Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6qD2sKiRuSQ2XNwo5IbNB-vYLMk.roa
File: 6qD2sKiRuSQ2XNwo5IbNB-vYLMk.roa (raw, json)
Hash identifier: h458ZiLZu9bWHwgWMEDydDbT2uTnzkv7PInEMEoupS0=
Subject key identifier: EA:A0:F6:B0:A8:91:B9:24:36:5C:DC:28:E4:86:CD:07:EB:D8:2C:C9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425222A9360B10895608E401747C04E2D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6qD2sKiRuSQ2XNwo5IbNB-vYLMk.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207852
IP address blocks: 2a0e:b107:270::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2a:93:60:b1:08:95:60:8e:40:17:47:c0:4e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaa0f6b0a891b924365cdc28e486cd07ebd82cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:e8:d4:f8:8e:01:e4:e3:b9:81:f6:36:3e:
dc:b2:1f:64:03:e4:61:6f:33:58:57:7d:0c:13:cf:
3a:58:6f:b6:31:c3:f6:7e:a4:04:89:e2:b2:87:e0:
02:2f:95:b0:de:fb:fe:ea:e8:0f:98:71:8d:ba:a3:
44:62:3a:82:75:9e:0b:1d:26:8e:68:a5:08:37:c1:
5b:32:b3:36:e6:5a:5c:49:7c:45:66:c8:cf:4a:f7:
20:93:a7:2c:1c:7f:73:e6:7d:46:82:80:45:da:44:
e5:ae:60:35:7d:d8:0f:1c:63:d5:a0:03:cb:d6:d6:
0c:a7:1a:29:ef:fd:41:df:94:81:f8:64:33:b1:bd:
d8:5f:d8:e8:63:c0:1e:1b:94:54:ef:89:cc:74:8d:
cf:58:fa:23:69:1d:95:92:44:11:9f:5b:c3:b3:0f:
b4:5e:2d:ad:52:27:c9:09:8c:6e:7c:40:a1:8f:71:
fb:9b:8e:f5:93:32:16:7b:94:97:27:6c:69:b6:df:
e8:f8:17:6b:be:43:cd:3b:ff:00:76:68:ff:ef:2f:
9a:ce:ae:78:34:5c:e8:67:7b:51:8e:fa:07:90:d1:
94:86:d6:0c:7c:1a:9b:ce:8f:27:8c:49:37:55:41:
d7:9c:c7:e9:05:2b:fc:36:24:5c:03:81:f3:0d:08:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:F6:B0:A8:91:B9:24:36:5C:DC:28:E4:86:CD:07:EB:D8:2C:C9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6qD2sKiRuSQ2XNwo5IbNB-vYLMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:270::/48
Signature Algorithm: sha256WithRSAEncryption
46:73:64:77:35:e3:ed:2b:dd:c5:6f:80:e4:6e:38:4e:07:2b:
52:68:0f:e7:33:86:4f:ae:e6:ba:55:4e:e0:1f:28:eb:76:63:
e7:ff:89:7c:53:76:03:39:72:77:53:7b:45:dd:90:82:37:ad:
ba:a3:cf:5a:a3:d8:65:36:78:a3:1c:44:c0:ad:05:b3:f8:5a:
b3:f3:98:9e:03:3e:26:76:7c:37:7d:a9:ba:6f:a8:3e:18:cf:
c2:6d:bb:15:55:1c:dc:0a:0b:6b:61:ab:d0:0a:04:50:ee:63:
e6:10:84:a0:ba:d6:fc:f6:30:1c:28:78:36:25:f9:9c:04:99:
b3:2c:93:ed:1c:82:37:e6:21:79:b8:5a:d0:e6:b8:51:31:77:
28:35:04:38:2f:e3:81:17:f4:50:6d:e0:3b:d7:c1:a9:af:bd:
fb:4d:d8:77:c7:cd:17:d7:9f:ae:bf:b8:6a:b0:7f:c8:3b:5c:
73:4c:54:8e:bc:92:2e:b6:ba:65:a6:b1:b6:48:15:ec:79:28:
70:26:0f:90:d2:73:84:b3:e5:07:b5:f3:b6:4e:88:fa:64:17:
ed:59:d3:4d:6f:0b:60:a4:f2:50:cf:ab:a7:83:62:d1:68:e9:
94:8b:68:50:25:a5:9e:63:8d:ea:a5:63:e0:aa:9a:7c:1f:e7:
97:f7:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:43:42 2025 by rpki-client