Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vnuHo3nK-GDh1ElFbe3VGmtzTHk.roa
File: vnuHo3nK-GDh1ElFbe3VGmtzTHk.roa (raw, json)
Hash identifier: z8Lr+G0wXF/yq13cX7Yl0aXqIdBBjw7dzKw4xVaZ+O0=
Subject key identifier: BE:7B:87:A3:79:CA:F8:60:E1:D4:49:45:6D:ED:D5:1A:6B:73:4C:79
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252287C17B7CA22BE54FF12074C56F57
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vnuHo3nK-GDh1ElFbe3VGmtzTHk.roa
Signing time: Thu 02 Jan 2025 03:50:07 +0000
ROA not before: Thu 02 Jan 2025 03:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215486
IP address blocks: 2a10:2f00:1a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:87:c1:7b:7c:a2:2b:e5:4f:f1:20:74:c5:6f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be7b87a379caf860e1d449456dedd51a6b734c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:25:02:ba:fd:68:37:21:f2:ae:83:41:f9:
97:3b:ca:37:d2:ea:3d:1a:37:3c:92:ff:6b:15:51:
67:d2:a5:f5:6d:79:bc:31:7b:f0:71:5f:2a:87:f7:
c3:3c:73:1d:a8:78:d8:98:fb:2f:b2:2f:ed:92:48:
52:a9:0d:80:cb:fe:99:fe:a2:6e:77:ca:6c:7c:a1:
92:fc:1e:45:b4:54:e9:fb:a4:50:af:88:d3:42:f9:
30:7d:02:0a:4f:9a:97:b3:16:03:96:51:3d:c5:98:
c8:61:d9:f0:26:c1:bc:5f:1c:d7:31:bb:c5:df:30:
68:33:21:d6:a7:ab:22:51:74:1f:82:ad:af:b0:5f:
a1:16:93:e7:a0:41:ff:ff:f7:e9:f8:0e:39:54:d8:
67:f7:f1:9b:3d:3d:9d:e6:9b:1e:2c:f6:e6:57:46:
fb:bf:29:76:f3:46:e7:04:61:9a:bc:78:91:8a:d3:
26:c8:9e:e3:aa:fb:19:0c:d7:e7:1a:9f:fa:b5:9f:
b1:8a:18:e1:f9:75:d0:67:79:cb:1c:d9:28:5c:fa:
5f:f4:25:28:6d:aa:41:b8:0b:45:89:32:47:56:16:
ed:3a:76:c8:fe:4b:99:c6:31:0c:c2:17:c8:7e:9e:
af:28:ad:9a:fa:b5:5d:5d:09:e1:b3:d6:63:27:1d:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:87:A3:79:CA:F8:60:E1:D4:49:45:6D:ED:D5:1A:6B:73:4C:79
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vnuHo3nK-GDh1ElFbe3VGmtzTHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:1a0::/48
Signature Algorithm: sha256WithRSAEncryption
a2:f0:dd:7c:94:9b:51:ba:a9:73:0c:80:70:94:4e:6f:c7:d7:
29:84:6c:2d:d7:52:55:46:44:e4:61:49:ea:40:8a:ca:54:4f:
bd:0f:f5:ea:e3:ac:3c:f0:0a:80:a2:9d:5f:fc:91:90:c4:f2:
22:1b:dc:d0:33:b1:14:f6:f0:9f:48:a8:74:27:a9:d3:21:b9:
a7:ff:60:5e:e7:ce:9a:5b:3f:4c:dd:6c:1c:39:95:af:a8:2e:
2a:4c:ff:53:11:43:7d:9f:35:5c:3b:84:7d:ff:48:75:f5:2b:
c1:e2:bc:7a:fc:af:b6:f0:58:09:d4:a1:b0:ed:93:c8:9a:84:
39:b8:79:f3:33:72:38:4b:1c:4d:50:84:79:8a:2e:8a:ea:87:
64:a9:d0:0d:27:c1:37:b3:72:76:43:c1:71:c5:64:ee:fe:ba:
c8:bb:b6:80:4c:46:98:7c:2a:2c:b9:3c:88:f7:f1:fc:cb:6f:
9c:7f:6a:59:19:34:5c:f1:eb:5e:93:70:f8:15:f8:46:c2:84:
59:d8:cd:9a:55:ad:5c:98:0b:da:90:24:13:94:10:b7:23:2f:
bc:5f:d0:09:ad:36:b1:a5:83:6e:f3:f8:22:da:d7:03:65:24:
42:a5:6f:28:ad:9e:65:5a:a6:ac:ee:30:c6:2b:47:d6:d2:b8:
eb:ef:f1:8a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlIofBe3yiK+VP8SB0xW9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMTAyMDM1MDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTdiODdhMzc5Y2FmODYwZTFkNDQ5NDU2ZGVkZDUxYTZiNzM0Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowMlArr9aDch8q6DQfmXO8o30uo9
Gjc8kv9rFVFn0qX1bXm8MXvwcV8qh/fDPHMdqHjYmPsvsi/tkkhSqQ2Ay/6Z/qJu
d8psfKGS/B5FtFTp+6RQr4jTQvkwfQIKT5qXsxYDllE9xZjIYdnwJsG8XxzXMbvF
3zBoMyHWp6siUXQfgq2vsF+hFpPnoEH///fp+A45VNhn9/GbPT2d5pseLPbmV0b7
vyl280bnBGGavHiRitMmyJ7jqvsZDNfnGp/6tZ+xihjh+XXQZ3nLHNkoXPpf9CUo
bapBuAtFiTJHVhbtOnbI/kuZxjEMwhfIfp6vKK2a+rVdXQnhs9ZjJx0r+wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL57h6N5yvhg4dRJRW3t1Rprc0x5MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdm51SG8zbkstR0RoMUVsRmJlM1ZHbXR6VEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAGg
MA0GCSqGSIb3DQEBCwUAA4IBAQCi8N18lJtRuqlzDIBwlE5vx9cphGwt11JVRkTk
YUnqQIrKVE+9D/Xq46w88AqAop1f/JGQxPIiG9zQM7EU9vCfSKh0J6nTIbmn/2Be
586aWz9M3WwcOZWvqC4qTP9TEUN9nzVcO4R9/0h19SvB4rx6/K+28FgJ1KGw7ZPI
moQ5uHnzM3I4SxxNUIR5ii6K6odkqdANJ8E3s3J2Q8FxxWTu/rrIu7aATEaYfCos
uTyI9/H8y2+cf2pZGTRc8etek3D4FfhGwoRZ2M2aVa1cmAvakCQTlBC3Iy+8X9AJ
rTaxpYNu8/gi2tcDZSRCpW8orZ5lWqas7jDGK0fW0rjr7/GK
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:12 2025 by rpki-client