Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0tROW1vwG_GMQos7wBG4DKwxbTA.roa
File: 0tROW1vwG_GMQos7wBG4DKwxbTA.roa (raw, json)
Hash identifier: EkzZxjQ+KUt/UsZoKoPekunIIUIYQlbqJaxfT2X7bs0=
Subject key identifier: D2:D4:4E:5B:5B:F0:1B:F1:8C:42:8B:3B:C0:11:B8:0C:AC:31:6D:30
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425222A24E71B7F4D4B5EED809A4C7184
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0tROW1vwG_GMQos7wBG4DKwxbTA.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207740
IP address blocks: 2a0e:b107:198::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2a:24:e7:1b:7f:4d:4b:5e:ed:80:9a:4c:71:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2d44e5b5bf01bf18c428b3bc011b80cac316d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:da:3f:d6:91:5e:30:a7:ce:04:59:e2:4c:
66:e6:3c:0a:a8:6f:d1:22:ad:00:15:48:6c:0b:2b:
67:fb:cd:9b:06:da:0f:1e:5b:73:ce:2b:da:e7:13:
53:f4:08:28:95:31:d6:00:1c:5e:00:fb:02:aa:3e:
45:8f:00:7b:27:ae:ea:c7:8e:ca:84:b1:b1:60:e2:
76:13:21:df:10:88:22:94:25:db:f0:62:c1:6e:d3:
82:19:a0:ea:92:88:a8:25:55:8c:ca:a4:d9:77:a9:
fc:40:69:46:ee:4e:83:0b:34:0c:bd:dc:fc:eb:61:
33:60:13:f0:cc:6f:43:10:dc:70:56:0f:f0:58:11:
7c:94:7f:61:f0:a9:74:60:13:a8:42:83:0e:26:a6:
56:df:e5:b4:76:5e:70:80:b6:36:2e:f5:b4:d1:19:
72:c2:fa:57:1c:a9:d5:35:49:19:2e:f4:e1:e5:0a:
b1:77:17:3e:ba:ba:70:23:a5:5e:b5:3d:84:50:8b:
cf:e8:9e:5f:7d:46:11:45:1f:49:2f:ef:d8:79:e3:
c9:f3:4e:24:63:2f:d7:7e:2c:6c:8d:48:a4:e1:ee:
99:b7:ba:b5:61:de:1e:79:81:e3:e8:93:04:b4:c2:
ac:01:78:84:5e:e2:3b:95:d2:ed:24:0d:97:69:07:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:4E:5B:5B:F0:1B:F1:8C:42:8B:3B:C0:11:B8:0C:AC:31:6D:30
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0tROW1vwG_GMQos7wBG4DKwxbTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:198::/48
Signature Algorithm: sha256WithRSAEncryption
99:89:a9:53:7e:14:6c:3f:4b:f8:28:f5:4c:df:b2:d9:03:d8:
7d:07:f7:8f:42:56:f1:c1:c1:c4:f5:8e:c2:3d:79:12:0b:58:
71:c6:18:32:ec:ae:dd:31:d3:a7:2e:56:e4:e4:7f:0e:4c:3d:
29:51:53:37:2d:c5:70:28:c9:5e:01:51:60:62:e5:55:f6:d9:
63:78:06:79:17:39:98:1f:3c:ea:74:60:0c:3d:4b:f4:6e:cc:
9f:ad:9e:26:3d:62:9e:06:9f:0a:f6:98:fe:dc:57:1d:54:65:
34:aa:a1:d8:cf:bf:04:46:88:74:56:78:0d:99:20:20:0e:55:
b4:ff:de:cd:7c:50:a1:c5:82:53:8e:50:c5:85:dc:c7:de:07:
9a:a4:63:95:41:7e:21:22:34:77:4f:58:d1:7f:63:1a:7b:b0:
59:20:6d:cf:36:78:3a:5c:c9:86:44:76:c9:24:31:20:74:7c:
65:71:69:bd:68:da:d1:9d:af:a0:cb:08:38:e6:67:e4:9c:08:
9b:58:6c:78:ea:be:6a:03:16:13:76:29:ee:54:61:09:52:e1:
03:ae:a6:32:69:86:da:b6:4b:2b:b8:93:0a:8e:9f:9d:72:e8:
aa:9f:c9:60:9e:02:c3:13:ee:35:ce:e0:9a:66:68:cd:2d:e3:
47:ad:37:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:43:16 2025 by rpki-client