Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8e1hN5Wo4X_YBaHiMTclCiCePFo.roa
File: 8e1hN5Wo4X_YBaHiMTclCiCePFo.roa (raw, json)
Hash identifier: xwN+ttv/TRp1leAN9NNr6VvsKSKYJbQmlqhL5wn3lyk=
Subject key identifier: F1:ED:61:37:95:A8:E1:7F:D8:05:A1:E2:31:37:25:0A:20:9E:3C:5A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521CA4B6BAD1D903F59DFF2298D56B3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8e1hN5Wo4X_YBaHiMTclCiCePFo.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34800
IP address blocks: 194.50.99.0/24 maxlen: 24
2001:7f8:e7::/48 maxlen: 48
2a04:ccc2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ca:4b:6b:ad:1d:90:3f:59:df:f2:29:8d:56:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1ed613795a8e17fd805a1e23137250a209e3c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:e6:cc:05:d9:64:76:f5:da:25:cc:2f:6e:
4f:47:be:6c:d7:d4:62:d3:7e:23:23:aa:36:8a:3a:
c8:e8:07:2b:c8:c1:7a:32:d0:87:75:1e:a5:94:af:
4c:de:ad:b7:5a:78:39:0b:18:71:31:d7:85:6e:a6:
47:95:ca:fb:47:5e:43:5a:61:57:a5:5e:46:f3:25:
00:0b:25:0d:60:75:c4:eb:6f:3b:41:d8:18:05:d2:
19:5c:df:d5:36:03:76:ce:10:81:ff:95:96:ec:0d:
2c:47:00:6b:47:60:56:08:21:1e:93:a6:95:b9:be:
a9:90:02:fd:05:fe:8c:5c:68:28:24:54:66:70:b0:
cb:71:2c:a3:90:1e:7a:c0:1b:f9:81:92:46:99:e5:
b4:40:d8:7d:26:fa:9a:8b:74:51:f5:92:16:72:71:
c2:d3:0e:10:20:bf:fc:d6:26:5d:79:7e:cc:71:9c:
7a:b0:d4:ad:09:5c:d1:bb:ba:14:de:a0:35:83:1c:
a2:e2:ac:09:c5:b3:aa:44:3b:ff:dc:6f:23:de:44:
ad:d4:5e:93:2b:c5:c6:a0:92:40:b4:dd:bb:b3:b1:
95:5b:3c:f0:7f:50:ed:2f:93:f0:0f:73:6c:08:9e:
6a:0c:76:be:f8:4f:48:09:46:52:af:17:3c:dc:7a:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:ED:61:37:95:A8:E1:7F:D8:05:A1:E2:31:37:25:0A:20:9E:3C:5A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8e1hN5Wo4X_YBaHiMTclCiCePFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.99.0/24
IPv6:
2001:7f8:e7::/48
2a04:ccc2::/32
Signature Algorithm: sha256WithRSAEncryption
6b:8d:f2:46:3f:cf:3a:1e:d6:56:32:b1:19:60:c7:52:7e:8d:
a2:5f:d7:54:55:f8:f9:c1:3d:1b:39:8f:99:82:fd:60:7b:7e:
ba:2e:47:15:92:b3:ec:75:e9:f5:f5:af:c6:a1:62:6b:55:82:
38:7e:8b:c6:92:ea:09:2f:eb:d5:3d:1a:f3:69:b3:b3:7b:0d:
5e:5a:01:b8:f4:86:c2:55:b8:ec:43:c9:8c:f0:dd:32:87:c0:
d6:40:42:34:c5:e2:45:ad:67:3e:d5:e1:9f:cc:4c:36:2f:a8:
88:5f:cc:20:8d:60:ec:61:62:e9:b2:11:b8:91:75:d0:99:ea:
d3:a6:60:75:97:8e:84:9f:ec:5a:16:21:25:8c:62:41:58:2a:
f2:57:59:14:19:4e:66:08:be:36:1e:9f:84:7c:2f:78:b9:52:
7c:4d:4d:82:78:d3:8c:be:f0:1f:1a:36:c6:f7:13:95:02:e0:
f8:25:04:fd:98:3d:f1:2f:41:7c:dd:65:41:05:de:3d:04:05:
5a:53:69:4c:39:b1:47:24:0e:a7:73:f3:b1:f5:13:0c:e4:e6:
e4:dd:cb:ea:8a:09:96:b0:2c:ea:99:1d:17:ab:b7:dd:fe:4d:
10:fc:97:d4:19:fa:c0:36:c1:3d:9a:8b:08:94:d3:25:93:4d:
74:e5:f3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:47:56 2025 by rpki-client