Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/34c2ojP1UZyliKtI92egbDJF0u0.roa
File: 34c2ojP1UZyliKtI92egbDJF0u0.roa (raw, json)
Hash identifier: IptX9N54CCX6dPh97TGlE+GTzR/HYG0Ego5OG4996gA=
Subject key identifier: DF:87:36:A2:33:F5:51:9C:A5:88:AB:48:F7:67:A0:6C:32:45:D2:ED
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521C4B1E06FE5247C9DC7CCB0CFA2B2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/34c2ojP1UZyliKtI92egbDJF0u0.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0e:97c0:411::/48 maxlen: 48
2a0e:97c0:8e0::/48 maxlen: 48
2a0e:b107:19a0::/48 maxlen: 48
2a0e:b107:1a63::/48 maxlen: 48
2a0e:b107:1a64::/48 maxlen: 48
2a0e:b107:2880::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c4:b1:e0:6f:e5:24:7c:9d:c7:cc:b0:cf:a2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df8736a233f5519ca588ab48f767a06c3245d2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:8b:a1:f6:46:0c:a3:ca:a8:f6:41:c0:fd:
c6:22:40:4f:8c:4f:72:64:27:ce:97:bd:1d:fa:d0:
2a:f2:6e:1d:20:53:02:47:f7:13:da:54:bb:2d:c0:
a0:ba:fc:23:69:4c:5d:fe:56:f7:11:be:ee:6e:0b:
41:f2:06:20:79:83:e0:12:63:e6:7c:2a:f7:67:14:
fd:2a:bd:36:b8:16:35:e2:a4:71:9e:f2:9e:f7:f3:
bd:72:5f:af:4f:21:58:0a:7b:a6:8e:a4:4f:bd:bc:
53:b3:a2:3f:1c:2f:f1:77:d7:aa:c5:4e:42:6a:d4:
c9:11:96:19:74:e7:9a:b1:19:1d:89:14:28:fa:83:
48:f4:51:f7:15:de:46:06:d5:04:63:29:9b:e5:f7:
cb:ee:a7:66:bd:5a:b3:d2:13:2b:0b:20:74:56:df:
6f:e8:47:55:81:f8:73:e1:b6:42:50:d7:13:b7:fa:
7e:d0:8c:1f:60:f7:55:27:0c:ed:73:e1:2d:dc:f1:
f6:30:4e:48:6f:2b:96:97:77:74:10:43:d1:bd:65:
55:24:77:66:74:7a:97:05:28:27:7d:14:0c:4a:8d:
66:09:94:b2:d4:30:b8:6b:9d:1a:0f:15:c5:7a:8b:
96:e3:24:5b:0d:d4:01:93:1e:f5:ec:39:2a:18:69:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:36:A2:33:F5:51:9C:A5:88:AB:48:F7:67:A0:6C:32:45:D2:ED
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/34c2ojP1UZyliKtI92egbDJF0u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:411::/48
2a0e:97c0:8e0::/48
2a0e:b107:19a0::/48
2a0e:b107:1a63::-2a0e:b107:1a64:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2880::/46
Signature Algorithm: sha256WithRSAEncryption
2b:14:e5:76:0f:d5:3e:82:ca:c5:a6:4c:a5:91:31:51:c9:ea:
c1:7a:59:8b:1d:18:7e:36:0c:82:cc:ad:e0:a3:76:c5:47:80:
ea:3b:0d:92:75:cf:c1:aa:76:47:9a:e9:c5:64:c1:33:ea:44:
ed:d7:e2:e4:42:7d:fc:ca:a1:85:30:57:80:f9:df:ca:b1:8e:
40:10:37:18:fe:8d:22:f2:1d:f1:8f:d8:20:0e:b0:13:34:2f:
02:7d:12:ff:65:00:8a:82:4b:b5:8d:b7:04:3f:ac:d3:38:a7:
f0:4b:d4:e0:82:62:ee:b0:dd:44:4f:4a:51:a2:3e:e5:9a:91:
e3:e8:e6:50:d0:0f:e4:fc:12:2d:b7:3e:ca:9b:f2:80:fd:d6:
be:fc:2b:a6:0a:0f:ce:12:49:1e:ee:a5:f3:cf:ea:94:d9:98:
0f:a9:9a:31:de:ee:af:b5:db:4c:38:f9:99:74:ad:33:ac:24:
6a:5b:b0:77:a4:96:82:d0:f8:05:da:71:27:f6:f5:04:d7:3e:
03:c5:fc:89:40:cd:18:9b:04:b9:f7:7d:53:1c:94:2f:2e:30:
55:9f:87:64:b4:d1:05:7a:7b:57:6b:8d:a5:fc:6c:d8:89:0b:
f2:ba:a7:12:f9:79:2e:6d:dc:ed:36:72:c3:60:95:22:57:ca:
59:fe:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:59:06 2025 by rpki-client