Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/63R1CqkRJzCBTqXm_kqr_6UGOC4.roa
File: 63R1CqkRJzCBTqXm_kqr_6UGOC4.roa (raw, json)
Hash identifier: QovmpL/thOh4yKhjTn4FNfnRr6OXEgupogya3Oy9KUE=
Subject key identifier: EB:74:75:0A:A9:11:27:30:81:4E:A5:E6:FE:4A:AB:FF:A5:06:38:2E
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 0194274753E15D4DAB2222E3E3D332490A7E
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/63R1CqkRJzCBTqXm_kqr_6UGOC4.roa
Signing time: Thu 02 Jan 2025 13:49:33 +0000
ROA not before: Thu 02 Jan 2025 13:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 37.143.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:53:e1:5d:4d:ab:22:22:e3:e3:d3:32:49:0a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jan 2 13:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb74750aa9112730814ea5e6fe4aabffa506382e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:d6:cd:24:7f:25:3d:b5:ad:89:23:d5:3f:
9b:b8:cb:8f:b8:3a:cf:9f:22:af:d5:97:0f:8f:b5:
b0:89:b5:b7:c3:7d:57:cc:ca:7d:6d:0a:17:57:34:
06:8b:05:0d:02:d3:eb:1d:d2:5b:67:4b:e2:40:54:
d2:5a:a6:28:16:dc:5c:d1:5a:99:e6:c1:ea:fa:d0:
eb:8f:a6:90:fc:4d:9b:7a:4d:72:e7:a9:ca:8d:31:
a7:6e:d5:75:28:fc:55:85:7a:16:d5:2f:3a:e7:6a:
bd:3a:27:4d:14:d8:48:11:c0:c0:d2:68:5b:2d:a9:
8c:46:5d:cd:2b:8e:72:fb:5d:b2:ec:65:32:60:a4:
a8:99:0b:76:10:0b:8e:d6:02:d1:b9:c0:f8:53:b2:
69:7d:92:c4:ad:57:f0:f0:fd:33:91:f1:f6:f0:31:
5b:71:97:cc:ac:23:bc:18:d2:1c:03:91:3f:4f:67:
7d:74:92:68:0b:b5:33:6c:c1:88:f3:3b:7f:8c:ab:
5e:55:b7:5e:78:c1:95:77:b8:24:dc:8a:48:4b:d1:
e8:be:d5:f3:4c:02:8d:cf:21:a0:b7:e4:0d:35:75:
0b:27:89:b0:1f:7f:69:84:d7:ae:4a:52:8f:6c:72:
21:75:b2:1d:2a:b8:2b:28:3a:9e:47:1e:78:a0:9e:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:75:0A:A9:11:27:30:81:4E:A5:E6:FE:4A:AB:FF:A5:06:38:2E
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/63R1CqkRJzCBTqXm_kqr_6UGOC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
11:87:2c:ab:ad:ce:2f:6e:6d:b7:69:5f:83:2e:76:4d:f8:46:
bb:14:0a:46:4d:eb:82:43:65:d3:bf:8b:78:a4:f2:6e:f4:10:
f8:0e:31:87:86:15:4e:63:fe:02:50:0f:00:17:de:bd:79:22:
87:b5:fc:ea:05:94:9d:ee:36:58:de:17:ff:40:39:08:78:4d:
36:80:b3:46:f3:48:35:1f:c2:b8:f3:6e:c9:7d:ec:b8:ac:7c:
72:39:2f:84:54:b7:fc:1a:5c:66:7a:02:9e:0a:2d:93:ae:d4:
81:cc:dd:95:c4:9c:5d:03:b4:18:9a:85:ed:65:2e:8e:66:0d:
80:52:d3:7e:85:1e:67:ca:2b:a7:47:97:dc:bf:bc:6c:8b:50:
75:60:44:ae:b2:32:9c:bb:84:76:2b:e8:c7:a4:ec:67:fa:d2:
81:44:59:02:00:ac:1f:ff:9d:f7:bf:3e:79:6d:d8:cd:48:2d:
90:e1:58:10:fb:a8:a4:aa:f7:cb:da:ce:9a:7a:72:00:ac:33:
c0:9d:c3:de:75:dc:fd:4a:ea:b6:e4:81:67:3d:b7:c4:73:84:
73:ad:42:26:6d:c0:a5:e1:56:b1:71:e1:e4:be:2c:7a:9e:20:
51:8b:40:ba:6e:32:f7:a6:01:94:92:8e:cf:91:06:5b:b5:5d:
03:0a:ab:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR1PhXU2rIiLj49MySQp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh
M2Q0YjUwHhcNMjUwMTAyMTM0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjc0NzUwYWE5MTEyNzMwODE0ZWE1ZTZmZTRhYWJmZmE1MDYzODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCTWzSR/JT21rYkj1T+buMuPuDrP
nyKv1ZcPj7WwibW3w31XzMp9bQoXVzQGiwUNAtPrHdJbZ0viQFTSWqYoFtxc0VqZ
5sHq+tDrj6aQ/E2bek1y56nKjTGnbtV1KPxVhXoW1S8652q9OidNFNhIEcDA0mhb
LamMRl3NK45y+12y7GUyYKSomQt2EAuO1gLRucD4U7JpfZLErVfw8P0zkfH28DFb
cZfMrCO8GNIcA5E/T2d9dJJoC7UzbMGI8zt/jKteVbdeeMGVd7gk3IpIS9HovtXz
TAKNzyGgt+QNNXULJ4mwH39phNeuSlKPbHIhdbIdKrgrKDqeRx54oJ4NRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOt0dQqpEScwgU6l5v5Kq/+lBjguMB8GA1UdIwQY
MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt
MmUxYzBhZjRmYWE0LzEvNjNSMUNxa1JKekNCVHFYbV9rcXJfNlVHT0M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0
LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8AMA0G
CSqGSIb3DQEBCwUAA4IBAQARhyyrrc4vbm23aV+DLnZN+Ea7FApGTeuCQ2XTv4t4
pPJu9BD4DjGHhhVOY/4CUA8AF969eSKHtfzqBZSd7jZY3hf/QDkIeE02gLNG80g1
H8K4827Jfey4rHxyOS+EVLf8GlxmegKeCi2TrtSBzN2VxJxdA7QYmoXtZS6OZg2A
UtN+hR5nyiunR5fcv7xsi1B1YESusjKcu4R2K+jHpOxn+tKBRFkCAKwf/533vz55
bdjNSC2Q4VgQ+6ikqvfL2s6aenIArDPAncPeddz9Suq25IFnPbfEc4RzrUImbcCl
4VaxceHkvix6niBRi0C6bjL3pgGUko7PkQZbtV0DCqt/
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:55 2025 by rpki-client