Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4wvx2P2V5DgNHEkoSvXF0g7_tP8.roa
File: 4wvx2P2V5DgNHEkoSvXF0g7_tP8.roa (raw, json)
Hash identifier: 8EQbVtEiTKMcm425Vovh3t/Qhi5y4QsRbWZgJ2TUZQo=
Subject key identifier: E3:0B:F1:D8:FD:95:E4:38:0D:1C:49:28:4A:F5:C5:D2:0E:FF:B4:FF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521F6B3D3D207B8489E96C20B7C859E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4wvx2P2V5DgNHEkoSvXF0g7_tP8.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198316
IP address blocks: 2a0e:b107:1a60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f6:b3:d3:d2:07:b8:48:9e:96:c2:0b:7c:85:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e30bf1d8fd95e4380d1c49284af5c5d20effb4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:46:fe:af:78:d3:87:59:77:65:a1:b0:14:
fc:06:5f:6c:8e:f4:0f:ba:a0:29:d0:57:af:49:d5:
e9:e9:2a:3e:1d:51:b5:aa:d5:6d:c3:51:60:42:e2:
9f:5b:50:19:46:d8:55:1d:26:94:22:e5:4e:79:27:
bc:9d:f2:a3:bf:0f:7f:8b:27:db:8d:2a:fc:ff:ad:
5d:52:3a:b1:5d:22:df:27:06:9e:b8:62:05:56:26:
75:c1:ec:90:59:8e:89:dc:2c:fb:05:52:80:e7:a4:
76:6f:3a:25:4f:2a:c3:92:ab:47:41:1d:c9:98:0e:
4e:4f:88:72:96:b7:a7:75:62:32:3d:68:2e:71:29:
8b:8b:be:4d:f3:de:d1:1f:e0:a1:5b:2f:3f:ae:03:
53:9a:94:b5:55:f6:19:b0:1c:98:0a:bd:dc:5d:a1:
de:e1:36:b7:ba:4b:af:52:83:d3:bd:82:b2:d5:ea:
fd:02:bd:49:a2:3d:35:0c:7b:3d:3f:f7:7d:99:cc:
bd:f4:50:16:44:02:48:32:aa:26:1b:31:1c:c1:6d:
89:01:1e:12:0b:35:75:48:31:df:91:64:48:54:d9:
70:5f:58:9a:4d:04:44:9e:a7:77:00:5f:7a:5d:ea:
3c:96:8e:5c:c4:8a:2c:33:ad:64:8d:f2:1c:ca:fc:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:F1:D8:FD:95:E4:38:0D:1C:49:28:4A:F5:C5:D2:0E:FF:B4:FF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4wvx2P2V5DgNHEkoSvXF0g7_tP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1a60::/44
Signature Algorithm: sha256WithRSAEncryption
97:f6:21:05:6f:2b:83:50:25:6b:87:a9:c6:06:bf:3e:aa:19:
cd:dd:4b:28:bb:fd:80:73:00:ca:0a:e8:5e:2b:0a:30:55:bc:
9f:1a:ff:73:96:98:e3:7c:9f:49:61:8d:5a:f8:17:4f:16:90:
83:dc:83:da:b8:d1:4a:6f:6c:38:a6:78:b8:da:82:bc:c8:c1:
64:ec:2e:cc:e1:70:48:11:16:7b:9d:9f:85:3e:93:6f:c2:34:
fc:80:66:cd:fe:3a:82:41:b0:8a:ff:a3:b0:df:1e:f6:6a:22:
01:3e:af:58:f1:91:7e:94:4c:13:b2:28:4f:7b:fc:20:d6:84:
c9:5a:06:c0:04:5f:88:34:3b:dc:e7:f1:b1:a8:d5:69:e2:15:
64:f5:39:fb:7f:b5:7a:ef:26:72:aa:32:1c:a1:38:cc:35:42:
c2:7e:3b:19:24:eb:7a:8c:07:5f:d4:5d:a8:04:b5:0b:30:ee:
e0:da:03:12:87:b0:ae:4d:34:4b:25:0e:b0:7f:2d:f4:1f:71:
3b:c4:61:92:71:31:05:ee:1e:8a:5b:69:f7:d9:d0:44:39:8b:
cf:79:63:f5:1c:dc:57:5d:d8:50:8d:39:cc:af:5c:ea:2a:0b:
2a:5e:d9:05:7a:e0:5f:4f:02:c3:2f:97:21:1e:54:6d:6c:c2:
44:17:f9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:52:47 2025 by rpki-client