Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7-Kz-5KUzUnQRtvXzSzd3ttQqJI.roa
File: 7-Kz-5KUzUnQRtvXzSzd3ttQqJI.roa (raw, json)
Hash identifier: 3hCfg66vyrd1WyKMJ6BExeftzwnk8dgpa1w9xc3asYg=
Subject key identifier: EF:E2:B3:FB:92:94:CD:49:D0:46:DB:D7:CD:2C:DD:DE:DB:50:A8:92
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223480171A9973AC8146532DB3C446
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7-Kz-5KUzUnQRtvXzSzd3ttQqJI.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209218
IP address blocks: 2a0e:b107:a0::/44 maxlen: 48
2a0e:b107:ab::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:34:80:17:1a:99:73:ac:81:46:53:2d:b3:c4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe2b3fb9294cd49d046dbd7cd2cdddedb50a892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:75:c3:1a:bf:35:80:2a:8a:aa:86:27:5c:
cf:4d:a4:21:60:8a:4e:d2:be:9a:e2:33:ec:66:6a:
1f:ba:d1:f6:c8:c5:f7:a7:c6:c4:8b:14:ce:a6:80:
53:9e:2b:95:6f:20:7c:f9:92:fa:a8:9f:86:d3:27:
12:2e:d8:c5:63:5c:69:eb:08:98:b2:ce:aa:ce:fb:
93:bd:a3:11:0d:71:e5:36:02:6e:34:2a:08:fe:c6:
78:a4:a5:31:73:57:a9:4f:32:29:ee:70:b1:eb:21:
25:6f:30:5f:f3:1e:11:2e:52:6e:ac:fd:57:c0:bf:
28:19:42:57:9d:b6:ba:9f:36:21:a0:ac:a2:f3:2a:
be:46:22:ab:e6:bf:d3:a5:20:f6:7f:60:8f:60:51:
3e:aa:14:46:5b:fa:5f:e8:0a:d7:a8:01:71:ad:23:
07:af:e6:d0:ec:6b:f9:20:55:ec:21:2c:5e:b0:5c:
b0:26:ef:b3:b3:6e:f5:75:14:e6:23:ae:81:e2:ea:
7f:2f:18:f6:e6:45:d8:01:33:20:e8:29:09:f6:ee:
73:a0:6c:d9:3d:1b:3b:27:1f:da:96:7c:72:f3:21:
08:bd:e7:74:7b:07:45:82:77:f3:8e:53:d6:0e:9f:
89:d6:00:a0:4f:77:b6:c8:af:36:4d:18:c0:0c:8e:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E2:B3:FB:92:94:CD:49:D0:46:DB:D7:CD:2C:DD:DE:DB:50:A8:92
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7-Kz-5KUzUnQRtvXzSzd3ttQqJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:a0::/44
Signature Algorithm: sha256WithRSAEncryption
6d:00:9b:40:27:0d:e8:21:8f:96:bb:42:76:3e:15:e3:c6:88:
82:6b:93:d7:d8:30:18:fe:05:c7:71:4d:d4:52:4d:63:bf:65:
e7:0c:72:76:47:62:35:5a:e9:ad:80:24:30:33:37:d7:28:f7:
db:20:45:fd:7f:93:2e:05:19:0d:44:1a:7d:e4:0f:72:93:a3:
36:18:67:6c:5b:22:42:a4:f5:58:61:b8:fe:2e:be:0e:20:7b:
14:cc:90:65:87:38:05:7a:f3:16:6e:ef:bb:2c:c1:c5:25:66:
79:65:c5:5a:d1:18:6e:45:09:d0:84:9d:c3:bf:ef:92:f2:5c:
b8:a7:16:00:bf:ba:9d:28:d6:c8:fa:3a:07:fe:02:49:35:b4:
e8:67:08:54:e3:fb:26:95:95:bd:ea:4c:97:0a:4d:95:10:cc:
2a:7a:2c:83:27:87:a7:cc:08:d6:dc:0d:11:c5:cb:b3:3f:1e:
ea:5e:45:45:e3:ab:71:a1:e5:07:9a:c9:1b:50:8d:5f:a9:3a:
c5:11:35:c2:53:c5:aa:ca:43:8c:71:0c:60:ab:68:00:e6:33:
c5:5d:bd:2c:62:1f:6f:9c:8b:9d:fa:92:1e:80:ad:82:df:0a:
24:05:c9:f7:d1:03:db:6a:3b:b4:a1:96:e4:58:d8:7a:a8:fd:
ba:06:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:55:03 2025 by rpki-client