:73:7e:f1:59:be:68:82:53:6f:84:b5:87:6c:
93:f5:59:10:6f:83:b4:ff:fc:8d:a7:83:ff:8f:3e:
59:e1:cc:0b:59:df:50:ad:fd:de:36:09:b4:d4:61:
e1:22:e2:b8:fa:88:3b:b6:33:c9:62:38:1e:de:fd:
dc:fa:06:8f:eb:c0:29:3d:9b:06:6c:4b:b0:99:73:
09:3e:f0:d2:f2:c5:a1:a6:c6:81:ce:5e:91:68:6b:
9f:73:d4:60:48:c2:f9:37:3e:a4:b0:bb:24:e8:50:
11:eb:67:62:70:d1:1e:6d:2a:da:21:2d:1e:f5:48:
aa:5e:0b:48:70:09:2d:d7:0f:50:1a:ac:2b:05:f9:
c4:8c:32:fb:8a:01:32:3a:3a:bd:cb:ae:c5:b1:cb:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3E:19:69:0E:A1:2C:80:CF:36:E8:74:B3:ED:49:E0:0A:29:BE:BA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hD4ZaQ6hLIDPNuh0s-1J4Aopvro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:980::/44
Signature Algorithm: sha256WithRSAEncryption
b7:80:f0:c0:26:7c:9c:7a:80:8e:a7:9d:82:af:19:35:81:b1:
8f:7a:3a:d2:01:ee:ee:f7:64:b4:d0:ed:02:d7:94:2e:41:fc:
fc:33:5c:c9:8a:7f:f6:44:a3:02:e6:a7:fc:88:bc:f2:05:40:
e2:46:f3:a4:83:7e:00:89:06:c6:da:2a:ce:bc:00:c1:9c:9c:
cc:a5:21:00:41:da:71:b0:7d:bb:ae:37:2a:09:2c:0c:5e:55:
fb:19:79:77:66:42:ad:5c:94:0c:61:66:fa:bb:a6:5c:a4:26:
b6:6c:0e:c6:40:2d:93:c9:60:3b:5e:6b:a1:e0:9b:b9:c1:49:
1f:ba:fa:e8:01:df:14:49:6b:f3:56:2c:4f:eb:b3:20:69:02:
32:03:51:4b:a6:a9:19:03:79:3d:ed:fc:04:e4:1e:28:17:52:
81:8e:dd:19:6c:0a:4a:eb:a3:c6:6b:98:86:2d:38:16:07:61:
4a:ec:9e:b4:a6:ed:de:28:75:85:38:e1:b4:99:22:41:f8:b2:
45:b5:d2:25:c1:76:62:a9:f8:1d:e3:f3:e3:53:20:0c:16:4f:
69:44:6e:d8:40:de:41:86:ca:b7:1c:46:ea:ad:90:37:11:66:
24:20:45:cc:25:74:88:35:6f:20:1e:e2:c4:cf:84:0b:88:36:
c5:cd:e6:7a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIm9gVBzHXnwvyC6orsq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDNlMTk2OTBlYTEyYzgwY2YzNmU4NzRiM2VkNDllMDBhMjliZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKVvs9Es/yxwYQFiFMgr+d6rcChk
G34nGwBxX5thz+ru4eJ4e18fxRM5dRuprcND59LHvE+9v8aA0mJA33wzmwgE4+tI
Pt2dcw3DOdSwuZy92kmuZ3XFVcxvESVkzZbT7OyZajMOr5/c7XN+8Vm+aIJTb4S1
h2yT9VkQb4O0//yNp4P/jz5Z4cwLWd9Qrf3eNgm01GHhIuK4+og7tjPJYjge3v3c
+gaP68ApPZsGbEuwmXMJPvDS8sWhpsaBzl6RaGufc9RgSML5Nz6ksLsk6FAR62di
cNEebSraIS0e9UiqXgtIcAkt1w9QGqwrBfnEjDL7igEyOjq9y67Fsct4swIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIQ+GWkOoSyAzzbodLPtSeAKKb66MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaEQ0WmFRNmhMSURQTnVoMHMtMUo0QW9wdnJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBwmA
MA0GCSqGSIb3DQEBCwUAA4IBAQC3gPDAJnyceoCOp52Crxk1gbGPejrSAe7u92S0
0O0C15QuQfz8M1zJin/2RKMC5qf8iLzyBUDiRvOkg34AiQbG2irOvADBnJzMpSEA
QdpxsH27rjcqCSwMXlX7GXl3ZkKtXJQMYWb6u6ZcpCa2bA7GQC2TyWA7Xmuh4Ju5
wUkfuvroAd8USWvzVixP67MgaQIyA1FLpqkZA3k97fwE5B4oF1KBjt0ZbApK66PG
a5iGLTgWB2FK7J60pu3eKHWFOOG0mSJB+LJFtdIlwXZiqfgd4/PjUyAMFk9pRG7Y
QN5Bhsq3HEbqrZA3EWYkIEXMJXSINW8gHuLEz4QLiDbFzeZ6
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:24 2025 by rpki-client