Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5cJExC32rBiQWCfOo4nKBApnwcc.roa
File: 5cJExC32rBiQWCfOo4nKBApnwcc.roa (raw, json)
Hash identifier: SzpUXvf0V8pjlGKmZUCvivqfNp8TbOacmhDUHxJS+hg=
Subject key identifier: E5:C2:44:C4:2D:F6:AC:18:90:58:27:CE:A3:89:CA:04:0A:67:C1:C7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425222AF9971B12ED6053406F195D79CF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5cJExC32rBiQWCfOo4nKBApnwcc.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207890
IP address blocks: 2a10:ccc0:6960::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2a:f9:97:1b:12:ed:60:53:40:6f:19:5d:79:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5c244c42df6ac18905827cea389ca040a67c1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:f0:51:f5:b3:9b:41:b6:bd:ba:6c:95:36:
b6:5a:4b:73:bc:35:94:25:27:05:c4:b2:b9:87:22:
a8:3d:0d:ea:4c:4a:a0:2a:e3:9a:7d:fa:bc:14:eb:
47:d1:bb:57:25:f7:9d:3f:e2:4e:60:10:ff:94:15:
bc:e9:48:53:3a:df:c8:2f:9d:e1:96:1a:23:23:85:
96:ed:9a:6a:98:30:a6:03:ff:94:24:0a:f2:d8:cc:
20:fb:66:d4:b5:a4:71:8c:f2:9b:b6:c3:e5:24:fb:
d1:e5:c1:7a:b3:8c:48:ff:3a:51:ed:dc:0f:90:34:
28:41:c4:ed:ba:af:3d:16:02:8a:d8:1a:c2:e2:a7:
19:4c:5b:fa:79:d2:16:ea:dc:c7:13:b6:33:fb:d0:
f2:e5:82:c9:18:e7:80:53:9d:3e:b6:5c:b7:e2:2f:
a7:9e:ff:ba:68:a6:fe:89:ab:5c:e4:94:f6:43:4d:
b3:f9:a3:d3:72:cf:23:4b:b1:71:67:b1:9f:18:83:
bf:dc:73:85:06:ab:a8:67:41:47:6d:70:22:b5:a3:
31:10:2a:d3:7a:72:55:d3:71:f3:4a:35:8c:bf:8d:
ca:15:d9:75:23:68:92:4e:cf:93:f6:bb:fb:4a:ff:
72:01:e0:21:14:f2:26:1a:7d:e9:fa:ba:0e:19:ee:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C2:44:C4:2D:F6:AC:18:90:58:27:CE:A3:89:CA:04:0A:67:C1:C7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5cJExC32rBiQWCfOo4nKBApnwcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc0:6960::/44
Signature Algorithm: sha256WithRSAEncryption
52:96:0b:1f:11:6c:9e:9d:32:7d:cc:24:a4:ed:ee:19:64:80:
aa:66:cc:5e:c8:65:6a:04:00:02:25:b8:10:95:0a:5f:ae:b2:
b0:b0:9c:71:9b:43:d7:53:79:70:eb:f4:62:da:c5:b1:10:af:
43:9e:7f:b6:68:96:d8:60:44:f3:7e:94:ed:a1:1e:af:1e:95:
e1:d8:3d:7d:d5:94:d2:1f:14:e1:ec:26:70:0d:c6:43:90:7d:
33:84:f4:dd:d6:8d:a4:c3:c6:45:1c:08:a9:89:0f:5d:8c:71:
74:75:f3:62:4c:fb:b7:9b:17:c4:00:86:3c:97:9f:0a:6c:aa:
12:bc:3d:9f:11:6b:93:40:6d:df:34:e2:58:c6:07:c9:8b:e6:
15:8a:7f:a3:72:b5:5f:69:58:d8:67:00:89:3e:6a:af:c6:3f:
f9:25:04:b5:26:09:9c:0f:58:67:0e:d2:6d:61:d9:8e:cd:8f:
9b:51:03:f9:2c:ae:29:cc:ac:0c:c7:e2:c4:f4:cd:4c:87:03:
be:17:d8:63:5c:fb:a6:c3:72:ef:25:36:f8:7a:42:08:a5:10:
16:95:99:00:3e:6c:53:be:68:34:29:5c:ec:07:20:77:a2:cd:
5d:a1:0d:9c:ee:27:f3:3f:5f:ad:e1:50:aa:9b:3b:ae:89:77:
49:97:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:46:18 2025 by rpki-client