Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/aRRMx2LpXrXzb91tfKNbEYwqTy4.roa
File: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (raw, json)
Hash identifier: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=
Subject key identifier: 69:14:4C:C7:62:E9:5E:B5:F3:6F:DD:6D:7C:A3:5B:11:8C:2A:4F:2E
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 01942368DF8C12C11F21CFC1B589BABFABC3
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/aRRMx2LpXrXzb91tfKNbEYwqTy4.roa
Signing time: Wed 01 Jan 2025 19:47:43 +0000
ROA not before: Wed 01 Jan 2025 19:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1213
IP address blocks: 149.157.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:df:8c:12:c1:1f:21:cf:c1:b5:89:ba:bf:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Jan 1 19:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69144cc762e95eb5f36fdd6d7ca35b118c2a4f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:96:db:c9:96:4a:b4:18:67:d1:c0:66:35:32:
6b:e1:d7:59:67:e2:59:ea:75:07:18:6a:cd:75:fa:
67:9e:ef:b9:96:2c:78:26:e5:75:86:28:16:9d:77:
06:b0:c8:dd:b5:3f:96:c0:1d:dd:b9:1a:52:38:0d:
5f:4e:06:5e:a7:bb:81:69:a6:23:84:15:03:04:9a:
f1:98:84:2b:95:d7:5f:5c:f3:ce:ca:78:3b:bf:8f:
80:67:2f:2b:25:1a:45:65:a8:09:0d:b4:8d:4b:71:
7d:d7:b8:f2:95:b9:ed:44:bb:18:48:65:9e:cc:e4:
6b:60:62:78:7e:46:d6:44:2c:68:51:42:fe:59:cd:
db:5f:ee:72:90:f6:da:14:5a:e5:68:a5:28:e8:ef:
6a:4b:09:19:f7:98:a1:85:d9:93:23:22:d4:da:b2:
3a:c5:ca:e7:21:63:8e:d2:fd:85:74:3e:44:4b:02:
fa:53:80:6c:4b:19:b3:87:d0:18:1c:47:81:5e:d0:
6d:22:00:df:d2:5b:95:65:e9:a8:9c:4c:c9:3d:93:
b2:2a:f8:ae:37:f9:d3:82:25:f1:27:c1:80:d2:45:
64:82:8f:e8:8c:05:74:9e:6f:8e:00:9f:b4:eb:75:
8f:74:c8:61:01:b4:be:24:56:71:b1:a7:9c:fc:3e:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:4C:C7:62:E9:5E:B5:F3:6F:DD:6D:7C:A3:5B:11:8C:2A:4F:2E
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/aRRMx2LpXrXzb91tfKNbEYwqTy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:a1:2d:01:7b:97:2d:0b:5f:ee:1a:4f:d9:4e:0e:92:35:55:
f1:a8:df:34:e2:a0:8a:d6:36:3a:af:60:41:81:1b:be:a4:e2:
e2:25:6e:b9:59:19:b7:41:22:82:1a:ff:03:e7:55:67:ef:92:
28:27:02:3a:f1:c3:5b:e6:48:c0:3e:d0:8b:21:f9:f7:2e:7f:
15:3c:71:d5:d9:19:d5:9a:52:18:78:87:af:7f:b3:7e:8b:9e:
7b:26:af:08:35:36:84:4e:e9:c1:b3:d4:cd:bd:cc:37:b2:3b:
80:89:42:13:9b:4d:4f:62:d2:6e:3c:87:6c:aa:5c:56:c9:00:
41:6e:9c:69:02:ac:e8:45:3a:09:b3:1d:5d:10:9f:b9:7b:41:
64:f0:79:38:a0:6a:b8:b4:c3:83:be:74:20:65:f4:54:4c:f2:
08:2f:88:68:65:48:b8:16:6a:bf:97:ae:ee:41:3a:dc:18:db:
e3:1f:7f:83:cd:fe:13:c6:f4:34:b5:0a:3a:8c:9c:0a:84:47:
3b:83:a4:a7:93:3c:6b:bb:8f:a6:af:ad:db:22:75:27:c7:29:
86:4b:0e:23:6f:19:9b:06:67:50:be:9c:39:4d:16:a1:17:04:
b1:98:7e:27:72:f1:b2:74:4c:7d:ed:05:77:0f:cb:36:26:cd:
5c:25:3c:69
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQjaN+MEsEfIc/BtYm6v6vDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MGViZDA0NjlhNWM2OWMxMDk4OTcxY2FhYjM2ZmUwMzJl
Y2UzMTEwHhcNMjUwMTAxMTk0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTE0NGNjNzYyZTk1ZWI1ZjM2ZmRkNmQ3Y2EzNWIxMThjMmE0ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pbbyZZKtBhn0cBmNTJr4ddZZ+JZ
6nUHGGrNdfpnnu+5lix4JuV1higWnXcGsMjdtT+WwB3duRpSOA1fTgZep7uBaaYj
hBUDBJrxmIQrlddfXPPOyng7v4+AZy8rJRpFZagJDbSNS3F917jylbntRLsYSGWe
zORrYGJ4fkbWRCxoUUL+Wc3bX+5ykPbaFFrlaKUo6O9qSwkZ95ihhdmTIyLU2rI6
xcrnIWOO0v2FdD5ESwL6U4BsSxmzh9AYHEeBXtBtIgDf0luVZemonEzJPZOyKviu
N/nTgiXxJ8GA0kVkgo/ojAV0nm+OAJ+063WPdMhhAbS+JFZxsaec/D5u3wIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFGkUTMdi6V6182/dbXyjWxGMKk8uMB8GA1UdIwQY
MBaAFJcOvQRppcacEJiXHKqzb+Ay7OMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQt
OTE0YjRiMzRmOTgxLzEvYVJSTXgyTHBYclh6YjkxdGZLTmJFWXdxVHk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQtOTE0YjRiMzRmOTgx
LzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlZ0wDQYJ
KoZIhvcNAQELBQADggEBAC2hLQF7ly0LX+4aT9lODpI1VfGo3zTioIrWNjqvYEGB
G76k4uIlbrlZGbdBIoIa/wPnVWfvkignAjrxw1vmSMA+0Ish+fcufxU8cdXZGdWa
Uhh4h69/s36Lnnsmrwg1NoRO6cGz1M29zDeyO4CJQhObTU9i0m48h2yqXFbJAEFu
nGkCrOhFOgmzHV0Qn7l7QWTweTigari0w4O+dCBl9FRM8ggviGhlSLgWar+Xru5B
OtwY2+Mff4PN/hPG9DS1CjqMnAqERzuDpKeTPGu7j6avrdsidSfHKYZLDiNvGZsG
Z1C+nDlNFqEXBLGYfidy8bJ0TH3tBXcPyzYmzVwlPGk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:33:36 2025 by rpki-client