Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7sctsFpWPFptvLU0W4bymsYHL2Y.roa
File: 7sctsFpWPFptvLU0W4bymsYHL2Y.roa (raw, json)
Hash identifier: 1gCRr6Rg7VLwkxXkE2c6k1zmLn/qMcfaPitiwjd95gw=
Subject key identifier: EE:C7:2D:B0:5A:56:3C:5A:6D:BC:B5:34:5B:86:F2:9A:C6:07:2F:66
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252232C8A0780EFC93996E69F2837C9C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7sctsFpWPFptvLU0W4bymsYHL2Y.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209101
IP address blocks: 2a0e:b107:510::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:32:c8:a0:78:0e:fc:93:99:6e:69:f2:83:7c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eec72db05a563c5a6dbcb5345b86f29ac6072f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:05:33:f1:8e:c1:25:b1:9c:41:ed:d6:a7:
cb:18:01:ca:76:c8:57:72:1a:76:6f:d5:aa:cc:79:
2b:32:a9:ed:1d:36:a6:0e:8c:45:ed:a0:9f:41:6d:
f1:5e:9e:75:23:b0:0b:71:74:67:d2:3f:91:15:8e:
24:3f:a0:90:9e:7c:8c:fa:e5:b3:32:be:05:90:18:
29:b3:87:09:b5:e5:69:68:f5:88:2f:d5:84:00:ca:
64:d7:5f:d9:f3:c0:a4:09:ec:bd:84:7f:91:e4:05:
9a:ed:82:7b:cd:a9:9c:e9:fb:25:50:e3:9f:56:eb:
0d:87:8a:94:17:6a:75:1a:65:07:f8:f3:7e:cb:7c:
06:89:2b:fd:fd:6d:11:4b:c1:67:97:09:3c:29:a7:
87:79:0f:b6:bd:02:fb:84:16:0f:81:a3:e3:70:e9:
34:71:8c:31:2f:1e:bb:2f:b6:f9:97:27:c1:e4:dd:
c5:dd:a3:8d:45:58:80:13:11:a8:bb:51:dc:67:98:
b1:95:df:69:e2:3a:a0:3c:8d:2a:59:d9:43:48:ea:
9d:1c:6d:79:9e:2a:d3:c2:3b:21:ee:c6:1c:f1:c8:
14:21:57:c0:c6:0c:45:33:17:a6:ba:67:d6:35:be:
e1:b0:1c:e0:fd:dd:3a:50:96:d3:a9:ff:4e:b3:4e:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C7:2D:B0:5A:56:3C:5A:6D:BC:B5:34:5B:86:F2:9A:C6:07:2F:66
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7sctsFpWPFptvLU0W4bymsYHL2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:510::/44
Signature Algorithm: sha256WithRSAEncryption
80:17:4b:16:f7:8f:c5:d7:fa:53:55:8c:b4:32:2a:08:95:9e:
49:88:11:d9:61:cf:f2:e2:5d:28:84:f4:cc:ae:d5:67:73:5e:
85:3b:ec:0b:80:9c:c1:d0:b7:42:b7:0c:05:a3:cb:96:b0:d4:
a9:5a:a9:3e:ee:dd:42:34:33:24:cb:24:f1:5f:71:e6:4d:96:
80:6c:23:31:f6:cb:f9:24:cf:d2:87:e5:2e:2c:73:3f:d9:2b:
00:2b:54:0b:d3:43:68:16:99:82:2c:de:8b:b6:c6:a1:18:7d:
82:18:41:4d:93:44:2d:bf:eb:a4:cb:94:77:6e:f2:64:dd:a6:
00:be:1d:dd:77:b1:09:90:e5:22:c4:f7:97:d1:80:88:f0:8d:
e8:e3:eb:e6:96:26:f6:b4:a0:8c:bc:81:e9:90:ae:98:ab:a4:
e1:9c:81:7b:26:fb:79:c7:06:86:aa:53:21:cc:b8:45:ee:e5:
52:82:1b:e5:c4:86:9e:6f:71:ff:72:10:6c:96:27:d8:c4:2d:
8f:55:fd:21:76:a1:15:a8:d7:1e:46:d7:65:16:8b:2f:37:6d:
cf:78:38:93:60:7d:e0:5f:1f:f7:aa:56:2c:50:4a:ba:5a:a4:
9e:d8:a3:a0:ed:77:bf:43:27:0e:28:b5:85:7e:27:3f:b9:30:
32:a1:1d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:08 2025 by rpki-client