Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/emtcqtK2GMFCJvDwdUlQ2vTvmJ4.roa
File: emtcqtK2GMFCJvDwdUlQ2vTvmJ4.roa (raw, json)
Hash identifier: MGI6nqZElzquCZDFYtpLzQpeiVV6b7oAzJY8DVMAi04=
Subject key identifier: 7A:6B:5C:AA:D2:B6:18:C1:42:26:F0:F0:75:49:50:DA:F4:EF:98:9E
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7B6B91FBB3EAFF10EF535C2D1E64
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/emtcqtK2GMFCJvDwdUlQ2vTvmJ4.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206058
IP address blocks: 2a01:e901:10d::/48 maxlen: 48
2a01:e901:11d::/48 maxlen: 48
2a01:e901:12d::/48 maxlen: 48
2a01:e901:13d::/48 maxlen: 48
2a01:e901:14d::/48 maxlen: 48
2a01:e901:15d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7b:6b:91:fb:b3:ea:ff:10:ef:53:5c:2d:1e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a6b5caad2b618c14226f0f0754950daf4ef989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:0d:2b:f0:cc:48:54:09:f6:a5:29:81:a9:
3a:97:5a:4f:da:41:a9:00:ca:c3:5f:b4:1f:fd:ee:
36:83:01:85:11:72:ae:3e:dd:90:cc:83:6d:b0:a7:
a4:31:3f:9e:70:55:b5:c6:35:53:c6:13:cb:89:96:
a0:51:4d:f3:c2:c8:b3:a6:41:44:e8:36:03:72:00:
3f:a5:ce:df:5d:75:6f:b0:5e:1d:2d:e1:4a:2e:8a:
49:10:5a:bb:cd:fa:f8:a1:53:16:fa:1e:60:51:44:
01:4e:dc:77:ba:46:39:86:33:39:1b:c0:68:c4:9f:
f4:ae:98:d7:6a:4a:c0:8e:bc:74:4d:d1:a8:be:1f:
c7:d9:59:60:71:47:07:c9:a1:64:05:a8:33:79:01:
70:ce:1d:d5:5a:7a:b7:46:4f:3d:8e:68:53:51:f5:
72:8e:e3:13:83:34:51:26:18:36:b5:40:ae:2a:c6:
31:ce:82:af:66:82:7b:f4:35:80:42:67:b7:1d:62:
e5:f5:7c:a7:f8:fe:31:7e:8c:93:93:83:6e:b5:f9:
9d:2d:6a:1b:b9:b6:e5:fb:b6:c6:31:ea:95:d8:38:
84:96:41:44:17:63:22:95:e8:a9:38:5f:f2:9b:3c:
d3:fd:16:9a:58:c9:77:86:6f:02:aa:6a:b1:8f:f5:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6B:5C:AA:D2:B6:18:C1:42:26:F0:F0:75:49:50:DA:F4:EF:98:9E
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/emtcqtK2GMFCJvDwdUlQ2vTvmJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e901:10d::/48
2a01:e901:11d::/48
2a01:e901:12d::/48
2a01:e901:13d::/48
2a01:e901:14d::/48
2a01:e901:15d::/48
Signature Algorithm: sha256WithRSAEncryption
82:f4:71:1d:b9:f4:05:f3:a2:75:1c:8d:cb:b1:b9:6a:eb:7f:
f7:11:86:74:18:eb:c1:64:f5:de:15:e7:52:2a:12:70:6e:79:
0b:9c:92:83:59:43:9d:1e:03:22:67:53:76:ed:26:63:b0:6b:
5e:74:9c:4e:62:ae:c8:63:85:63:94:5f:be:15:ca:52:75:49:
56:4e:1a:4a:c6:19:5f:2d:f3:b3:74:0d:43:3a:b2:62:88:e3:
54:13:7a:9b:49:7a:9d:e0:cb:13:c6:21:59:f2:cd:bc:fd:b1:
a7:a6:c7:f0:79:7e:1b:ab:e0:5a:4c:d2:37:ec:3a:55:57:04:
ee:41:ea:26:dc:54:49:3d:0c:52:f5:59:2a:50:f4:18:5d:be:
87:86:7f:f7:e0:74:cd:77:ea:2e:77:6d:f8:be:3d:12:06:95:
0a:28:35:98:13:49:99:f3:fb:68:fc:d1:79:77:ef:b4:99:5c:
99:22:d1:6f:a4:ba:70:f5:0e:2b:98:cb:7a:ed:60:8a:78:84:
fe:da:3d:90:dc:b9:46:bf:34:32:4f:f3:03:4d:81:88:de:33:
74:36:10:32:aa:d8:21:6d:c1:9c:55:80:2e:a4:42:9d:0f:a8:
ba:de:18:f7:e8:4d:a8:23:d3:0e:69:ec:bb:97:2f:c7:a4:b4:
ea:6a:cb:49
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQiH3trkfuz6v8Q71NcLR5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi
NzgzYzIwHhcNMjUwMTAxMTM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTZiNWNhYWQyYjYxOGMxNDIyNmYwZjA3NTQ5NTBkYWY0ZWY5ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XINK/DMSFQJ9qUpgak6l1pP2kGp
AMrDX7Qf/e42gwGFEXKuPt2QzINtsKekMT+ecFW1xjVTxhPLiZagUU3zwsizpkFE
6DYDcgA/pc7fXXVvsF4dLeFKLopJEFq7zfr4oVMW+h5gUUQBTtx3ukY5hjM5G8Bo
xJ/0rpjXakrAjrx0TdGovh/H2VlgcUcHyaFkBagzeQFwzh3VWnq3Rk89jmhTUfVy
juMTgzRRJhg2tUCuKsYxzoKvZoJ79DWAQme3HWLl9Xyn+P4xfoyTk4NutfmdLWob
ubbl+7bGMeqV2DiElkFEF2MileipOF/ymzzT/RaaWMl3hm8Cqmqxj/XpVwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHprXKrSthjBQibw8HVJUNr075ieMB8GA1UdIwQY
MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt
NDRmOGVkNWQ2MWQ3LzEvZW10Y3F0SzJHTUZDSnZEd2RVbFEydlR2bUo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3
LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEN
AwcAKgHpAQEdAwcAKgHpAQEtAwcAKgHpAQE9AwcAKgHpAQFNAwcAKgHpAQFdMA0G
CSqGSIb3DQEBCwUAA4IBAQCC9HEdufQF86J1HI3Lsblq63/3EYZ0GOvBZPXeFedS
KhJwbnkLnJKDWUOdHgMiZ1N27SZjsGtedJxOYq7IY4VjlF++FcpSdUlWThpKxhlf
LfOzdA1DOrJiiONUE3qbSXqd4MsTxiFZ8s28/bGnpsfweX4bq+BaTNI37DpVVwTu
Qeom3FRJPQxS9VkqUPQYXb6Hhn/34HTNd+oud234vj0SBpUKKDWYE0mZ8/to/NF5
d++0mVyZItFvpLpw9Q4rmMt67WCKeIT+2j2Q3LlGvzQyT/MDTYGI3jN0NhAyqtgh
bcGcVYAupEKdD6i63hj36E2oI9MOaey7ly/HpLTqastJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:48 2025 by rpki-client