Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3uTR1mg9EREybTTmCfHv2Am8-Ek.roa
File: 3uTR1mg9EREybTTmCfHv2Am8-Ek.roa (raw, json)
Hash identifier: jbpPaXTx6Em3vzdDSTlxYtW7crfn8i0QB9xZk4FyzmY=
Subject key identifier: DE:E4:D1:D6:68:3D:11:11:32:6D:34:E6:09:F1:EF:D8:09:BC:F8:49
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425221AB6E15763119DB56CDA5430E01F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3uTR1mg9EREybTTmCfHv2Am8-Ek.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204729
IP address blocks: 2a0e:b107:1b9d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1a:b6:e1:57:63:11:9d:b5:6c:da:54:30:e0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dee4d1d6683d1111326d34e609f1efd809bcf849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:da:47:a7:4c:47:5c:cb:ef:37:aa:01:68:
a1:ba:c9:62:24:5e:8f:1a:9a:ee:fb:8e:f1:61:ee:
17:e3:04:28:81:1e:da:50:25:72:8c:cf:74:fc:98:
3d:fb:c6:e8:8f:76:9f:9c:62:23:7b:0e:70:bf:a0:
72:55:f5:6d:a6:7f:a9:42:ef:fb:58:b1:61:67:6e:
b8:76:2b:63:2f:d3:d0:b4:9f:84:69:b8:74:f5:e0:
d4:bb:42:74:cc:f5:f9:1a:a1:75:ff:3a:8c:62:67:
2b:7b:74:b4:fe:c9:59:a0:93:69:ca:11:a9:fe:e3:
9c:50:d7:65:56:38:df:29:0b:d3:bf:b4:14:9c:35:
c5:54:f2:49:8e:d9:80:47:3b:14:d3:01:76:0c:65:
34:23:40:1a:76:a5:21:a4:02:da:10:58:9d:ff:b8:
48:d2:fa:d4:ac:b8:2a:35:24:af:56:34:62:45:9f:
53:41:bd:0a:79:9c:6a:7c:a5:69:46:4a:7e:b7:99:
5e:1e:5d:54:7c:d6:ff:61:92:9e:27:3d:11:9c:87:
5c:a8:1e:7a:21:93:ae:f8:b1:e8:32:4a:e2:fb:83:
4a:40:8f:d3:5a:5d:31:39:92:22:eb:21:4d:62:fb:
4c:45:5a:d2:c6:e2:57:61:e1:9b:3f:5c:fc:fa:42:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E4:D1:D6:68:3D:11:11:32:6D:34:E6:09:F1:EF:D8:09:BC:F8:49
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3uTR1mg9EREybTTmCfHv2Am8-Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1b9d::/48
Signature Algorithm: sha256WithRSAEncryption
9f:54:cf:75:57:a8:68:27:06:8c:5f:2a:46:a8:f1:20:57:be:
2b:be:cb:b5:c9:91:fd:62:06:f0:9e:92:d7:3f:8d:b2:0d:97:
df:18:ea:f1:04:34:a8:6a:46:5f:47:b0:e8:6b:ba:d4:30:b2:
a1:50:0a:97:a9:c5:b6:41:d8:3c:09:e7:e7:4d:76:a6:30:46:
c6:c4:a5:d3:d1:00:64:6a:d8:2b:11:a7:ef:04:9d:b6:a6:58:
8e:c3:80:2a:18:33:fe:c8:9b:c7:2f:40:f5:cb:85:de:70:82:
96:d6:50:cd:24:b2:cf:ef:e1:50:d2:08:66:df:dd:37:3b:ef:
c2:01:1e:04:14:80:ac:02:0b:40:ed:34:f4:b2:17:f2:35:d7:
61:7e:05:7b:bd:c2:98:e8:97:7e:c8:49:01:37:61:c0:a5:31:
c7:9e:59:42:dd:f5:09:56:6e:d6:c2:f9:1f:8e:18:36:80:75:
b8:b8:8a:db:8a:72:66:a1:0f:ed:92:69:40:91:f8:a4:21:20:
23:a6:b2:b2:47:a0:8e:fc:1f:e6:00:1f:57:d5:4b:83:c9:aa:
91:3c:3d:c9:1a:9b:3d:92:db:5a:2d:1e:7b:ed:4c:4a:00:00:
44:c8:f6:28:5d:47:c4:f5:77:db:74:ce:56:69:e8:00:84:58:
06:78:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:01:37 2025 by rpki-client