Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1D2FpKynm9BTG00RZnFpgdLU8hE.roa
File: 1D2FpKynm9BTG00RZnFpgdLU8hE.roa (raw, json)
Hash identifier: BifYF1pi9mkS03eCMZBd8jPRCaaiXARUJKxYYT9VeMc=
Subject key identifier: D4:3D:85:A4:AC:A7:9B:D0:53:1B:4D:11:66:71:69:81:D2:D4:F2:11
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252269B9B6CBC4306A698EED0964F661
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1D2FpKynm9BTG00RZnFpgdLU8hE.roa
Signing time: Thu 02 Jan 2025 03:49:59 +0000
ROA not before: Thu 02 Jan 2025 03:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212948
IP address blocks: 2a0e:b107:27a0::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:69:b9:b6:cb:c4:30:6a:69:8e:ed:09:64:f6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d43d85a4aca79bd0531b4d1166716981d2d4f211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:14:7e:2d:c0:a4:95:be:51:2a:bf:b5:f0:
b6:93:a6:10:c6:01:60:c5:87:15:51:85:c5:82:b7:
03:d6:16:ba:05:59:5d:a9:46:30:87:75:08:cc:5c:
11:30:e2:4c:44:34:0e:54:35:cd:3d:f9:b1:56:bd:
1d:a8:4f:9a:88:a5:56:b4:7c:4a:ed:fe:7c:14:51:
44:d4:29:26:db:02:56:49:df:95:b4:54:47:b9:fb:
58:70:91:dc:58:6b:a1:cc:3c:73:70:29:bd:52:d7:
19:9c:db:8b:7a:ab:8f:38:bd:3c:fd:96:3b:08:9a:
b4:ec:4f:b3:3c:35:0e:f0:95:c6:c0:46:28:d8:7d:
2c:7b:59:45:58:ae:94:9f:2d:ea:5a:27:a7:a9:f9:
59:85:a8:83:35:81:95:0e:31:19:b0:55:17:26:16:
43:e7:ab:06:6e:cd:ca:17:b7:9e:8b:dd:05:1b:66:
f5:19:f7:e3:c4:9d:db:43:1e:f1:ac:7d:99:a7:a4:
36:18:3c:dc:ee:f7:f9:81:e4:1e:85:01:06:a7:26:
25:c2:06:61:cd:72:e5:83:4e:18:a7:cc:bf:d2:e7:
1a:d5:d4:0e:72:1d:56:d4:b1:22:9f:95:72:4f:08:
1d:08:ed:f5:b8:dd:cf:32:20:76:96:82:44:87:1c:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3D:85:A4:AC:A7:9B:D0:53:1B:4D:11:66:71:69:81:D2:D4:F2:11
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1D2FpKynm9BTG00RZnFpgdLU8hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27a0::/45
Signature Algorithm: sha256WithRSAEncryption
8d:2e:7e:36:57:ed:9b:d2:bd:37:2c:29:7b:41:cb:49:db:c6:
68:fc:2d:32:2d:c4:1b:b8:44:0e:cb:95:4a:91:11:2a:5d:06:
a4:76:69:35:1f:59:2e:00:b6:08:2d:c1:16:aa:38:93:dc:6a:
0e:9b:71:dc:dd:5e:e5:c8:de:f0:1b:7d:d0:01:c3:a4:b3:67:
f3:0b:55:90:6d:a2:e2:1d:c8:a4:88:a1:29:99:69:18:d4:8a:
58:d7:fa:e7:60:dc:53:ea:de:44:bf:43:20:5e:83:aa:5e:4f:
36:30:30:0e:8c:fb:ab:5e:2b:40:3e:10:09:d9:27:00:a4:1d:
38:e2:98:74:3e:2e:00:9b:bc:9e:9a:60:6d:37:81:8b:ee:c3:
2f:3f:83:8b:ef:f0:53:02:64:cc:ca:b8:b2:6a:20:1b:d5:31:
99:1c:09:65:fe:5d:d2:89:61:29:ea:7f:39:e9:b7:11:e1:95:
64:ff:12:65:34:c6:4e:74:22:ab:74:3d:23:4d:81:5f:67:7d:
73:25:2b:74:b3:74:0c:b3:d3:28:e9:8a:70:c2:86:b6:fc:f2:
ea:67:c8:33:56:87:64:7c:61:94:a6:17:63:96:c2:cf:ac:bd:
80:fb:02:80:74:b7:1f:c1:27:b2:13:d8:c5:ec:ab:a7:82:44:
d2:74:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:31 2025 by rpki-client