Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/UfQPCCjVZ9who8V_2ydTobai7pY.roa
File: UfQPCCjVZ9who8V_2ydTobai7pY.roa (raw, json)
Hash identifier: IBJI/ZiBDqZiCgT1tzzy136SyaAPb6KafOn0fl7ud1w=
Subject key identifier: 51:F4:0F:08:28:D5:67:DC:21:A3:C5:7F:DB:27:53:A1:B6:A2:EE:96
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 0194258E3ED2E724A33EFCA81D6898973A24
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/UfQPCCjVZ9who8V_2ydTobai7pY.roa
Signing time: Thu 02 Jan 2025 05:47:46 +0000
ROA not before: Thu 02 Jan 2025 05:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 2a14:4b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:3e:d2:e7:24:a3:3e:fc:a8:1d:68:98:97:3a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Jan 2 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51f40f0828d567dc21a3c57fdb2753a1b6a2ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:bc:6d:21:1f:77:04:f2:d5:d6:30:8a:21:
14:ee:50:16:d4:4a:50:6b:06:47:51:77:b0:52:f3:
77:de:82:80:96:4e:2b:41:29:65:f3:12:b6:91:26:
66:71:9f:e9:67:81:0d:ef:8e:b5:df:00:d7:30:f9:
64:3e:20:db:1b:36:2e:09:fd:67:0d:72:26:88:a2:
83:d6:e9:7d:13:1e:2b:1d:ac:30:95:d4:7b:04:a2:
8a:c1:13:4b:28:e5:5a:b4:88:9b:81:73:ac:8c:48:
10:ab:3a:ae:bc:97:21:10:e8:a2:ba:b4:92:c9:46:
77:f8:e8:99:6f:41:d9:55:bc:6f:5e:bb:2e:2d:74:
88:85:f2:d1:15:d7:46:6a:82:7f:25:e7:b9:ea:95:
b4:d4:be:eb:c7:f6:16:2a:fc:3d:f4:0d:c7:df:8e:
39:75:14:25:bd:0c:d8:31:7b:c5:d0:7e:5e:43:4b:
24:fc:aa:56:a2:7c:cc:5a:db:d7:ac:af:6b:d9:55:
4d:23:10:87:41:02:c1:67:0b:27:27:48:bf:05:8d:
95:39:0a:7e:d2:b8:d1:65:d2:35:19:4a:76:73:da:
b5:77:92:cc:b0:5e:44:ea:98:7a:18:6c:d4:e4:3a:
86:a6:93:67:03:91:f0:42:cb:b5:8a:1e:db:e6:3a:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F4:0F:08:28:D5:67:DC:21:A3:C5:7F:DB:27:53:A1:B6:A2:EE:96
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/UfQPCCjVZ9who8V_2ydTobai7pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
53:f6:43:94:87:12:b4:39:b7:b1:86:1d:ea:a4:12:a2:93:a5:
0c:57:e8:ef:05:cc:9e:c7:65:0d:fd:a7:20:17:c5:b8:36:3a:
b8:b0:cf:6a:22:a4:e0:73:51:88:e2:72:9c:51:c7:8f:36:be:
c1:45:3a:ae:95:64:0a:9e:b8:e0:3c:fb:1d:e9:e2:6f:e1:0f:
cd:d0:02:8f:28:77:6f:b0:df:01:cd:63:08:74:1e:ff:65:cb:
c4:46:40:0f:30:ad:6d:4a:84:69:48:7b:ad:20:f0:f3:c5:31:
b6:df:cb:da:14:3b:34:a0:a3:76:a8:b4:2d:ae:73:7f:f8:6a:
2c:cb:53:aa:b9:e1:fa:f5:93:b3:b5:a5:33:4a:ae:f7:ef:3c:
3e:63:41:4b:ef:9d:6a:e1:74:95:ad:5b:a4:1d:08:e0:d7:26:
69:62:de:b8:79:54:91:66:ab:42:82:79:4c:d2:90:07:34:02:
ed:2a:b0:81:a5:18:93:ec:1d:41:40:80:83:73:2d:1d:86:4e:
e0:f6:c1:4d:6e:e8:dc:29:1f:d0:8c:06:4a:78:e8:a4:7f:18:
7b:8f:ed:94:95:4a:9c:b7:da:9c:0f:66:7d:60:a4:a4:ef:9b:
2c:65:14:bb:40:35:c7:71:0e:93:ef:55:2c:13:42:65:ba:e8:
70:0a:8d:5a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQljj7S5ySjPvyoHWiYlzokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4
ZTYxZTUwHhcNMjUwMTAyMDU0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWY0MGYwODI4ZDU2N2RjMjFhM2M1N2ZkYjI3NTNhMWI2YTJlZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYe8bSEfdwTy1dYwiiEU7lAW1EpQ
awZHUXewUvN33oKAlk4rQSll8xK2kSZmcZ/pZ4EN74613wDXMPlkPiDbGzYuCf1n
DXImiKKD1ul9Ex4rHawwldR7BKKKwRNLKOVatIibgXOsjEgQqzquvJchEOiiurSS
yUZ3+OiZb0HZVbxvXrsuLXSIhfLRFddGaoJ/Jee56pW01L7rx/YWKvw99A3H3445
dRQlvQzYMXvF0H5eQ0sk/KpWonzMWtvXrK9r2VVNIxCHQQLBZwsnJ0i/BY2VOQp+
0rjRZdI1GUp2c9q1d5LMsF5E6ph6GGzU5DqGppNnA5HwQsu1ih7b5jrX7wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFH0Dwgo1WfcIaPFf9snU6G2ou6WMB8GA1UdIwQY
MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt
ZjVhZjYxNmI1NDgzLzEvVWZRUENDalZaOXdobzhWXzJ5ZFRvYmFpN3BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz
LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhRLADAN
BgkqhkiG9w0BAQsFAAOCAQEAU/ZDlIcStDm3sYYd6qQSopOlDFfo7wXMnsdlDf2n
IBfFuDY6uLDPaiKk4HNRiOJynFHHjza+wUU6rpVkCp644Dz7Henib+EPzdACjyh3
b7DfAc1jCHQe/2XLxEZADzCtbUqEaUh7rSDw88Uxtt/L2hQ7NKCjdqi0La5zf/hq
LMtTqrnh+vWTs7WlM0qu9+88PmNBS++dauF0la1bpB0I4NcmaWLeuHlUkWarQoJ5
TNKQBzQC7SqwgaUYk+wdQUCAg3MtHYZO4PbBTW7o3Ckf0IwGSnjopH8Ye4/tlJVK
nLfanA9mfWCkpO+bLGUUu0A1x3EOk+9VLBNCZbrocAqNWg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:22:54 2025 by rpki-client