Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4fd-VNsndIXhzUGfq09msiKGoa0.roa
File: 4fd-VNsndIXhzUGfq09msiKGoa0.roa (raw, json)
Hash identifier: vhu8E8RBPFQNsCgoW9jTW+3k26Ngxy6E+vDbxUjwaYM=
Subject key identifier: E1:F7:7E:54:DB:27:74:85:E1:CD:41:9F:AB:4F:66:B2:22:86:A1:AD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196B7369A93646FE4374A0EDE5EE0F8F638
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4fd-VNsndIXhzUGfq09msiKGoa0.roa
Signing time: Fri 09 May 2025 22:42:11 +0000
ROA not before: Fri 09 May 2025 22:42:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214971
IP address blocks: 2a06:de02:1a01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:36:9a:93:64:6f:e4:37:4a:0e:de:5e:e0:f8:f6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 9 22:42:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1f77e54db277485e1cd419fab4f66b22286a1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:c2:8d:a3:1b:aa:d1:88:fb:a4:c8:d3:a4:
b5:7a:32:7e:b9:0b:bb:37:26:c6:61:af:82:71:6c:
e4:a0:72:e7:71:08:e8:29:c9:72:5b:8d:2a:da:e0:
b6:28:31:41:4a:77:c0:19:db:e3:be:72:8f:58:ab:
dd:5b:44:90:7e:f5:b3:90:05:f9:49:35:03:8b:2c:
0e:1a:66:42:70:05:cb:cc:ab:b9:fc:2e:a6:ab:b1:
11:ee:27:e8:30:45:95:e0:71:f1:1a:90:25:27:26:
09:61:ea:45:ca:91:f2:c2:5f:cd:e3:e5:af:68:f8:
95:c2:a4:10:be:28:5f:af:1a:4c:7d:87:9d:17:d0:
22:3b:6b:b2:66:b5:1e:69:a0:bb:55:f7:7e:cc:31:
d6:24:9e:01:4c:56:be:99:74:15:93:e7:b7:95:a0:
04:38:ff:1e:44:a7:95:3a:9b:01:4e:26:17:44:02:
6d:64:97:a1:a6:18:ba:40:ce:0a:8c:46:bb:e8:89:
97:1f:4a:8b:23:d0:ca:b2:e7:10:a3:bc:29:aa:1f:
96:26:c2:bc:37:fc:61:96:2c:f9:60:ff:f6:7f:b6:
99:6d:d6:3a:58:b0:56:8b:1f:f8:2c:89:20:21:a3:
07:d0:57:14:3e:a6:d3:2b:79:38:20:26:32:56:2f:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:7E:54:DB:27:74:85:E1:CD:41:9F:AB:4F:66:B2:22:86:A1:AD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4fd-VNsndIXhzUGfq09msiKGoa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de02:1a01::/48
Signature Algorithm: sha256WithRSAEncryption
bd:9b:3e:d4:df:4c:09:66:30:88:59:1a:c8:51:50:5b:96:c1:
b3:0d:00:6f:bd:b5:7f:ae:ba:a2:e4:95:7e:04:9b:ac:a9:0a:
4d:3b:2a:81:8d:b9:d2:85:a1:2a:38:d9:02:64:45:e2:0c:0f:
76:73:de:32:26:61:f7:22:03:c7:f5:48:32:4b:86:7a:f9:fd:
39:1f:92:52:8b:a6:93:85:06:15:df:a2:5f:8e:a0:e6:4f:83:
f4:ed:41:f6:f0:38:2f:44:b4:e4:59:fd:70:03:2b:9b:49:78:
df:59:d6:03:26:4f:ca:60:d0:75:41:9a:7a:bc:68:25:2c:eb:
8e:2c:b1:0d:47:ee:75:91:3f:42:e2:90:26:df:f8:44:ef:ca:
eb:b7:87:0e:ac:d8:d2:97:01:75:38:d1:39:c5:01:d1:67:23:
3d:b4:2e:9d:20:90:8c:2d:1b:44:d6:dd:c0:66:88:b7:3b:fd:
0b:b8:a5:fe:21:19:33:88:cf:0e:41:f2:8a:cf:ef:fc:ea:6c:
0f:0d:2a:73:88:c1:23:a4:2d:ec:6f:18:6e:77:57:4c:21:16:
c1:2f:74:2a:bf:4c:97:bf:1c:32:91:26:05:19:fe:f0:52:d9:
8f:d7:f5:7c:30:49:79:a1:90:69:3c:b1:88:74:bb:6c:0c:05:
02:e8:69:69
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZa3NpqTZG/kN0oO3l7g+PY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwNTA5MjI0MjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWY3N2U1NGRiMjc3NDg1ZTFjZDQxOWZhYjRmNjZiMjIyODZhMWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLXCjaMbqtGI+6TI06S1ejJ+uQu7
NybGYa+CcWzkoHLncQjoKclyW40q2uC2KDFBSnfAGdvjvnKPWKvdW0SQfvWzkAX5
STUDiywOGmZCcAXLzKu5/C6mq7ER7ifoMEWV4HHxGpAlJyYJYepFypHywl/N4+Wv
aPiVwqQQvihfrxpMfYedF9AiO2uyZrUeaaC7Vfd+zDHWJJ4BTFa+mXQVk+e3laAE
OP8eRKeVOpsBTiYXRAJtZJehphi6QM4KjEa76ImXH0qLI9DKsucQo7wpqh+WJsK8
N/xhliz5YP/2f7aZbdY6WLBWix/4LIkgIaMH0FcUPqbTK3k4ICYyVi+eeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOH3flTbJ3SF4c1Bn6tPZrIihqGtMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNGZkLVZOc25kSVhoelVHZnEwOW1zaUtHb2EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbeAhoB
MA0GCSqGSIb3DQEBCwUAA4IBAQC9mz7U30wJZjCIWRrIUVBblsGzDQBvvbV/rrqi
5JV+BJusqQpNOyqBjbnShaEqONkCZEXiDA92c94yJmH3IgPH9UgyS4Z6+f05H5JS
i6aThQYV36JfjqDmT4P07UH28DgvRLTkWf1wAyubSXjfWdYDJk/KYNB1QZp6vGgl
LOuOLLENR+51kT9C4pAm3/hE78rrt4cOrNjSlwF1ONE5xQHRZyM9tC6dIJCMLRtE
1t3AZoi3O/0LuKX+IRkziM8OQfKKz+/86mwPDSpziMEjpC3sbxhud1dMIRbBL3Qq
v0yXvxwykSYFGf7wUtmP1/V8MEl5oZBpPLGIdLtsDAUC6Glp
-----END CERTIFICATE-----
Generated at Sat May 10 21:14:02 2025 by rpki-client