Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/509i7q99VV6jt4ndkd6v3yERltw.roa
File: 509i7q99VV6jt4ndkd6v3yERltw.roa (raw, json)
Hash identifier: g7P57NWMbrCtdFNQP+D3i8F0Apoplsinge/ip5B3+YY=
Subject key identifier: E7:4F:62:EE:AF:7D:55:5E:A3:B7:89:DD:91:DE:AF:DF:21:11:96:DC
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 019424B3EEDA822E5EB82718219B2DD7FBFB
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/509i7q99VV6jt4ndkd6v3yERltw.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2001:67c:2ccc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ee:da:82:2e:5e:b8:27:18:21:9b:2d:d7:fb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e74f62eeaf7d555ea3b789dd91deafdf211196dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:31:49:96:0d:04:c6:b6:7b:be:00:35:31:
ed:94:2b:84:15:05:b6:2d:e6:83:01:44:f3:42:fe:
7b:6f:f0:c8:47:84:e1:94:74:11:92:a7:5c:77:e8:
42:6b:ea:66:e3:9a:21:7e:92:61:29:d6:99:9f:06:
03:de:39:e2:10:f5:2e:d4:d7:ae:ac:fe:60:23:0c:
64:28:84:b8:24:08:56:c9:7d:73:af:81:64:d4:36:
e9:a5:84:15:75:73:74:3c:3e:7d:89:b5:04:c6:ce:
01:12:3c:c7:42:f5:fe:19:2e:d9:ff:35:22:c1:57:
05:44:78:d5:cb:e8:56:57:fc:4e:c1:04:5e:c4:a1:
24:fa:cd:de:25:51:87:0b:e0:9f:3c:21:eb:ce:d7:
ac:19:08:95:83:1d:1c:57:fd:d8:c2:ab:e2:3f:77:
e9:92:a8:5d:4f:f8:b2:0e:17:7b:1c:bd:3c:29:ae:
d6:d4:f4:49:0d:59:82:80:75:e2:6f:cb:ba:a2:e6:
ba:c5:66:f1:73:73:3f:69:99:09:92:fa:50:91:9f:
63:db:9b:b6:e1:ec:35:a7:4a:79:d7:75:07:59:7a:
81:b3:e6:9f:22:93:af:7f:3e:b5:af:7c:07:f9:76:
10:b4:e9:fe:4d:fb:f7:5b:64:2a:70:2f:69:87:98:
e6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:62:EE:AF:7D:55:5E:A3:B7:89:DD:91:DE:AF:DF:21:11:96:DC
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/509i7q99VV6jt4ndkd6v3yERltw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ccc::/48
Signature Algorithm: sha256WithRSAEncryption
8a:90:8c:44:c8:ec:80:1f:f9:08:64:c2:9e:f0:ee:58:51:f0:
20:b4:95:3c:ce:3d:99:47:b1:d5:94:91:54:ad:00:cb:88:ee:
e8:72:4e:1f:5e:9c:ef:59:fb:74:a4:70:a1:31:8a:b0:58:fa:
27:4b:05:d8:7c:15:9a:ba:78:a5:6c:f9:54:6c:e5:df:11:09:
8d:41:57:fa:44:c8:5c:30:24:5f:24:d4:cb:72:c1:ed:86:b8:
b6:4c:eb:66:56:20:14:3d:18:79:fe:8a:4e:7b:6f:b2:04:08:
fb:49:15:62:6b:0f:e3:b7:b8:e6:49:96:12:72:65:00:dc:a8:
ec:f4:a4:8e:30:50:f8:a0:7a:e1:11:cc:89:14:e6:f4:ee:03:
d2:79:37:8b:46:07:0a:91:b1:bd:7c:68:78:c0:4a:25:82:2a:
36:11:bd:51:ac:bc:be:a5:a5:8f:44:61:0d:cf:0a:dd:e8:93:
99:da:e2:c6:5c:37:13:bb:ab:6c:84:d5:25:11:61:db:78:04:
58:d1:ea:ca:28:42:ca:44:cd:6d:88:31:aa:ec:f1:01:11:e3:
eb:15:7f:5a:3a:97:99:f4:95:e8:b5:89:58:a7:38:3b:db:2e:
f3:85:c0:87:0e:65:72:b7:92:3b:85:79:67:30:44:40:b0:4e:
42:69:b1:42
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQks+7agi5euCcYIZst1/v7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTZhYzI4Zjk1NGUxM2RjYjdkYjY5YmMyMjJiNzg1YjRk
NzVmMmMwHhcNMjUwMTAyMDE0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzRmNjJlZWFmN2Q1NTVlYTNiNzg5ZGQ5MWRlYWZkZjIxMTE5NmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxAxSZYNBMa2e74ANTHtlCuEFQW2
LeaDAUTzQv57b/DIR4ThlHQRkqdcd+hCa+pm45ohfpJhKdaZnwYD3jniEPUu1Neu
rP5gIwxkKIS4JAhWyX1zr4Fk1DbppYQVdXN0PD59ibUExs4BEjzHQvX+GS7Z/zUi
wVcFRHjVy+hWV/xOwQRexKEk+s3eJVGHC+CfPCHrztesGQiVgx0cV/3YwqviP3fp
kqhdT/iyDhd7HL08Ka7W1PRJDVmCgHXib8u6oua6xWbxc3M/aZkJkvpQkZ9j25u2
4ew1p0p513UHWXqBs+afIpOvfz61r3wH+XYQtOn+Tfv3W2QqcC9ph5jmKwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOdPYu6vfVVeo7eJ3ZHer98hEZbcMB8GA1UdIwQY
MBaAFL3mrCj5VOE9y322m8Iit4W0118sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEt
Y2FlNmM3MjVkOTJmLzEvNTA5aTdxOTlWVjZqdDRuZGtkNnYzeUVSbHR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEtY2FlNmM3MjVkOTJm
LzEvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCzM
MA0GCSqGSIb3DQEBCwUAA4IBAQCKkIxEyOyAH/kIZMKe8O5YUfAgtJU8zj2ZR7HV
lJFUrQDLiO7ock4fXpzvWft0pHChMYqwWPonSwXYfBWaunilbPlUbOXfEQmNQVf6
RMhcMCRfJNTLcsHthri2TOtmViAUPRh5/opOe2+yBAj7SRViaw/jt7jmSZYScmUA
3Kjs9KSOMFD4oHrhEcyJFOb07gPSeTeLRgcKkbG9fGh4wEolgio2Eb1RrLy+paWP
RGENzwrd6JOZ2uLGXDcTu6tshNUlEWHbeARY0erKKELKRM1tiDGq7PEBEePrFX9a
OpeZ9JXotYlYpzg72y7zhcCHDmVyt5I7hXlnMERAsE5CabFC
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:14 2025 by rpki-client