Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/o6055-b-qPzQTA0F_ST-9FEVVmE.roa
File: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (raw, json)
Hash identifier: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=
Subject key identifier: A3:AD:39:E7:E6:FE:A8:FC:D0:4C:0D:05:FD:24:FE:F4:51:15:56:61
Certificate issuer: /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial: 01942068053D0D223DA268C9C3A1C3DE4C06
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/o6055-b-qPzQTA0F_ST-9FEVVmE.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:a380:300::/48 maxlen: 48
2a13:a380:301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:05:3d:0d:22:3d:a2:68:c9:c3:a1:c3:de:4c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3ad39e7e6fea8fcd04c0d05fd24fef451155661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:6d:92:54:26:ea:88:c2:d5:30:80:2a:95:
9b:5f:23:dc:da:e6:31:95:93:6b:dd:89:6c:5f:6c:
72:7e:d1:35:35:75:51:0b:2a:ac:39:42:84:c6:6b:
05:34:b5:1c:55:0e:d4:ed:17:37:c8:85:4e:2b:b2:
be:34:00:cd:cc:17:ac:8b:9a:89:f4:e1:66:5b:e3:
28:e2:53:7f:f9:14:3c:5f:c8:64:9a:51:29:75:57:
2d:a6:40:b8:03:37:84:b9:2c:7e:23:19:a6:08:24:
c2:10:64:90:d9:33:b9:36:2b:61:ea:e9:67:84:27:
b8:4e:aa:02:a8:41:a9:70:a0:0d:04:b4:cf:ab:02:
13:dd:69:d2:c6:c2:6e:6d:7c:bf:c7:7e:f8:c5:38:
43:f4:64:d8:35:fe:ef:bb:dc:d4:11:94:48:87:8f:
2f:d3:b4:f7:0b:b5:34:e8:59:9e:f4:53:6f:e7:3b:
15:34:6a:69:f4:04:ea:6e:8a:7e:af:e4:ed:64:bc:
e6:ff:6c:67:c0:c8:0d:87:09:b3:05:8b:dd:f0:07:
26:20:80:3f:7f:38:50:fc:42:f8:5d:45:f0:fe:68:
f3:32:f9:c0:cb:65:6a:70:f7:fa:50:e7:47:55:71:
54:09:c9:d6:c2:e7:f0:64:63:7b:d3:7e:dd:16:64:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:39:E7:E6:FE:A8:FC:D0:4C:0D:05:FD:24:FE:F4:51:15:56:61
X509v3 Authority Key Identifier:
keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/o6055-b-qPzQTA0F_ST-9FEVVmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a380:300::/47
Signature Algorithm: sha256WithRSAEncryption
8c:2e:67:86:0d:61:a0:6e:ea:cf:36:90:a1:9c:0e:e2:2f:79:
16:75:d0:52:a5:77:b9:95:a8:7a:63:6b:75:69:41:7b:8e:c4:
6e:47:e6:b9:da:52:ab:0d:9b:9b:e2:0a:b1:30:fe:d1:d3:d9:
91:a7:36:07:38:65:4e:02:ce:a6:64:48:0a:b5:53:25:07:43:
90:60:0d:8f:32:f9:ba:3b:e4:fa:2e:23:b5:29:b6:de:01:bd:
96:19:3b:d8:df:16:43:07:25:6a:01:1a:b1:d8:b2:79:73:e3:
b3:a8:ba:5a:a2:05:39:21:73:d8:5b:d8:bc:9c:c3:e7:32:f4:
7b:4d:d0:32:fa:f7:c5:75:54:65:6f:06:63:21:f8:cd:1f:8a:
93:f9:f7:75:a4:a2:92:d3:3b:bb:a7:65:38:b4:04:02:d5:17:
99:d7:e3:9b:b1:d0:e5:9b:28:a0:50:aa:f2:19:8a:a0:6a:9b:
c0:74:3a:3a:ad:3a:a2:5b:19:ba:04:90:33:a4:11:07:75:43:
2d:c7:fe:df:8d:e0:1c:c3:01:6d:d3:71:26:59:93:cf:d5:ee:
07:81:01:39:d0:64:83:2b:45:02:0e:ec:3e:40:a3:d8:16:3b:
e0:18:8c:df:9f:3b:57:48:f8:d0:2a:bd:53:1b:af:f4:7b:22:
4b:24:f9:d4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQgaAU9DSI9omjJw6HD3kwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl
ZTgyOGUwHhcNMjUwMTAxMDU0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2FkMzllN2U2ZmVhOGZjZDA0YzBkMDVmZDI0ZmVmNDUxMTU1NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE9tklQm6ojC1TCAKpWbXyPc2uYx
lZNr3YlsX2xyftE1NXVRCyqsOUKExmsFNLUcVQ7U7Rc3yIVOK7K+NADNzBesi5qJ
9OFmW+Mo4lN/+RQ8X8hkmlEpdVctpkC4AzeEuSx+IxmmCCTCEGSQ2TO5Nith6uln
hCe4TqoCqEGpcKANBLTPqwIT3WnSxsJubXy/x374xThD9GTYNf7vu9zUEZRIh48v
07T3C7U06Fme9FNv5zsVNGpp9ATqbop+r+TtZLzm/2xnwMgNhwmzBYvd8AcmIIA/
fzhQ/EL4XUXw/mjzMvnAy2VqcPf6UOdHVXFUCcnWwufwZGN7037dFmS2wwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKOtOefm/qj80EwNBf0k/vRRFVZhMB8GA1UdIwQY
MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt
OTI2YzRhMzI2ZTA4LzEvbzYwNTUtYi1xUHpRVEEwRl9TVC05RkVWVm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4
LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhOjgAMA
MA0GCSqGSIb3DQEBCwUAA4IBAQCMLmeGDWGgburPNpChnA7iL3kWddBSpXe5lah6
Y2t1aUF7jsRuR+a52lKrDZub4gqxMP7R09mRpzYHOGVOAs6mZEgKtVMlB0OQYA2P
Mvm6O+T6LiO1KbbeAb2WGTvY3xZDByVqARqx2LJ5c+OzqLpaogU5IXPYW9i8nMPn
MvR7TdAy+vfFdVRlbwZjIfjNH4qT+fd1pKKS0zu7p2U4tAQC1ReZ1+ObsdDlmyig
UKryGYqgapvAdDo6rTqiWxm6BJAzpBEHdUMtx/7fjeAcwwFt03EmWZPP1e4HgQE5
0GSDK0UCDuw+QKPYFjvgGIzfnztXSPjQKr1TG6/0eyJLJPnU
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:02 2025 by rpki-client