Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa
File: 9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa (raw, json)
Hash identifier: y8yBYrZmk+rE4RIfdIqZnZ3JFWI95gG2qC5oXNpQHjI=
Subject key identifier: F4:2E:B1:F8:02:8A:5A:A1:50:3A:63:E8:0E:B1:1F:B1:0F:3A:3E:5A
Certificate issuer: /CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Certificate serial: 019421444685FB7DA54F411A1C1C0080AB93
Authority key identifier: 21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20847
IP address blocks: 62.165.64.0/18 maxlen: 24
80.65.96.0/19 maxlen: 24
84.241.128.0/18 maxlen: 24
2001:1690::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:46:85:fb:7d:a5:4f:41:1a:1c:1c:00:80:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21269675acefbbf8497b1e21ca73764af4aa8c7b
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f42eb1f8028a5aa1503a63e80eb11fb10f3a3e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:18:d1:ca:54:92:bd:24:a1:10:01:d4:fe:
e6:d2:82:c0:3a:42:9d:2f:76:b1:af:d8:40:50:23:
09:3c:8f:8c:69:df:f3:69:01:4a:60:19:c9:c6:f9:
49:15:ef:04:a6:aa:2d:eb:12:33:5e:5c:6a:bc:c3:
11:9e:c4:b3:78:3d:f6:88:e2:46:fd:26:a0:d5:92:
2e:b2:4a:5e:d2:09:5c:e4:33:2a:79:f0:81:bf:14:
84:c0:e5:c9:95:21:b4:41:06:83:c6:50:29:0f:b5:
31:3a:1f:05:11:59:f9:26:ef:9f:13:45:99:3d:bc:
be:2e:da:93:18:91:d3:50:bd:2f:f5:a7:fb:8c:93:
9d:ca:fe:bd:46:42:d9:f5:ea:f2:eb:86:4d:1a:36:
83:1c:48:ed:8b:60:00:a8:41:6b:e2:85:ef:35:dd:
79:bd:11:ab:87:2d:af:7e:e4:a0:75:db:37:e2:e4:
78:ae:38:bd:03:3c:ec:6e:52:1e:7b:1c:9c:d0:8c:
a2:57:9e:92:54:4b:19:a2:52:2d:b6:c1:84:d9:d6:
68:26:24:17:94:0f:ec:16:cc:88:c4:91:e5:e8:67:
8b:f4:f7:b7:e3:38:d3:77:3e:8c:63:e7:74:69:fc:
6b:7d:2a:b4:80:89:a9:58:1b:96:c0:1a:cc:82:00:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2E:B1:F8:02:8A:5A:A1:50:3A:63:E8:0E:B1:1F:B1:0F:3A:3E:5A
X509v3 Authority Key Identifier:
keyid:21:26:96:75:AC:EF:BB:F8:49:7B:1E:21:CA:73:76:4A:F4:AA:8C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISaWdazvu_hJex4hynN2SvSqjHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/9C6x-AKKWqFQOmPoDrEfsQ86Plo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5af699-b1a9-49dc-bdc9-1d4dfb4f4800/1/ISaWdazvu_hJex4hynN2SvSqjHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.165.64.0/18
80.65.96.0/19
84.241.128.0/18
IPv6:
2001:1690::/32
Signature Algorithm: sha256WithRSAEncryption
5c:d7:c0:4d:a4:48:5b:f2:ac:b0:2f:7b:75:70:f7:16:29:62:
07:d0:a4:3b:03:a8:cc:95:fe:53:64:95:ee:75:10:6e:3f:af:
9d:70:cd:ca:be:3f:be:b3:ab:23:13:88:25:d3:23:a8:d2:c7:
7a:fb:98:2d:68:55:89:4e:47:3d:59:e5:56:9d:47:2f:5a:67:
a8:0c:61:ed:55:a9:fa:38:69:2d:a1:8c:ee:0e:c5:88:a8:5c:
ef:cd:72:bb:9a:8a:51:27:97:d2:63:63:dc:fd:a0:20:a9:17:
24:ff:b8:88:bf:23:88:97:8f:dc:b5:d5:98:73:3d:7e:4a:32:
1f:fe:bf:8e:f7:24:b1:68:4d:08:94:0b:81:c0:6b:ee:8b:fd:
16:ac:7a:ec:b1:c6:46:59:9e:b0:5b:7e:33:9a:f5:d7:17:42:
2d:fb:c4:67:73:83:9c:f6:eb:f0:60:a4:f5:fe:6a:13:fc:de:
f5:5c:cf:65:17:92:fd:8e:52:83:29:84:48:53:46:4f:50:c3:
98:33:9f:ae:9d:55:26:24:2b:67:de:16:df:34:9a:44:b8:50:
48:f0:b1:8a:5f:a6:cd:2d:17:db:92:0c:db:af:bc:db:68:44:
d2:13:ee:4b:69:37:b2:2e:b1:e7:bc:97:a3:da:9e:61:44:fa:
82:81:60:2f
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQhREaF+32lT0EaHBwAgKuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMjY5Njc1YWNlZmJiZjg0OTdiMWUyMWNhNzM3NjRhZjRh
YThjN2IwHhcNMjUwMTAxMDk0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDJlYjFmODAyOGE1YWExNTAzYTYzZTgwZWIxMWZiMTBmM2EzZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz4Y0cpUkr0koRAB1P7m0oLAOkKd
L3axr9hAUCMJPI+Mad/zaQFKYBnJxvlJFe8Epqot6xIzXlxqvMMRnsSzeD32iOJG
/Sag1ZIuskpe0glc5DMqefCBvxSEwOXJlSG0QQaDxlApD7UxOh8FEVn5Ju+fE0WZ
Pby+LtqTGJHTUL0v9af7jJOdyv69RkLZ9ery64ZNGjaDHEjti2AAqEFr4oXvNd15
vRGrhy2vfuSgdds34uR4rji9AzzsblIeexyc0IyiV56SVEsZolIttsGE2dZoJiQX
lA/sFsyIxJHl6GeL9Pe34zjTdz6MY+d0afxrfSq0gImpWBuWwBrMggAAGwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPQusfgCilqhUDpj6A6xH7EPOj5aMB8GA1UdIwQY
MBaAFCEmlnWs77v4SXseIcpzdkr0qox7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzkt
MWQ0ZGZiNGY0ODAwLzEvOUM2eC1BS0tXcUZRT21Qb0RyRWZzUTg2UGxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81YWY2OTktYjFhOS00OWRjLWJkYzktMWQ0ZGZiNGY0ODAw
LzEvSVNhV2RhenZ1X2hKZXg0aHluTjJTdlNxakhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGPqVAAwQF
UEFgAwQGVPGAMA0EAgACMAcDBQAgARaQMA0GCSqGSIb3DQEBCwUAA4IBAQBc18BN
pEhb8qywL3t1cPcWKWIH0KQ7A6jMlf5TZJXudRBuP6+dcM3Kvj++s6sjE4gl0yOo
0sd6+5gtaFWJTkc9WeVWnUcvWmeoDGHtVan6OGktoYzuDsWIqFzvzXK7mopRJ5fS
Y2Pc/aAgqRck/7iIvyOIl4/ctdWYcz1+SjIf/r+O9ySxaE0IlAuBwGvui/0WrHrs
scZGWZ6wW34zmvXXF0It+8Rnc4Oc9uvwYKT1/moT/N71XM9lF5L9jlKDKYRIU0ZP
UMOYM5+unVUmJCtn3hbfNJpEuFBI8LGKX6bNLRfbkgzbr7zbaETSE+5LaTeyLrHn
vJej2p5hRPqCgWAv
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:44 2025 by rpki-client