Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/0WVzWJG1rgIAV0kLDRDyeBCR_TA.roa
File: 0WVzWJG1rgIAV0kLDRDyeBCR_TA.roa (raw, json)
Hash identifier: uYyyFo7BUkZvbMkd0A2+lJFy9VE4MPkRhot0wRNavZE=
Subject key identifier: D1:65:73:58:91:B5:AE:02:00:57:49:0B:0D:10:F2:78:10:91:FD:30
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827EF8DA9D184CC7643B342722FB0A9
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/0WVzWJG1rgIAV0kLDRDyeBCR_TA.roa
Signing time: Thu 02 Jan 2025 17:54:53 +0000
ROA not before: Thu 02 Jan 2025 17:54:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 5.1.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ef:8d:a9:d1:84:cc:76:43:b3:42:72:2f:b0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d165735891b5ae020057490b0d10f2781091fd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:40:10:6a:ed:dd:cf:fe:32:fe:93:3b:95:
b3:f2:44:f0:fc:b8:d6:4f:99:f4:5b:5f:37:79:0f:
5e:c8:38:98:b3:71:40:0b:b4:ad:bf:8f:66:6c:f9:
75:79:b7:f9:0b:16:ad:b1:fb:b3:e0:ea:59:27:de:
29:d1:ce:13:9f:b1:ae:94:e9:21:ad:57:d3:81:dc:
a0:ee:5d:04:75:8d:71:7f:f5:de:87:99:f2:36:dc:
78:61:0f:9e:3f:b4:d3:68:eb:2d:66:a0:49:c8:6f:
90:0b:55:9b:31:82:dc:c3:01:8f:fc:57:2e:6a:0f:
13:38:f7:ac:79:d1:c9:28:7e:6d:4e:c9:2c:e2:93:
ab:25:e7:2f:18:71:8f:80:f5:b1:98:4e:70:c4:b4:
82:e6:c5:71:2c:0d:f4:76:39:bb:e5:49:ea:bf:af:
fc:51:bd:4f:88:a8:7a:ad:92:e7:e3:d9:46:6f:f8:
65:ae:0d:42:3f:6c:4d:98:fd:9d:52:e2:6a:14:8a:
f4:54:29:80:da:2e:03:13:4a:71:47:f3:e3:59:a4:
88:1a:a1:96:a6:1a:d3:09:ff:ad:74:69:9b:57:d3:
69:8f:d0:c8:a4:7f:42:a5:81:17:7d:2a:79:99:83:
a2:f1:7e:59:21:4b:c6:43:e6:c2:09:2b:77:3c:ff:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:65:73:58:91:B5:AE:02:00:57:49:0B:0D:10:F2:78:10:91:FD:30
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/0WVzWJG1rgIAV0kLDRDyeBCR_TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
74:27:a7:02:0e:07:4a:bf:7d:39:0e:3c:8b:88:b5:e7:16:e1:
77:d8:6c:57:3b:cc:5d:21:c8:d1:61:13:5e:24:83:0c:de:fc:
92:0b:ba:ef:0c:78:e8:45:50:fd:e6:f9:b2:05:5e:36:47:f8:
f2:04:6f:29:1c:46:d3:67:7b:b4:63:42:16:ad:17:56:c0:85:
db:6a:23:a7:ac:c7:8d:73:d5:0d:55:0b:dc:2f:6b:44:c5:bc:
d7:68:96:a7:a6:76:80:3b:77:74:8d:46:c7:6f:e5:e7:1f:ff:
62:31:f8:59:da:b3:72:27:ec:34:07:86:70:96:5a:11:49:af:
cd:6a:8d:62:19:a8:c7:b5:be:95:67:2b:12:ab:59:7b:03:79:
44:fd:14:61:4a:50:0c:13:32:1b:fc:28:fe:01:dc:5d:d1:7d:
a3:b1:49:68:fd:c0:65:de:5d:58:cc:f3:ad:d2:0b:c3:be:83:
ce:7f:ae:b2:03:7a:f3:fb:e9:6a:51:07:a3:0d:19:09:cf:3b:
8b:73:d3:6e:dd:94:b8:77:ea:f7:05:70:93:65:c2:3a:5f:27:
71:12:d1:7e:81:b2:13:14:dd:fc:37:cf:ef:31:ba:fe:9f:55:
b1:f4:00:8a:5e:50:c2:4e:47:51:dd:70:d5:38:6b:cc:b2:92:
ae:fa:1b:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ++NqdGEzHZDs0JyL7CpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwMTAyMTc1NDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTY1NzM1ODkxYjVhZTAyMDA1NzQ5MGIwZDEwZjI3ODEwOTFmZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXZAEGrt3c/+Mv6TO5Wz8kTw/LjW
T5n0W183eQ9eyDiYs3FAC7Stv49mbPl1ebf5Cxatsfuz4OpZJ94p0c4Tn7GulOkh
rVfTgdyg7l0EdY1xf/Xeh5nyNtx4YQ+eP7TTaOstZqBJyG+QC1WbMYLcwwGP/Fcu
ag8TOPesedHJKH5tTsks4pOrJecvGHGPgPWxmE5wxLSC5sVxLA30djm75Unqv6/8
Ub1PiKh6rZLn49lGb/hlrg1CP2xNmP2dUuJqFIr0VCmA2i4DE0pxR/PjWaSIGqGW
phrTCf+tdGmbV9Npj9DIpH9CpYEXfSp5mYOi8X5ZIUvGQ+bCCSt3PP9A1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNFlc1iRta4CAFdJCw0Q8ngQkf0wMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvMFdWeldKRzFyZ0lBVjBrTERSRHllQkNSX1RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQEoMA0G
CSqGSIb3DQEBCwUAA4IBAQB0J6cCDgdKv305DjyLiLXnFuF32GxXO8xdIcjRYRNe
JIMM3vySC7rvDHjoRVD95vmyBV42R/jyBG8pHEbTZ3u0Y0IWrRdWwIXbaiOnrMeN
c9UNVQvcL2tExbzXaJanpnaAO3d0jUbHb+XnH/9iMfhZ2rNyJ+w0B4ZwlloRSa/N
ao1iGajHtb6VZysSq1l7A3lE/RRhSlAMEzIb/Cj+Adxd0X2jsUlo/cBl3l1YzPOt
0gvDvoPOf66yA3rz++lqUQejDRkJzzuLc9Nu3ZS4d+r3BXCTZcI6XydxEtF+gbIT
FN38N8/vMbr+n1Wx9ACKXlDCTkdR3XDVOGvMspKu+huH
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:01 2025 by rpki-client