Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7w8jO8QYwndeqvJyVkKs693UQKA.roa
File: 7w8jO8QYwndeqvJyVkKs693UQKA.roa (raw, json)
Hash identifier: kClNUUmFqbOxOzeqlZCAi6J+nmM3rpIjZt5LRfq9EMw=
Subject key identifier: EF:0F:23:3B:C4:18:C2:77:5E:AA:F2:72:56:42:AC:EB:DD:D4:40:A0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522456CB5E484EF382CEF17A6202EC4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7w8jO8QYwndeqvJyVkKs693UQKA.roa
Signing time: Thu 02 Jan 2025 03:49:50 +0000
ROA not before: Thu 02 Jan 2025 03:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210842
IP address blocks: 2a0e:b107:1600::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:45:6c:b5:e4:84:ef:38:2c:ef:17:a6:20:2e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef0f233bc418c2775eaaf2725642acebddd440a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:7c:0a:63:3f:73:49:bf:ae:f7:7c:0c:a8:
0b:1f:36:66:d7:58:42:29:37:8d:00:4e:eb:1c:ef:
ae:7e:67:e4:ec:f1:1d:7a:2c:c1:2f:a5:17:6e:2a:
88:ac:cf:8f:d4:e6:58:72:e9:b9:d2:e9:43:32:38:
85:cf:c5:34:0a:6d:4a:17:dc:64:34:eb:c3:94:b4:
07:cf:01:7e:d4:06:83:45:f9:00:b0:01:22:9f:2b:
4c:23:ce:36:3a:71:bd:1d:1f:4a:5b:a1:1d:a4:7e:
e6:77:cd:57:28:6c:fc:d5:f4:9b:a5:af:06:4b:46:
e6:49:0b:b1:98:ff:06:f0:a9:cf:22:42:db:29:90:
53:a5:44:09:9c:d2:3b:36:ae:50:82:e4:99:70:52:
e5:ef:af:a6:6a:45:56:e6:77:5d:1e:6a:09:5c:59:
48:a0:ce:d1:02:44:75:4e:01:f4:88:6b:a9:98:ab:
c1:5b:cb:03:1a:2c:0e:6f:aa:a0:74:9a:4f:42:da:
f7:18:be:3c:1f:c1:15:4a:89:33:39:98:d5:63:96:
f3:33:61:2d:5d:81:e4:1e:23:0c:c2:82:6c:81:99:
85:11:cf:15:53:2c:75:28:75:60:8a:b8:50:b8:8d:
af:01:85:e8:f8:e4:5a:a8:db:e9:e3:51:15:f2:16:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0F:23:3B:C4:18:C2:77:5E:AA:F2:72:56:42:AC:EB:DD:D4:40:A0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7w8jO8QYwndeqvJyVkKs693UQKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1600::/44
Signature Algorithm: sha256WithRSAEncryption
23:25:6f:18:05:e3:d9:97:c5:1b:66:1b:83:d1:8c:10:5e:a0:
99:67:aa:b1:88:19:6a:70:01:d6:4b:6f:b5:45:ea:60:65:0f:
b2:59:b5:c5:c6:5d:63:d7:9a:ef:95:c2:9e:93:2c:e4:7b:1d:
90:e0:66:a0:dd:47:7f:30:af:4c:2b:81:53:f9:bb:27:1f:55:
0d:27:6b:17:c0:20:da:e2:4f:4a:56:f8:62:40:62:55:2f:b0:
2b:92:d7:c4:26:4f:06:39:57:04:dc:ab:df:1b:4e:10:d5:0a:
ad:ee:11:14:2d:7a:1c:d9:c8:b7:c5:3c:4f:65:19:f5:ff:8c:
cb:b5:58:55:d8:9c:80:94:96:ec:d9:77:1f:f3:99:a4:51:b9:
f9:a2:61:42:47:73:b7:48:e0:f2:f9:0e:68:77:db:60:55:f9:
df:c2:75:8e:60:42:d0:c3:2e:ef:75:5e:0d:37:cf:7d:99:24:
3b:16:a4:60:92:d9:99:2e:7c:58:43:65:b4:a6:52:9c:9c:4f:
ce:de:ed:bc:57:e6:bd:c7:0b:3c:9e:93:3c:d9:71:fb:d5:5d:
ab:58:7a:08:b7:6a:17:c1:88:66:af:a4:d1:e3:40:87:8a:62:
f6:01:38:06:4e:a7:38:de:fd:9c:33:5d:e6:3a:78:fe:ee:ef:
46:64:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:39:52 2025 by rpki-client