Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/1-bk62IWKrSZzzdVcShXkFvqxkl0.roa
File: 1-bk62IWKrSZzzdVcShXkFvqxkl0.roa (raw, json)
Hash identifier: Kl/dAts5LKa+SfBn4cKmh5vmLiAlVwqYIz2UeNCJ1iU=
Subject key identifier: F9:B9:3A:D8:85:8A:AD:26:73:CD:D5:5C:4A:15:E4:16:FA:B1:92:5D
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5F381FD5428B0942D08D678B4EF7A
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/1-bk62IWKrSZzzdVcShXkFvqxkl0.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198022
IP address blocks: 144.208.215.96/28 maxlen: 28
2a00:11c0:47:df::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f3:81:fd:54:28:b0:94:2d:08:d6:78:b4:ef:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9b93ad8858aad2673cdd55c4a15e416fab1925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:97:dd:e4:f3:39:c7:74:81:cd:d1:0c:05:
f7:f0:4a:cc:1d:23:4e:ce:71:be:d7:0e:36:70:b2:
d7:f2:b7:9c:a1:a7:95:b5:9a:96:8e:ad:01:a5:b2:
5b:e9:23:8d:b7:c1:83:ab:02:e9:9d:ab:1a:65:d3:
11:b9:41:e1:8c:01:11:0f:33:dc:b9:21:6a:e9:ea:
f1:04:62:85:eb:18:c3:60:84:9e:b2:ec:b6:66:8f:
89:e0:09:b1:5a:6a:ba:da:f0:71:91:c5:09:41:05:
4a:b2:53:54:b3:c5:58:a5:c7:ba:f7:c9:90:a2:85:
95:ea:0f:7b:f5:3e:59:03:53:b0:49:d5:5e:fd:36:
d5:e5:d7:9a:59:ae:ab:69:f8:97:5a:2b:e3:4a:8b:
d5:8f:9c:14:0a:19:7c:0c:3f:53:0f:e7:ab:5a:c5:
b5:77:0e:9d:d4:1a:e3:36:e3:89:aa:b8:77:0a:c3:
81:78:4a:02:9f:1d:4e:4f:42:a5:60:13:05:82:c5:
bc:41:48:72:24:eb:10:8c:fd:b0:82:a7:05:1d:bf:
63:cf:c8:a6:d0:0f:e7:7e:cd:a8:12:de:64:c2:c1:
82:c0:08:98:66:46:16:7e:67:c7:5b:a9:19:e6:0e:
92:24:00:4f:1f:52:cc:1a:bf:53:de:5d:de:de:f4:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B9:3A:D8:85:8A:AD:26:73:CD:D5:5C:4A:15:E4:16:FA:B1:92:5D
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/1-bk62IWKrSZzzdVcShXkFvqxkl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.215.96/28
IPv6:
2a00:11c0:47:df::/64
Signature Algorithm: sha256WithRSAEncryption
26:1e:19:14:f9:52:24:cc:c6:9d:cd:33:f3:4f:7e:ce:ea:1b:
d4:d0:0d:c4:23:19:a1:22:af:2c:f0:e3:27:ac:0c:4a:31:8d:
47:d3:55:8d:b1:42:d8:3a:8c:0e:19:a6:c2:30:70:75:6f:b1:
94:83:07:fe:bd:19:70:69:34:1f:31:4a:b4:77:9f:a5:b5:08:
5d:5c:1c:85:b0:16:4c:10:cb:32:37:a5:4b:fe:5a:0a:63:b5:
e8:58:0e:3e:c9:da:d1:af:09:6b:68:df:e2:29:1b:d9:64:32:
2c:2e:2c:fd:1e:15:97:83:eb:b6:78:42:45:81:9c:bc:ac:84:
a0:ca:cb:e7:ef:3b:da:f3:44:ec:61:d7:a5:ba:41:22:71:c5:
7c:bc:ea:0f:ab:29:3f:c0:c7:9d:82:10:cc:db:5d:50:28:74:
4a:98:08:67:02:10:cc:90:31:7a:9e:8c:74:03:fb:50:91:97:
6c:3b:c1:70:b0:50:d3:22:0d:65:a4:2d:76:59:77:d5:a2:10:
4f:60:41:73:ea:46:72:10:49:1f:d9:3a:45:a5:f8:7a:fb:46:
26:0c:62:29:92:77:a3:88:26:5d:c6:f4:5e:de:ff:38:de:89:
ad:6c:64:7f:ca:1b:8f:34:f1:63:1b:18:7c:53:01:56:a9:3c:
09:09:96:1c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQg1fOB/VQosJQtCNZ4tO96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3
YTE1MjgwHhcNMjUwMTAxMDc0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWI5M2FkODg1OGFhZDI2NzNjZGQ1NWM0YTE1ZTQxNmZhYjE5MjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05aX3eTzOcd0gc3RDAX38ErMHSNO
znG+1w42cLLX8recoaeVtZqWjq0BpbJb6SONt8GDqwLpnasaZdMRuUHhjAERDzPc
uSFq6erxBGKF6xjDYISesuy2Zo+J4AmxWmq62vBxkcUJQQVKslNUs8VYpce698mQ
ooWV6g979T5ZA1OwSdVe/TbV5deaWa6rafiXWivjSovVj5wUChl8DD9TD+erWsW1
dw6d1BrjNuOJqrh3CsOBeEoCnx1OT0KlYBMFgsW8QUhyJOsQjP2wgqcFHb9jz8im
0A/nfs2oEt5kwsGCwAiYZkYWfmfHW6kZ5g6SJABPH1LMGr9T3l3e3vS2AQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPm5OtiFiq0mc83VXEoV5Bb6sZJdMB8GA1UdIwQY
MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt
NzQxMzk1OTEzMTJlLzEvMS1iazYySVdLclNaenpkVmNTaFhrRnZxeGtsMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNmUvOThjNGVlLTJmNTktNDVhNy1hZGI2LTc0MTM5NTkxMzEy
ZS8xL3BUbXY2NnpvbWFqdUM3VDR1MFIxX2lSNkZTZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwDQQCAAEwBwMFBJDQ12Aw
EQQCAAIwCwMJACoAEcAARwDfMA0GCSqGSIb3DQEBCwUAA4IBAQAmHhkU+VIkzMad
zTPzT37O6hvU0A3EIxmhIq8s8OMnrAxKMY1H01WNsULYOowOGabCMHB1b7GUgwf+
vRlwaTQfMUq0d5+ltQhdXByFsBZMEMsyN6VL/loKY7XoWA4+ydrRrwlraN/iKRvZ
ZDIsLiz9HhWXg+u2eEJFgZy8rISgysvn7zva80TsYdelukEiccV8vOoPqyk/wMed
ghDM211QKHRKmAhnAhDMkDF6nox0A/tQkZdsO8FwsFDTIg1lpC12WXfVohBPYEFz
6kZyEEkf2TpFpfh6+0YmDGIpknejiCZdxvRe3v843omtbGR/yhuPNPFjGxh8UwFW
qTwJCZYc
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:40 2025 by rpki-client