Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a1TlY4wKkDi7qEP4mbk_8gfFOCE.roa
File: a1TlY4wKkDi7qEP4mbk_8gfFOCE.roa (raw, json)
Hash identifier: C7XUMPAbbus3wpvPkxvXt6JvGPG4xMHnpnhUOQyLY7U=
Subject key identifier: 6B:54:E5:63:8C:0A:90:38:BB:A8:43:F8:99:B9:3F:F2:07:C5:38:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252253A8FC210895D96F6E9517E27693
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a1TlY4wKkDi7qEP4mbk_8gfFOCE.roa
Signing time: Thu 02 Jan 2025 03:49:54 +0000
ROA not before: Thu 02 Jan 2025 03:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211571
IP address blocks: 2a10:cc40:190::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:53:a8:fc:21:08:95:d9:6f:6e:95:17:e2:76:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b54e5638c0a9038bba843f899b93ff207c53821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:67:a7:c4:8a:58:b5:62:92:69:44:ff:d9:
73:d8:df:bc:e8:bf:50:28:c5:c4:0a:09:8f:19:cf:
be:e5:e5:5b:6b:b4:2d:e9:11:e4:c8:19:5d:39:42:
fd:7a:6a:a2:c8:c4:64:93:47:11:97:fe:63:cb:9a:
16:e5:36:01:e4:ec:6e:f2:5d:27:1f:e6:7e:51:5e:
f0:79:30:3c:f1:ba:b3:d6:00:26:50:12:52:01:c7:
8c:42:93:c9:6d:8a:14:31:65:40:1e:3c:09:35:cb:
fd:c9:96:bd:d6:34:53:50:8a:81:43:be:bb:8e:c4:
f4:42:f3:9e:9f:91:a4:79:bc:d8:1b:18:4e:5f:27:
b0:52:8d:a8:99:99:07:63:64:c1:e1:52:bf:08:97:
a7:98:32:0e:17:93:76:57:d5:af:5c:6c:62:b7:f9:
b3:e4:f0:89:70:08:96:2e:1a:03:6b:1f:93:0d:61:
de:90:9c:f6:db:b4:2f:eb:7c:4e:4e:cc:e9:e8:64:
b2:43:80:f7:cb:84:4e:36:4c:c8:16:a9:66:12:36:
a7:31:7a:b6:56:10:84:af:b2:3d:4d:ae:c0:57:d6:
f9:65:05:96:87:14:7d:84:63:fc:87:6f:14:16:02:
5e:d4:6a:e0:89:d2:c7:33:d6:5b:c9:a7:51:18:de:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:54:E5:63:8C:0A:90:38:BB:A8:43:F8:99:B9:3F:F2:07:C5:38:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/a1TlY4wKkDi7qEP4mbk_8gfFOCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:190::/44
Signature Algorithm: sha256WithRSAEncryption
c0:12:47:1e:e4:71:9d:29:db:00:82:90:ed:94:e0:73:d6:08:
20:f4:c5:10:f9:8c:c6:03:a9:39:fa:d6:bd:e5:b8:c4:08:9f:
4b:aa:e8:fe:53:14:48:cf:f9:78:60:3f:a8:39:18:53:3d:ff:
0d:40:11:e6:1d:43:ef:4c:39:52:3b:27:68:d6:ff:67:52:48:
fb:29:a1:dc:e2:2c:90:77:cb:5d:09:fb:80:0c:94:f6:0a:33:
76:7a:4a:b1:0d:1a:b8:c7:a0:5a:fe:a9:0d:b4:18:5d:cd:fe:
48:2c:0d:9d:1e:49:d6:ff:80:68:1d:d0:b7:2f:2c:c7:4a:89:
c3:4b:78:87:d6:15:74:30:42:32:c4:e4:7a:97:9c:8a:15:83:
07:1c:bb:32:d2:53:5a:bb:d0:dc:0d:f0:8e:4a:c0:2a:5a:56:
ca:2c:3a:a8:7c:17:ef:6b:98:30:01:c2:b2:11:a5:e6:d2:4e:
53:b3:ed:2f:3c:39:39:61:38:2f:58:c0:75:2d:ec:e0:2c:1e:
c5:65:64:80:11:75:23:5a:98:f9:58:25:04:af:fa:b1:54:ae:
f4:c5:e0:a6:90:fa:b1:9e:c2:95:d5:f4:0d:e5:69:75:42:ca:
45:d9:38:8d:92:c3:64:3d:69:49:86:48:89:93:8a:e9:1b:ce:
ca:4e:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:29:12 2025 by rpki-client