Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/134sBqInW17_6dsxZb7Fw2YaX6Y.roa
File: 134sBqInW17_6dsxZb7Fw2YaX6Y.roa (raw, json)
Hash identifier: eYS9yIIyDeXKi6W91Soqfx0Zqj8eyKkLPba1irtljlg=
Subject key identifier: D7:7E:2C:06:A2:27:5B:5E:FF:E9:DB:31:65:BE:C5:C3:66:1A:5F:A6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522713ECDCC02F641DF1091883BF186
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/134sBqInW17_6dsxZb7Fw2YaX6Y.roa
Signing time: Thu 02 Jan 2025 03:50:01 +0000
ROA not before: Thu 02 Jan 2025 03:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213327
IP address blocks: 2a0e:b107:20a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:71:3e:cd:cc:02:f6:41:df:10:91:88:3b:f1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d77e2c06a2275b5effe9db3165bec5c3661a5fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:19:28:84:ee:e1:f9:e8:e8:cd:f6:ca:73:70:
77:af:b8:08:ab:cf:18:d9:e1:59:87:07:ab:71:00:
54:6f:f9:91:e2:bf:00:a8:d1:db:ad:8c:bf:2a:33:
7f:82:9f:52:d3:29:ab:5c:77:f4:9a:90:7e:21:87:
c1:ed:73:39:19:c0:a8:eb:18:88:00:e1:f9:c9:e4:
02:62:0b:c9:60:29:52:6e:74:43:42:02:da:85:d3:
74:b2:87:41:85:c4:33:f9:7f:5e:d3:4e:6a:50:84:
09:18:48:4e:3f:81:4e:ea:90:7c:87:1e:ee:bd:2f:
4a:1f:d5:b8:dc:ec:ed:db:fc:c0:7f:83:04:a3:1e:
42:17:74:9b:2e:08:c0:62:45:e5:b1:10:d6:2f:de:
0d:0c:ed:9b:06:c4:59:55:af:fb:81:c6:d0:d5:e4:
47:30:93:81:a8:bf:9e:a1:00:1d:c4:e2:f8:c7:ae:
8d:6b:bd:43:29:eb:b0:2b:64:7c:98:1e:80:ef:39:
eb:19:a5:7a:d6:b3:fd:38:a9:20:23:4a:4e:7e:d4:
af:0b:18:fe:30:be:cb:f2:e7:81:f7:2e:d0:f6:b8:
28:3b:68:ff:11:09:a1:c6:73:11:47:78:53:09:5f:
c7:a6:23:3b:06:42:f8:e2:1c:f6:51:b8:3e:68:2f:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:2C:06:A2:27:5B:5E:FF:E9:DB:31:65:BE:C5:C3:66:1A:5F:A6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/134sBqInW17_6dsxZb7Fw2YaX6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
1f:2a:6f:64:1a:a5:a1:c5:15:5c:d2:89:df:19:95:54:ca:4c:
98:6a:e6:de:0b:56:b7:58:e4:09:c5:80:6b:cd:e1:9e:9e:a0:
9e:88:e6:f2:57:c9:5b:77:94:bb:8c:0a:6c:0e:ba:fb:e8:74:
42:e1:7e:4b:1f:41:08:e9:8b:bf:34:71:16:03:7a:f6:27:05:
b4:a7:df:ed:04:b9:5e:7a:9a:a6:ad:e1:3c:48:1c:bb:a9:4c:
ca:41:cb:36:48:b2:21:51:3e:ae:f6:4d:ee:57:49:4a:d2:f8:
23:e0:1d:97:d8:21:01:ef:a4:9e:25:24:61:8e:f8:4c:5e:57:
2c:11:d4:9b:b8:a2:da:1f:1b:e4:ab:8e:4a:33:26:54:a8:cf:
aa:c6:b7:37:02:f3:b9:8c:32:e4:72:54:3b:22:65:60:95:c9:
dd:13:95:3f:16:95:89:83:20:17:a5:2a:70:65:10:a3:29:c0:
72:b5:c5:be:a5:5b:e5:d2:9e:33:23:34:dc:30:4a:ca:82:b3:
44:35:20:f6:78:af:38:3e:96:17:7b:34:c8:7b:b5:62:ab:17:
4a:9f:db:b5:ef:fe:07:61:8a:9c:22:f5:cb:a8:48:ee:8b:22:
5f:d4:f1:38:64:eb:60:42:52:a3:a9:79:f3:86:3d:66:64:d0:
00:43:9c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:57:27 2025 by rpki-client