Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4M6PQkTw74TZADn_tBZ3wJJtaFc.roa
File: 4M6PQkTw74TZADn_tBZ3wJJtaFc.roa (raw, json)
Hash identifier: qkvCH3y6P1n2ETwxrbMZOqY017KdJUEW/g2aITpAVM0=
Subject key identifier: E0:CE:8F:42:44:F0:EF:84:D9:00:39:FF:B4:16:77:C0:92:6D:68:57
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522240D540BED566AC0635DB42D513D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4M6PQkTw74TZADn_tBZ3wJJtaFc.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206981
IP address blocks: 2a0e:97c0:6a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:24:0d:54:0b:ed:56:6a:c0:63:5d:b4:2d:51:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0ce8f4244f0ef84d90039ffb41677c0926d6857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:cc:66:74:59:b8:90:30:39:95:79:c2:a4:
3a:f1:e5:1f:ed:f8:84:61:4e:6d:76:5f:05:bd:35:
03:32:8f:63:ef:8f:6d:a1:fe:42:b0:51:7b:6e:4b:
ee:11:15:9f:6a:5d:6c:8e:1e:f5:78:2e:d8:7c:c0:
27:18:84:c8:17:92:57:c3:80:39:7a:f2:2a:ae:58:
fe:4f:3b:24:ab:ed:34:5d:80:ed:a6:d0:01:3f:d5:
b9:39:88:86:44:e9:cc:a6:25:c7:c4:82:b0:e6:94:
45:d7:03:c6:11:9e:01:d1:55:3e:a2:5f:91:40:86:
fa:29:84:a3:67:3b:62:66:e0:e2:b9:a8:7e:70:32:
9f:34:cb:59:3b:39:fa:d8:a4:3f:6f:f0:99:4a:11:
b9:a4:ec:8e:6c:3b:8d:0e:21:d9:6b:6d:1a:3f:d8:
c3:2e:e1:6e:96:fa:26:ef:b1:c2:73:a1:f8:5e:76:
34:b2:0c:d4:3d:18:f1:41:35:ac:39:b2:ff:a9:4d:
ce:5f:40:50:7b:42:41:21:b9:96:9e:f7:b7:61:7a:
09:22:0a:b6:00:ef:ba:a3:b1:8a:50:66:07:8e:fa:
97:7b:3c:e8:2c:82:ee:75:a4:a0:72:f4:49:d1:82:
94:87:74:88:28:8e:04:3b:65:79:07:66:8b:78:bc:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CE:8F:42:44:F0:EF:84:D9:00:39:FF:B4:16:77:C0:92:6D:68:57
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4M6PQkTw74TZADn_tBZ3wJJtaFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:6a0::/44
Signature Algorithm: sha256WithRSAEncryption
62:8e:45:98:95:7d:8b:56:63:6b:14:5b:9c:ca:a6:cf:ac:7f:
90:8e:56:27:02:ee:a9:3e:18:40:69:c0:c3:bb:e0:34:d4:ad:
44:46:a7:12:f1:c8:b4:9f:93:51:fe:14:ec:ee:fe:b0:fc:d8:
1e:b3:45:33:5c:e4:5c:23:ca:87:19:18:9e:ff:46:b0:e5:7a:
31:0f:4e:45:65:60:7e:10:10:9d:a0:cd:c1:1f:e0:9d:0d:f1:
5f:ce:7e:ee:5a:16:eb:7f:f0:47:ff:8a:81:c3:f1:c8:43:97:
da:64:c3:62:dc:0a:d4:d5:f8:8b:26:3a:34:7b:39:f9:09:b4:
12:17:07:c8:5d:57:e3:d4:c0:ff:2b:f9:4e:83:0a:19:64:c9:
bb:6f:ea:de:5b:de:b9:17:d2:b2:02:93:c7:21:5f:46:ac:4b:
d9:7b:78:81:49:a4:89:42:71:b1:f2:7c:52:7d:24:b4:f5:a3:
46:8c:36:c9:c1:ef:65:84:f9:01:7a:fc:8b:c1:42:9b:4c:d1:
94:89:67:4a:e7:e5:33:f8:e2:f5:19:3d:0e:40:52:49:37:4f:
21:81:3b:d7:a3:fc:22:7e:34:3b:b3:65:da:ca:ef:10:7a:f5:
4f:7c:94:2c:66:14:a6:fd:26:3e:33:53:66:c4:a7:5c:d3:78:
dc:d4:1a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:43 2025 by rpki-client