Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6DdMxdZWSSgor2D6fAgz3ml3un8.roa
File: 6DdMxdZWSSgor2D6fAgz3ml3un8.roa (raw, json)
Hash identifier: uTPCW0l+ZzY0cIcNOmgivK+g7PfLcDMztvR3nBd5DMA=
Subject key identifier: E8:37:4C:C5:D6:56:49:28:28:AF:60:FA:7C:08:33:DE:69:77:BA:7F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D35C9ACE8641587A69D41CC86EFF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6DdMxdZWSSgor2D6fAgz3ml3un8.roa
Signing time: Thu 02 Jan 2025 03:49:21 +0000
ROA not before: Thu 02 Jan 2025 03:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48791
IP address blocks: 2a0e:97c0:c60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d3:5c:9a:ce:86:41:58:7a:69:d4:1c:c8:6e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8374cc5d656492828af60fa7c0833de6977ba7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:ac:48:bb:32:be:6b:5e:5c:34:a3:96:e1:
7b:1d:d7:14:5b:f8:b2:1e:aa:fd:76:45:6d:6f:44:
0f:26:2b:da:7b:c7:80:36:ae:64:be:24:e7:51:3f:
13:d3:7f:1c:4a:1d:2a:4a:d8:dc:fc:b2:5e:18:f1:
c5:89:b4:c8:5d:c5:88:a4:c0:8c:3e:d8:9e:ea:43:
f5:72:f9:ed:2b:ac:b8:a1:50:ec:70:d0:da:90:0f:
b3:92:f5:7e:20:f5:57:33:86:18:1b:85:1b:cd:c6:
3b:6f:f0:03:cf:17:bd:01:62:9f:03:63:45:a7:6e:
c8:e8:96:f8:d0:0d:02:35:99:c4:19:c3:77:cb:ea:
6b:fe:56:e5:ed:ac:6e:77:58:c8:7d:c2:c6:98:9e:
eb:c9:79:d6:98:45:19:3d:14:87:c0:06:20:48:88:
53:fd:16:b0:2f:f2:db:0a:66:52:96:a2:fd:c4:82:
0a:31:a2:62:ae:bd:e3:4f:fb:5c:c9:e8:7d:18:3c:
62:53:56:ac:41:b9:2b:50:f3:03:99:ab:27:72:67:
e6:9d:4f:0f:d3:ad:16:49:fb:62:a6:bb:2d:1d:4b:
ae:6b:27:97:86:79:dd:14:9d:5c:8e:d2:f8:aa:23:
e6:e7:b4:40:86:ae:90:02:d6:66:cc:f5:48:26:2e:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:37:4C:C5:D6:56:49:28:28:AF:60:FA:7C:08:33:DE:69:77:BA:7F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6DdMxdZWSSgor2D6fAgz3ml3un8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c60::/44
Signature Algorithm: sha256WithRSAEncryption
8f:c5:fe:eb:37:21:63:4e:93:f9:4c:57:b1:2d:b8:9d:00:19:
c5:ed:8a:94:f5:a2:11:5f:90:8f:de:64:b6:04:10:d5:c1:4a:
0d:e7:1e:45:a5:fb:19:95:92:bb:d7:f0:cc:f8:35:03:a8:5a:
cc:62:00:d6:af:3f:f9:34:d4:d8:f9:68:05:8f:1c:5a:84:f4:
8d:3c:70:5e:5c:68:02:3a:ca:93:75:9e:89:9b:fe:bf:d4:9b:
0e:80:b6:65:8a:7a:66:55:66:33:b8:f8:c9:33:1a:6d:4f:f9:
b4:b7:bf:cc:eb:97:b0:18:14:df:15:c8:9c:16:9c:75:0f:00:
64:96:ee:6a:72:18:7b:2e:8d:92:b6:bd:17:49:b1:e6:ec:12:
14:57:6f:d9:18:65:fb:ba:33:11:33:ef:94:2c:17:a2:27:1d:
35:ab:83:c6:51:da:3d:c9:4a:ec:fd:30:43:0f:d9:42:cb:85:
cf:d8:a2:6c:fd:e7:13:41:2e:04:8a:9c:f2:3d:a7:f9:e3:80:
d3:84:8d:f7:32:7d:ca:ee:25:c4:46:66:2e:c5:57:13:f0:13:
a7:31:18:67:7e:7c:76:e8:fd:72:90:26:5d:2e:2c:a0:38:bf:
0c:ce:3f:03:56:26:0d:f5:ef:ac:3a:73:85:fe:d1:fe:a9:ff:
01:b6:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:39:43 2025 by rpki-client