Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4Yopav2ju2Ibn6cEDHj256E90rY.roa
File: 4Yopav2ju2Ibn6cEDHj256E90rY.roa (raw, json)
Hash identifier: Nt1IxAqqbWhtrQ/LCfHQ0VQ07lsQcOCYEY/AU2NyYAs=
Subject key identifier: E1:8A:29:6A:FD:A3:BB:62:1B:9F:A7:04:0C:78:F6:E7:A1:3D:D2:B6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521E410F6B9FAFC62C41411731E2523
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4Yopav2ju2Ibn6cEDHj256E90rY.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139328
IP address blocks: 2a0e:b107:1d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e4:10:f6:b9:fa:fc:62:c4:14:11:73:1e:25:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e18a296afda3bb621b9fa7040c78f6e7a13dd2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ce:43:bc:c9:cf:ed:c9:4b:08:5e:ed:99:27:
1e:dc:c1:65:e3:85:2e:68:a8:18:50:65:c3:74:1a:
f7:a9:d6:eb:66:83:3e:de:35:51:ba:d8:5b:1e:a0:
66:82:5c:fd:29:bd:b3:3f:5b:3c:09:e6:4f:99:be:
d9:e9:f7:e8:8d:cc:cd:b2:be:2a:e3:8f:f4:a4:12:
8b:5e:cf:c5:a8:3d:9d:80:c5:33:93:68:b8:66:c5:
a8:09:7e:ba:9c:4a:26:9c:27:0e:70:b8:be:a3:1a:
96:f5:8e:85:c2:ee:40:6d:29:90:d6:c3:ac:ee:b4:
5f:44:45:13:a8:a4:95:7c:38:92:4a:b6:bc:81:aa:
d4:03:f9:74:cb:7c:d7:4c:aa:36:24:6b:0c:0d:97:
ca:03:ce:89:de:32:7b:b1:d1:88:0d:ad:15:bf:66:
1c:9d:0e:09:6a:3c:7f:41:36:45:19:56:30:29:ca:
50:59:ed:ac:40:71:8e:35:40:3f:ef:ab:c4:c3:96:
17:44:95:38:97:72:a8:11:60:25:c4:64:fc:ed:fb:
1e:73:84:0a:80:40:b4:3d:05:73:53:70:95:f2:09:
90:c8:cf:fb:e1:ec:f0:c0:25:6a:71:fe:67:ec:ac:
6b:c0:2f:05:44:78:16:6f:cb:a3:ac:06:bd:91:85:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8A:29:6A:FD:A3:BB:62:1B:9F:A7:04:0C:78:F6:E7:A1:3D:D2:B6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4Yopav2ju2Ibn6cEDHj256E90rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d0::/44
Signature Algorithm: sha256WithRSAEncryption
89:ea:58:16:3f:de:89:06:c8:15:b0:df:ab:2c:ac:f6:19:c5:
3d:3f:5c:31:c4:57:7d:34:61:e3:a8:3a:82:8e:25:ca:9f:2d:
dd:d2:3d:e2:68:0c:2a:b0:68:cb:05:50:b4:ef:b0:6a:ed:8f:
34:20:af:9e:f3:90:25:c6:91:16:96:33:74:5f:58:6b:78:45:
eb:a0:05:3e:4c:02:68:24:c1:87:85:87:0b:43:b7:2b:9d:2e:
da:d7:c8:a9:a6:05:32:30:f9:fe:c5:da:3d:8b:c3:68:47:61:
a6:f5:71:eb:60:d1:b6:76:cf:7e:f6:c8:db:3c:a6:b7:a7:94:
0d:df:68:47:7e:b1:6a:11:8c:24:03:a7:7f:8e:4c:f5:d6:8f:
4d:67:08:c9:ae:a0:5b:22:4a:49:0c:ec:fc:6b:71:d1:ae:7d:
54:03:64:e3:f7:03:69:ba:07:70:24:1a:51:8e:c0:2a:07:c9:
61:db:a1:9b:f0:2e:81:89:8b:08:d0:f1:67:3a:b4:49:41:37:
2c:29:23:6c:6c:c1:ff:ae:19:cf:6d:29:2d:d1:21:dc:4b:7b:
a6:ca:17:72:4f:06:e0:f1:73:70:a8:09:f6:b1:ea:c3:91:c6:
1b:d6:57:c9:06:55:89:9a:dd:9b:88:d3:64:f2:d7:bf:6b:ad:
29:2b:8d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:53:00 2025 by rpki-client