Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jrSCFKTylF0jZ2kKyqqdWBeVkpo.roa
File: jrSCFKTylF0jZ2kKyqqdWBeVkpo.roa (raw, json)
Hash identifier: Bs1zMgK+GNXD3siqdiqWvZ+XPbWH64jqkfy3nzXLqpg=
Subject key identifier: 8E:B4:82:14:A4:F2:94:5D:23:67:69:0A:CA:AA:9D:58:17:95:92:9A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23B0E341DBEB11CB8920C311C242D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jrSCFKTylF0jZ2kKyqqdWBeVkpo.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50007
IP address blocks: 2a06:3b00::/48 maxlen: 48
2a09:1140::/48 maxlen: 48
2a09:4040::/48 maxlen: 48
2a09:40c0::/48 maxlen: 48
2a09:6a80::/48 maxlen: 48
2a09:9740::/48 maxlen: 48
2a09:98c0::/48 maxlen: 48
2a09:9940::/48 maxlen: 48
2a09:f180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3b:0e:34:1d:be:b1:1c:b8:92:0c:31:1c:24:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eb48214a4f2945d2367690acaaa9d581795929a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:7c:a1:d3:99:15:09:58:2c:62:45:b9:fb:
df:09:a2:13:e4:41:09:05:e6:ee:2a:61:24:2d:83:
1c:b9:b0:46:7d:da:15:9e:ec:e2:c0:14:b7:4a:a8:
d5:38:ff:cc:d4:ac:56:c6:f6:de:c2:79:35:d0:34:
9d:86:00:02:4a:13:d7:3a:0a:22:67:8a:40:7f:42:
bf:88:b7:94:ff:85:ee:cd:1e:f5:69:7a:dd:a7:8e:
3f:b6:3a:c3:de:76:d3:82:ce:67:ac:0f:a5:3e:7e:
21:b9:d0:fd:72:15:c5:53:bf:9f:e2:ee:20:d1:ba:
bc:60:24:08:0e:42:dd:62:13:6b:b8:c0:18:6d:12:
9a:9a:fc:d6:0c:ad:28:1e:34:dd:d1:9d:6c:b2:10:
b0:84:b0:b7:fc:2d:02:d5:dd:97:7a:7e:11:54:c4:
10:99:59:da:66:25:92:d4:25:54:73:f7:8d:ff:74:
e1:d9:b6:5c:c1:5d:ea:8b:8c:7d:08:07:29:c0:75:
86:4f:44:45:65:31:50:45:61:db:56:97:b8:00:9a:
48:f4:15:88:93:62:cf:4c:1b:06:af:0a:20:27:d2:
04:37:d3:75:e7:88:17:94:37:79:43:7d:5f:1e:d8:
9d:d1:12:92:f7:0a:2c:8c:31:ea:51:8a:99:af:44:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:82:14:A4:F2:94:5D:23:67:69:0A:CA:AA:9D:58:17:95:92:9A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jrSCFKTylF0jZ2kKyqqdWBeVkpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3b00::/48
2a09:1140::/48
2a09:4040::/48
2a09:40c0::/48
2a09:6a80::/48
2a09:9740::/48
2a09:98c0::/48
2a09:9940::/48
2a09:f180::/48
Signature Algorithm: sha256WithRSAEncryption
aa:19:29:4a:d1:45:89:6a:36:40:0e:7a:69:15:50:50:da:42:
9a:97:cc:e8:65:14:40:26:46:68:25:b5:f4:94:b5:66:b0:e7:
d0:3c:49:f3:0a:30:57:a1:62:0b:06:50:9a:4d:71:8a:ca:2c:
95:98:c5:3e:03:5e:40:db:dd:8b:64:f2:ba:4b:d0:08:95:71:
d0:4d:bb:7d:d2:ff:38:09:7b:3e:da:59:41:6a:38:cf:dd:4e:
f0:73:08:e5:ef:c7:67:d0:49:b8:cc:41:af:1f:26:f1:b9:3f:
87:9e:54:08:06:b8:a8:61:56:de:e7:19:1b:7e:bf:29:7a:bd:
fa:43:c6:c1:a9:1e:a9:a9:13:6a:74:da:1b:47:be:a6:ab:d6:
12:0b:4d:db:aa:59:ac:df:50:08:2d:40:63:ef:a6:3a:9c:09:
f1:98:9d:10:03:20:f1:40:42:4a:24:35:d9:16:dd:f6:e3:1b:
0c:5e:e7:bb:6b:91:80:5b:df:c1:19:55:c9:95:1d:e2:0e:b8:
88:2e:37:c0:ca:85:e2:29:43:bc:5b:0d:30:e2:77:60:42:73:
e6:88:57:99:df:20:ae:93:58:83:96:30:0e:df:b7:86:d9:26:
5f:ec:4a:6f:84:d2:99:ee:7b:f5:c5:5d:a5:87:48:88:72:da:
d6:ee:db:bc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZQhsjsONB2+sRy4kgwxHCQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMTAxMTE0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWI0ODIxNGE0ZjI5NDVkMjM2NzY5MGFjYWFhOWQ1ODE3OTU5MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjV8odOZFQlYLGJFufvfCaIT5EEJ
BebuKmEkLYMcubBGfdoVnuziwBS3SqjVOP/M1KxWxvbewnk10DSdhgACShPXOgoi
Z4pAf0K/iLeU/4XuzR71aXrdp44/tjrD3nbTgs5nrA+lPn4hudD9chXFU7+f4u4g
0bq8YCQIDkLdYhNruMAYbRKamvzWDK0oHjTd0Z1sshCwhLC3/C0C1d2Xen4RVMQQ
mVnaZiWS1CVUc/eN/3Th2bZcwV3qi4x9CAcpwHWGT0RFZTFQRWHbVpe4AJpI9BWI
k2LPTBsGrwogJ9IEN9N154gXlDd5Q31fHtid0RKS9wosjDHqUYqZr0S5PQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFI60ghSk8pRdI2dpCsqqnVgXlZKaMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvanJTQ0ZLVHlsRjBqWjJrS3lxcWRXQmVWa3BvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAAjBRAwcAKgY7AAAA
AwcAKgkRQAAAAwcAKglAQAAAAwcAKglAwAAAAwcAKglqgAAAAwcAKgmXQAAAAwcA
KgmYwAAAAwcAKgmZQAAAAwcAKgnxgAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCqGSlK
0UWJajZADnppFVBQ2kKal8zoZRRAJkZoJbX0lLVmsOfQPEnzCjBXoWILBlCaTXGK
yiyVmMU+A15A292LZPK6S9AIlXHQTbt90v84CXs+2llBajjP3U7wcwjl78dn0Em4
zEGvHybxuT+HnlQIBrioYVbe5xkbfr8per36Q8bBqR6pqRNqdNobR76mq9YSC03b
qlms31AILUBj76Y6nAnxmJ0QAyDxQEJKJDXZFt324xsMXue7a5GAW9/BGVXJlR3i
DriILjfAyoXiKUO8Ww0w4ndgQnPmiFeZ3yCuk1iDljAO37eG2SZf7EpvhNKZ7nv1
xV2lh0iIctrW7tu8
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:31 2025 by rpki-client