Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3VQKDh8k4YspubGoGD3BHCXOHYU.roa
File: 3VQKDh8k4YspubGoGD3BHCXOHYU.roa (raw, json)
Hash identifier: 9VuqoksJ68E21scscyZ9KvE0g25sqQivRZAunJIbB/c=
Subject key identifier: DD:54:0A:0E:1F:24:E1:8B:29:B9:B1:A8:18:3D:C1:1C:25:CE:1D:85
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425222FB5EF3BFFB9CA458EA6C437E5F4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3VQKDh8k4YspubGoGD3BHCXOHYU.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208680
IP address blocks: 2a0e:b107:790::/48 maxlen: 48
2a0e:b107:791::/48 maxlen: 48
2a0e:b107:792::/48 maxlen: 48
2a0e:b107:793::/48 maxlen: 48
2a0e:b107:794::/48 maxlen: 48
2a0e:b107:795::/48 maxlen: 48
2a0e:b107:796::/48 maxlen: 48
2a0e:b107:797::/48 maxlen: 48
2a0e:b107:798::/48 maxlen: 48
2a0e:b107:799::/48 maxlen: 48
2a0e:b107:79a::/48 maxlen: 48
2a0e:b107:79b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2f:b5:ef:3b:ff:b9:ca:45:8e:a6:c4:37:e5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd540a0e1f24e18b29b9b1a8183dc11c25ce1d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:9c:06:9b:c6:d1:85:cd:2c:a7:41:2c:da:
e7:5e:fd:b3:88:33:b8:b0:40:58:94:43:02:24:7a:
45:e7:62:4a:69:ab:1d:39:57:d0:27:df:57:31:a0:
7b:e5:50:3e:b0:06:a9:79:ef:4b:c3:20:87:e2:b2:
82:78:8b:9b:8b:74:61:84:a2:4c:05:23:03:d1:8b:
7d:b5:d2:a7:6a:e3:22:c1:b7:17:fb:de:cd:3a:ac:
80:cb:e0:45:68:65:26:47:07:5d:38:4c:2b:af:f5:
5a:46:69:28:09:15:bb:72:d5:cb:38:74:d9:61:fb:
21:74:e6:25:97:94:40:d6:aa:93:9f:26:d7:88:e2:
2e:3d:3a:cb:2b:b9:a2:0f:2f:19:c7:99:a1:ad:b1:
58:26:07:61:19:fa:14:fd:51:de:07:b2:26:99:7e:
7f:41:6e:f1:46:92:b3:55:48:34:52:3a:1c:5a:8b:
d3:95:5d:a5:68:b6:43:da:bd:ed:77:3d:61:5e:87:
5f:ca:b9:32:3d:5a:84:20:2a:98:10:f3:ac:81:29:
35:ae:f9:d5:37:19:5d:a3:eb:a1:c9:f9:31:5a:ac:
ef:e5:33:76:7f:8a:5d:70:8e:3b:5a:5e:91:1a:a0:
70:03:45:5d:66:89:e9:94:1e:9d:b1:14:7d:0f:62:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:54:0A:0E:1F:24:E1:8B:29:B9:B1:A8:18:3D:C1:1C:25:CE:1D:85
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3VQKDh8k4YspubGoGD3BHCXOHYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:790::-2a0e:b107:79b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8b:95:60:0f:63:2b:8f:13:53:0e:28:5a:22:a1:8f:ad:3e:ad:
31:65:1a:6c:e0:f7:01:4e:55:e5:fa:26:53:de:ab:0b:4c:5d:
ed:92:29:68:10:9e:7f:dc:b2:2a:23:78:f8:40:3d:bc:dd:2c:
56:c4:08:05:79:dc:5b:b9:c7:54:e1:ee:6d:95:88:31:77:3c:
5e:c1:2f:8f:66:3f:83:a8:8e:d9:62:92:82:c8:02:78:6d:46:
6a:1e:5e:6b:19:e5:b7:4e:5f:cf:b9:8e:c2:88:09:82:8d:95:
a2:7e:59:47:59:f9:12:ba:84:90:7e:bf:2d:d2:0e:93:b7:03:
1c:58:8d:b8:94:89:a0:8b:37:37:bb:da:10:08:73:a4:17:51:
5f:92:88:a6:68:89:d7:c1:6d:7d:85:a6:fa:00:a9:9f:e2:e4:
02:f7:6e:d0:c4:20:90:0e:2d:6e:2f:73:dd:a2:e6:b0:39:c4:
cb:2d:d3:fd:9e:ff:53:6a:17:fa:57:11:b9:a6:a4:88:76:46:
ca:a2:8a:3e:6d:e8:4e:07:b9:a4:a0:aa:6f:e0:5f:65:e2:4a:
b4:44:38:78:19:79:53:a8:6d:a0:58:36:79:59:88:cc:4a:4d:
88:56:75:d3:da:1f:91:b1:6a:47:bf:45:4f:7a:93:f9:f1:b2:
22:ca:49:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:53:33 2025 by rpki-client