Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qXDG1IlQbW6dLC-vjVRCzD2mfi8.roa
File: qXDG1IlQbW6dLC-vjVRCzD2mfi8.roa (raw, json)
Hash identifier: d18Lo3L3k7Ub7RTYasjeBkQhOkvQ3Ok88339+wO/MP0=
Subject key identifier: A9:70:C6:D4:89:50:6D:6E:9D:2C:2F:AF:8D:54:42:CC:3D:A6:7E:2F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252203E7B71A525CE3C8C467CF4ADD74
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qXDG1IlQbW6dLC-vjVRCzD2mfi8.roa
Signing time: Thu 02 Jan 2025 03:49:33 +0000
ROA not before: Thu 02 Jan 2025 03:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200993
IP address blocks: 2a0e:b107:2691::/48 maxlen: 48
2a0e:b107:278a::/48 maxlen: 48
2a10:ccc1:1330::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:03:e7:b7:1a:52:5c:e3:c8:c4:67:cf:4a:dd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a970c6d489506d6e9d2c2faf8d5442cc3da67e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:34:f5:be:cd:07:0c:e6:ae:62:98:20:b6:
a5:00:b5:e9:0a:d1:3d:60:40:ab:d0:83:3e:66:0d:
b2:32:1a:a0:8f:0d:32:c6:b9:0d:29:66:7b:03:2d:
c2:cc:66:86:a2:b7:16:e1:c9:e9:d8:58:ca:19:65:
c2:80:7a:97:34:8d:6d:97:7a:3a:76:72:15:28:4c:
c1:a3:5a:07:fb:1e:6a:02:39:00:78:b1:80:b0:74:
b1:92:97:20:11:15:fc:1d:54:cb:b7:87:34:6a:18:
29:2c:dc:44:9d:d9:5c:f4:49:ce:2f:2f:22:ef:cb:
06:51:78:26:70:3a:09:05:db:71:69:8b:d7:71:8c:
a2:67:b7:c9:3b:d9:af:25:7c:1b:a4:fd:64:b3:d0:
63:b5:df:91:a7:2e:18:7e:ff:69:52:f2:c9:54:97:
76:f1:c2:da:e7:b9:b0:c9:56:9a:06:a1:85:43:5a:
07:84:3e:d0:71:53:ec:8e:fc:24:6f:30:38:06:e7:
e4:91:78:63:22:7a:41:56:60:66:a3:9f:0a:7f:2b:
80:ca:95:2f:a4:75:5f:2c:d8:d4:06:6e:3b:77:f6:
d6:30:eb:e9:04:ff:69:1f:61:d2:db:c2:29:cd:0b:
cb:f6:03:ee:a0:05:5c:5f:71:eb:95:cb:c9:e8:3b:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:70:C6:D4:89:50:6D:6E:9D:2C:2F:AF:8D:54:42:CC:3D:A6:7E:2F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qXDG1IlQbW6dLC-vjVRCzD2mfi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2691::/48
2a0e:b107:278a::/48
2a10:ccc1:1330::/44
Signature Algorithm: sha256WithRSAEncryption
2c:61:25:67:bd:b1:ee:df:cf:05:ef:c0:30:b0:85:8c:d4:0e:
cf:bd:3b:28:16:3a:f2:ed:84:58:1d:7e:d6:c2:bb:53:a3:83:
36:70:60:09:3d:34:fa:bd:0e:61:b0:4d:20:f8:e3:10:d4:20:
8a:cc:57:c1:75:3b:4d:c2:dc:48:cc:6c:f8:81:75:08:0b:6a:
39:f5:07:10:e7:11:0b:a6:56:12:90:76:ac:42:64:17:26:74:
bb:61:b7:51:cb:48:1c:7f:1f:d6:e4:6f:58:4c:01:58:12:e3:
db:d0:1b:bd:c2:44:02:25:ba:e3:f8:19:4e:8f:6d:e8:e5:da:
8c:e1:dc:75:d3:97:1d:9d:40:f2:47:fd:bb:e3:d2:88:a6:9d:
53:72:dc:c2:0f:de:e2:e3:e5:58:19:07:9e:5f:ae:a5:85:49:
41:d9:dd:11:c8:b3:79:a3:df:42:aa:1a:f1:4a:ce:b3:46:f0:
6b:fa:5e:ce:f0:83:0e:27:71:17:a2:ab:6b:ab:63:8d:34:9b:
dd:97:a3:77:4a:a9:d7:8b:12:57:79:1e:b4:4f:b9:15:45:f0:
28:8f:65:91:91:00:a8:94:05:99:c8:78:ad:75:9f:90:0e:a7:
e8:99:9e:03:06:26:a9:5c:11:f0:c8:43:06:60:c3:40:fb:e3:
7e:86:f5:d6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQlIgPntxpSXOPIxGfPSt10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTcwYzZkNDg5NTA2ZDZlOWQyYzJmYWY4ZDU0NDJjYzNkYTY3ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hk09b7NBwzmrmKYILalALXpCtE9
YECr0IM+Zg2yMhqgjw0yxrkNKWZ7Ay3CzGaGorcW4cnp2FjKGWXCgHqXNI1tl3o6
dnIVKEzBo1oH+x5qAjkAeLGAsHSxkpcgERX8HVTLt4c0ahgpLNxEndlc9EnOLy8i
78sGUXgmcDoJBdtxaYvXcYyiZ7fJO9mvJXwbpP1ks9Bjtd+Rpy4Yfv9pUvLJVJd2
8cLa57mwyVaaBqGFQ1oHhD7QcVPsjvwkbzA4BufkkXhjInpBVmBmo58KfyuAypUv
pHVfLNjUBm47d/bWMOvpBP9pH2HS28IpzQvL9gPuoAVcX3HrlcvJ6DvwBQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKlwxtSJUG1unSwvr41UQsw9pn4vMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvcVhERzFJbFFiVzZkTEMtdmpWUkN6RDJtZmk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKg6xByaR
AwcAKg6xByeKAwcEKhDMwRMwMA0GCSqGSIb3DQEBCwUAA4IBAQAsYSVnvbHu388F
78AwsIWM1A7PvTsoFjry7YRYHX7WwrtTo4M2cGAJPTT6vQ5hsE0g+OMQ1CCKzFfB
dTtNwtxIzGz4gXUIC2o59QcQ5xELplYSkHasQmQXJnS7YbdRy0gcfx/W5G9YTAFY
EuPb0Bu9wkQCJbrj+BlOj23o5dqM4dx105cdnUDyR/2749KIpp1TctzCD97i4+VY
GQeeX66lhUlB2d0RyLN5o99CqhrxSs6zRvBr+l7O8IMOJ3EXoqtrq2ONNJvdl6N3
SqnXixJXeR60T7kVRfAoj2WRkQColAWZyHitdZ+QDqfomZ4DBiapXBHwyEMGYMNA
++N+hvXW
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:24:40 2025 by rpki-client