Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uv5fMk7YL2464NSRk84doTRi5EI.roa
File: uv5fMk7YL2464NSRk84doTRi5EI.roa (raw, json)
Hash identifier: Og6otJEJqNvfQK2C79cyvpn5bZk23Dc5fHResU/YS/Y=
Subject key identifier: BA:FE:5F:32:4E:D8:2F:6E:3A:E0:D4:91:93:CE:1D:A1:34:62:E4:42
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B250CB2C2C781CA5577228555CB4D2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uv5fMk7YL2464NSRk84doTRi5EI.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216157
IP address blocks: 2a0f:5ec0::/29 maxlen: 32
2a0f:7fc0::/29 maxlen: 32
2a0f:edc0::/29 maxlen: 32
2a0f:fb40::/29 maxlen: 32
2a11:6600::/29 maxlen: 32
2a11:6c00::/29 maxlen: 32
2a11:d400::/29 maxlen: 32
2a11:f080::/29 maxlen: 32
2a12:3c80::/29 maxlen: 32
2a12:e4c0::/29 maxlen: 32
2a13:3a80::/29 maxlen: 32
2a13:3e80::/29 maxlen: 32
2a13:4680::/29 maxlen: 32
2a13:64c0::/29 maxlen: 32
2a13:6540::/29 maxlen: 32
2a13:6840::/29 maxlen: 32
2a13:68c0::/29 maxlen: 32
2a13:69c0::/29 maxlen: 32
2a13:6a40::/29 maxlen: 32
2a13:6ac0::/29 maxlen: 32
2a13:6bc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:50:cb:2c:2c:78:1c:a5:57:72:28:55:5c:b4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bafe5f324ed82f6e3ae0d49193ce1da13462e442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:55:0f:b9:06:18:b6:41:d6:6f:c7:b8:bf:
d5:c4:d8:4c:2e:79:5e:c5:2e:04:ed:b1:a5:ee:0a:
3a:3e:e9:4d:23:dc:3b:ee:d4:c3:fe:bf:7c:ca:52:
cc:e6:ec:87:2b:15:75:b9:97:0c:2e:b8:cc:7b:92:
12:3c:f2:d5:82:f3:67:ed:7a:39:de:2b:ac:c9:13:
05:86:8f:ee:81:10:f8:60:a1:3e:8c:11:b4:02:69:
06:93:a7:ff:97:e3:73:06:3a:1e:94:04:1a:89:1a:
c3:ac:c6:b8:ef:6a:46:87:40:92:61:42:01:c2:21:
c7:52:27:ec:c6:52:fc:8c:d6:bd:fd:1c:f3:f9:f2:
24:41:56:24:5e:fc:26:8e:b5:30:9d:3a:e0:c4:01:
fd:38:68:d1:c7:51:e8:3a:4f:d0:ef:c0:59:d4:55:
02:ea:a8:2c:5a:cf:28:8c:22:8f:b3:eb:b2:96:5e:
af:6b:ca:1a:94:88:2e:c0:66:a7:e8:4c:03:a4:91:
a8:ba:84:d7:62:e0:00:cd:a7:4b:5c:4b:23:1f:e4:
87:22:0d:91:51:4e:64:e3:ca:18:f1:d1:90:2b:2b:
ff:57:8d:2e:cd:35:17:ea:0c:61:8d:35:7a:3c:72:
98:52:ac:bc:a9:c6:51:25:c3:66:08:11:d2:c6:72:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:5F:32:4E:D8:2F:6E:3A:E0:D4:91:93:CE:1D:A1:34:62:E4:42
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/uv5fMk7YL2464NSRk84doTRi5EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5ec0::/29
2a0f:7fc0::/29
2a0f:edc0::/29
2a0f:fb40::/29
2a11:6600::/29
2a11:6c00::/29
2a11:d400::/29
2a11:f080::/29
2a12:3c80::/29
2a12:e4c0::/29
2a13:3a80::/29
2a13:3e80::/29
2a13:4680::/29
2a13:64c0::/29
2a13:6540::/29
2a13:6840::/29
2a13:68c0::/29
2a13:69c0::/29
2a13:6a40::/29
2a13:6ac0::/29
2a13:6bc0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:3e:4f:46:44:20:67:07:a7:e5:83:42:2a:d5:b7:00:3a:2c:
28:5d:42:c4:46:7a:1b:9d:c6:e0:1f:58:47:fb:9e:1c:54:82:
78:91:f0:2b:4d:2f:02:18:ae:e8:ec:b0:35:34:c1:25:57:06:
4d:ed:b7:86:7c:97:b9:e2:5f:66:db:e4:95:cd:1f:2d:cf:d8:
0c:72:01:28:14:e8:3c:3d:81:e5:ca:90:0a:ac:33:41:8b:f3:
bb:85:1f:e7:47:ff:cb:99:fc:95:9b:96:69:4c:f4:57:38:6d:
bc:cb:26:b4:d8:5d:5d:69:f8:0d:c0:b2:2f:c3:eb:6c:58:c4:
c0:8d:22:e5:f4:15:97:c4:5d:3f:3b:4f:b5:6b:47:ba:66:e5:
28:ec:6c:23:5a:59:61:18:27:71:dc:34:dc:12:9e:7f:f8:bf:
a6:16:91:a1:2a:57:78:1c:e8:f1:42:f5:c5:da:52:03:5a:3e:
c9:a3:b3:f5:2d:cb:1d:e2:89:56:55:30:61:b1:19:a7:a6:e1:
34:b9:b7:0c:d0:7a:4b:47:02:b0:a8:ea:41:1f:9a:ba:db:bf:
4a:46:6a:fc:48:af:36:d1:c1:83:5b:b9:9b:4b:d1:a4:47:a2:
b5:fb:44:c6:a6:e3:4c:95:8b:1f:b1:c3:d4:8c:5f:7e:6b:9c:
7d:e9:7f:61
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZQhslDLLCx4HKVXcihVXLTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwMTAxMTE0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWZlNWYzMjRlZDgyZjZlM2FlMGQ0OTE5M2NlMWRhMTM0NjJlNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSJVD7kGGLZB1m/HuL/VxNhMLnle
xS4E7bGl7go6PulNI9w77tTD/r98ylLM5uyHKxV1uZcMLrjMe5ISPPLVgvNn7Xo5
3iusyRMFho/ugRD4YKE+jBG0AmkGk6f/l+NzBjoelAQaiRrDrMa472pGh0CSYUIB
wiHHUifsxlL8jNa9/Rzz+fIkQVYkXvwmjrUwnTrgxAH9OGjRx1HoOk/Q78BZ1FUC
6qgsWs8ojCKPs+uyll6va8oalIguwGan6EwDpJGouoTXYuAAzadLXEsjH+SHIg2R
UU5k48oY8dGQKyv/V40uzTUX6gxhjTV6PHKYUqy8qcZRJcNmCBHSxnL1twIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFLr+XzJO2C9uOuDUkZPOHaE0YuRCMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvdXY1Zk1rN1lMMjQ2NE5TUms4NGRvVFJpNUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBmgQCAAIwgZMDBQMq
D17AAwUDKg9/wAMFAyoP7cADBQMqD/tAAwUDKhFmAAMFAyoRbAADBQMqEdQAAwUD
KhHwgAMFAyoSPIADBQMqEuTAAwUDKhM6gAMFAyoTPoADBQMqE0aAAwUDKhNkwAMF
AyoTZUADBQMqE2hAAwUDKhNowAMFAyoTacADBQMqE2pAAwUDKhNqwAMFAyoTa8Aw
DQYJKoZIhvcNAQELBQADggEBAA8+T0ZEIGcHp+WDQirVtwA6LChdQsRGehudxuAf
WEf7nhxUgniR8CtNLwIYrujssDU0wSVXBk3tt4Z8l7niX2bb5JXNHy3P2AxyASgU
6Dw9geXKkAqsM0GL87uFH+dH/8uZ/JWblmlM9Fc4bbzLJrTYXV1p+A3Asi/D62xY
xMCNIuX0FZfEXT87T7VrR7pm5SjsbCNaWWEYJ3HcNNwSnn/4v6YWkaEqV3gc6PFC
9cXaUgNaPsmjs/Utyx3iiVZVMGGxGaem4TS5twzQektHArCo6kEfmrrbv0pGavxI
rzbRwYNbuZtL0aRHorX7RMam40yVix+xw9SMX35rnH3pf2E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:36:00 2025 by rpki-client