Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ht-qu-ds4K4RACauh2qg2TyHM34.roa
File: ht-qu-ds4K4RACauh2qg2TyHM34.roa (raw, json)
Hash identifier: onCIuMcjeHmDht737x/F0hIvOuvrOuZyv4GhMygoD1A=
Subject key identifier: 86:DF:AA:BB:E7:6C:E0:AE:11:00:26:AE:87:6A:A0:D9:3C:87:33:7E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223281D7359F823D9E1DA18B30B19A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ht-qu-ds4K4RACauh2qg2TyHM34.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209025
IP address blocks: 2a0e:b107:800::/44 maxlen: 48
2a0e:b107:9b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:32:81:d7:35:9f:82:3d:9e:1d:a1:8b:30:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86dfaabbe76ce0ae110026ae876aa0d93c87337e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:9b:d7:fa:50:51:b2:69:d9:5f:3d:29:04:
1c:17:29:cf:a3:5c:e9:1c:f7:70:1c:29:bb:4b:ba:
e4:04:3c:77:d2:77:15:b6:15:86:6e:ec:17:c8:9f:
b6:18:55:45:c7:35:fa:87:99:61:69:a7:e4:86:61:
d9:cd:df:ca:f7:ed:d2:5d:7e:00:e2:94:fc:0b:4e:
15:b3:93:61:16:9b:be:45:dc:34:72:33:d5:70:15:
38:c8:4a:c2:dc:6c:58:90:08:f1:20:9e:ec:98:b3:
b2:07:73:7b:a0:94:c0:ca:68:f2:1f:50:fa:9c:0c:
30:5d:26:c5:a4:b6:68:40:a5:11:e4:5a:e5:ef:0d:
46:ee:b5:42:a3:5a:ce:10:da:42:d9:6a:f9:bc:1d:
9a:94:d7:bf:1a:32:46:b6:c5:39:72:ab:a9:99:09:
e1:b9:1d:4b:17:d7:e7:57:23:fd:da:45:91:0c:ff:
c2:ac:f5:32:86:54:0a:cd:00:2e:82:bc:2e:fd:bc:
bb:d0:14:02:64:1f:d7:50:94:23:5b:14:30:f0:3d:
ee:db:5f:65:46:1b:ba:41:13:4c:cc:2c:b4:67:e5:
22:b3:47:c4:cd:73:e9:62:5a:b4:d9:7d:36:dd:d7:
fa:39:c4:7f:2d:29:1b:b9:2f:37:41:c5:90:dd:f6:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DF:AA:BB:E7:6C:E0:AE:11:00:26:AE:87:6A:A0:D9:3C:87:33:7E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ht-qu-ds4K4RACauh2qg2TyHM34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:800::/44
2a0e:b107:9b0::/44
Signature Algorithm: sha256WithRSAEncryption
5a:a6:d8:f8:88:71:1f:53:0d:a7:f4:ce:ac:6c:f5:bd:bb:83:
16:42:7b:cb:4f:24:09:e7:b3:92:c9:8b:dc:5f:a6:28:b1:23:
d7:0d:f6:72:c6:cf:a6:4b:bb:10:12:e9:32:e6:2f:cb:7a:62:
85:35:42:22:84:35:1b:12:3c:66:fb:d2:d5:9d:ca:2b:81:14:
ef:df:5b:7a:ca:80:1f:f4:ff:cd:38:73:95:c0:fe:1e:27:d8:
6b:6e:c7:85:41:1f:ac:f9:ad:20:88:a0:7f:d2:43:66:88:73:
08:2f:4c:19:46:7a:0f:dd:c0:af:e1:8e:78:ec:34:f9:51:c9:
21:6e:63:b5:13:5c:70:00:b5:e1:7a:b5:87:b9:a8:55:d2:f6:
6b:23:da:b5:be:5b:6b:5c:be:ca:3b:cd:fd:11:13:1a:d8:56:
8e:de:43:2b:2f:9c:a7:f4:ab:e9:d0:c3:d5:36:08:7e:c3:18:
df:8b:f3:4e:2b:73:7b:fe:b5:86:85:eb:33:8b:63:45:65:cd:
0f:91:35:99:c8:80:c1:b8:d6:bf:a2:27:8e:74:56:b0:e3:a2:
8a:4e:0b:0b:e1:92:33:6d:66:7a:91:fb:a4:89:a4:43:9a:77:
24:2e:1f:d5:1a:5f:62:2a:5f:d6:60:03:b5:d6:eb:e4:4a:dd:
b8:c0:17:22
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIjKB1zWfgj2eHaGLMLGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmRmYWFiYmU3NmNlMGFlMTEwMDI2YWU4NzZhYTBkOTNjODczMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpKb1/pQUbJp2V89KQQcFynPo1zp
HPdwHCm7S7rkBDx30ncVthWGbuwXyJ+2GFVFxzX6h5lhaafkhmHZzd/K9+3SXX4A
4pT8C04Vs5NhFpu+Rdw0cjPVcBU4yErC3GxYkAjxIJ7smLOyB3N7oJTAymjyH1D6
nAwwXSbFpLZoQKUR5Frl7w1G7rVCo1rOENpC2Wr5vB2alNe/GjJGtsU5cqupmQnh
uR1LF9fnVyP92kWRDP/CrPUyhlQKzQAugrwu/by70BQCZB/XUJQjWxQw8D3u219l
Rhu6QRNMzCy0Z+Uis0fEzXPpYlq02X023df6OcR/LSkbuS83QcWQ3fb2zwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIbfqrvnbOCuEQAmrodqoNk8hzN+MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaHQtcXUtZHM0SzRSQUNhdWgycWcyVHlITTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6xBwgA
AwcEKg6xBwmwMA0GCSqGSIb3DQEBCwUAA4IBAQBaptj4iHEfUw2n9M6sbPW9u4MW
QnvLTyQJ57OSyYvcX6YosSPXDfZyxs+mS7sQEuky5i/LemKFNUIihDUbEjxm+9LV
ncorgRTv31t6yoAf9P/NOHOVwP4eJ9hrbseFQR+s+a0giKB/0kNmiHMIL0wZRnoP
3cCv4Y547DT5UckhbmO1E1xwALXherWHuahV0vZrI9q1vltrXL7KO839ERMa2FaO
3kMrL5yn9Kvp0MPVNgh+wxjfi/NOK3N7/rWGheszi2NFZc0PkTWZyIDBuNa/oieO
dFaw46KKTgsL4ZIzbWZ6kfukiaRDmnckLh/VGl9iKl/WYAO11uvkSt24wBci
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:15:55 2025 by rpki-client