Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3uLpjLgMz3amWebtrBaqWvunKe8.roa
File: 3uLpjLgMz3amWebtrBaqWvunKe8.roa (raw, json)
Hash identifier: AsSuD9rGprEkKxyYxHwD8wt5flTG9nFCAb1Skx4tTGA=
Subject key identifier: DE:E2:E9:8C:B8:0C:CF:76:A6:59:E6:ED:AC:16:AA:5A:FB:A7:29:EF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521E538FAD4DC882C92B00935CC8C99
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3uLpjLgMz3amWebtrBaqWvunKe8.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140936
IP address blocks: 2a0e:b107:bd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e5:38:fa:d4:dc:88:2c:92:b0:09:35:cc:8c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dee2e98cb80ccf76a659e6edac16aa5afba729ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:36:82:b3:02:ad:1a:e2:6a:9f:f1:61:43:
e5:6b:69:a7:50:56:c7:a2:e4:8c:e8:04:14:fc:a7:
18:33:46:24:76:97:a1:a8:02:d7:6d:e0:fb:d6:2e:
3a:54:e5:41:27:11:41:c9:c3:e7:27:8c:05:dd:57:
de:a2:17:c0:e7:61:19:b0:43:d7:52:bf:11:5d:fa:
f0:84:8b:f4:75:42:91:a5:27:ac:12:ff:c5:d8:61:
89:69:f2:a8:8d:b9:8f:af:b4:55:4f:7e:51:40:84:
12:63:1c:8f:ec:94:9f:97:a3:82:6a:79:09:e5:d4:
14:a4:29:ab:08:b0:f0:87:c1:5b:7d:80:e0:a5:ed:
0e:0a:37:e9:29:91:42:42:30:86:f6:0b:57:cf:d6:
30:8f:ca:c4:33:60:a0:80:59:cc:15:23:1e:75:f1:
11:0e:11:58:d8:0f:55:32:fb:c0:c3:1c:b4:8a:a4:
2c:62:c9:14:30:e6:8a:0f:41:43:02:3e:7a:38:0b:
4e:d4:07:2d:b6:15:74:dd:04:3d:ee:10:45:26:00:
24:98:8e:30:3a:c4:15:62:79:81:e3:19:47:aa:a6:
1f:6e:ca:59:63:5f:b3:89:11:fc:c7:76:22:69:4d:
4c:08:54:c7:25:fa:c5:ab:60:88:02:e7:3b:ba:68:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:E9:8C:B8:0C:CF:76:A6:59:E6:ED:AC:16:AA:5A:FB:A7:29:EF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3uLpjLgMz3amWebtrBaqWvunKe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:bd0::/48
Signature Algorithm: sha256WithRSAEncryption
10:ed:01:8b:61:8d:ef:98:98:ae:dd:9a:04:77:2e:ad:79:34:
95:d5:40:1e:fd:cf:78:2b:23:63:99:7b:67:04:ed:c5:f1:17:
9a:c0:00:89:29:2a:1a:39:ab:8e:e6:ef:35:a8:4c:1d:c0:90:
51:f7:43:42:40:aa:e4:1b:04:b6:d1:52:90:77:07:59:a7:e9:
2f:b1:f1:11:2f:0c:57:b4:1a:c4:d5:f8:ee:5e:50:70:d5:dc:
15:74:1b:81:09:f8:fe:78:82:a3:be:e7:5b:b7:15:d7:65:43:
51:fe:71:8b:2f:8e:95:12:63:f9:93:ca:5d:8e:9e:fc:6c:5e:
e5:5a:ab:40:2a:28:bb:8f:5a:c2:86:78:8d:40:72:80:88:23:
2b:cb:cf:4a:3b:55:dc:16:c6:3e:1d:c8:61:41:52:1f:ff:c8:
ee:c7:d6:0b:e1:b4:34:3f:6f:99:39:ee:7c:39:71:ee:a5:c5:
f7:51:2b:15:59:da:d9:89:65:95:2a:03:43:e2:4c:2c:1f:04:
55:98:e8:7a:8e:82:8e:27:a6:fc:bc:70:73:22:79:d7:b5:42:
9d:41:bc:46:5e:e5:2c:b4:71:57:32:09:3b:b5:29:98:e5:a5:
91:67:9b:ad:da:f0:c0:47:d5:ea:d0:12:4d:4c:47:ac:7e:41:
eb:de:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:01:32 2025 by rpki-client