Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8jPtxCxNv4Qh6m7qKWo56qFdRdM.roa
File: 8jPtxCxNv4Qh6m7qKWo56qFdRdM.roa (raw, json)
Hash identifier: J6TY2Y9iqZC67mMV1/pJkc7A6nRNLGAvuvV+vIS1EBw=
Subject key identifier: F2:33:ED:C4:2C:4D:BF:84:21:EA:6E:EA:29:6A:39:EA:A1:5D:45:D3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425225EB4A1E34A16DB8088A22DF6657B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8jPtxCxNv4Qh6m7qKWo56qFdRdM.roa
Signing time: Thu 02 Jan 2025 03:49:56 +0000
ROA not before: Thu 02 Jan 2025 03:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212294
IP address blocks: 2a0e:b107:1ba0::/44 maxlen: 48
2a0e:b107:1bb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:5e:b4:a1:e3:4a:16:db:80:88:a2:2d:f6:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f233edc42c4dbf8421ea6eea296a39eaa15d45d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:41:a4:16:8a:f0:16:d2:dd:33:7b:bd:ed:
62:23:74:04:af:a1:7b:9c:52:e6:10:e0:08:f4:02:
89:a8:43:29:45:4d:1d:6d:cc:86:2a:bf:c3:0c:68:
c1:37:be:af:7b:7d:26:82:70:cb:37:fb:a2:32:ba:
a5:60:cd:de:16:75:a7:3c:39:38:ca:70:77:41:ad:
a4:08:2a:a0:35:04:29:a1:a7:26:27:86:7a:d6:1f:
26:0b:d6:34:cd:c6:16:d0:0f:52:c7:ae:c2:b8:c7:
d5:c5:ab:11:73:c5:92:32:d4:3e:aa:79:e3:fe:9c:
28:90:6a:db:30:c4:b3:49:a6:67:b0:2d:04:89:0b:
9a:13:18:bb:f1:0d:1a:72:fb:af:31:93:1f:e9:00:
42:69:49:f6:e4:a3:a9:77:de:d0:87:57:94:c7:1f:
92:9a:64:dd:bb:e9:f6:db:5e:69:1c:2a:3e:de:9b:
9c:06:59:f1:c0:3f:23:a3:c7:d2:ad:d1:ba:c9:67:
1f:97:65:4c:2a:04:63:9f:02:d7:8c:af:37:06:c7:
e1:2e:93:6f:d3:d6:b2:5e:9d:4a:c8:ee:3b:30:9b:
90:67:31:b3:d3:22:4b:64:a7:2c:d8:64:ec:1a:04:
9c:8f:e4:68:9a:97:79:45:15:82:c8:dd:53:c5:1d:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:ED:C4:2C:4D:BF:84:21:EA:6E:EA:29:6A:39:EA:A1:5D:45:D3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8jPtxCxNv4Qh6m7qKWo56qFdRdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ba0::/43
Signature Algorithm: sha256WithRSAEncryption
b7:43:e0:c3:64:76:9a:d0:6d:cd:b4:d2:ac:2b:13:0a:98:68:
bb:94:90:bb:b9:85:10:7d:5e:29:fc:7b:72:e3:0c:4e:b9:53:
de:f5:08:07:42:85:33:a9:03:e2:40:ef:64:92:e4:0d:1c:ac:
9e:a4:d5:d7:2f:45:2b:b6:b0:e4:47:7e:0a:5f:7a:62:3b:17:
95:a3:54:42:1e:0e:ff:d4:b2:b4:01:05:b2:17:9d:b5:c4:37:
84:20:34:4c:37:26:5e:63:48:39:6f:e0:a1:3e:02:46:f2:fd:
ed:6c:31:24:e3:68:5a:47:92:a8:e8:06:4d:be:ea:dd:7a:1e:
72:38:8e:7a:69:fa:9b:54:b0:31:ad:7e:f0:34:d0:51:8e:7e:
51:4b:eb:29:f8:2f:63:46:e7:78:b8:14:67:b7:8a:57:f8:16:
39:74:df:f7:3c:db:1f:f3:51:d8:0a:61:91:75:04:7d:41:be:
bb:d2:1a:6b:e9:f5:48:6a:5b:21:98:7b:72:56:a4:ac:32:79:
4d:ca:7c:b3:94:b9:6e:47:ec:d5:2f:43:4f:0c:71:39:36:0a:
c6:48:14:11:64:a6:be:8e:95:37:03:d6:c6:65:e7:9b:72:ae:
f9:bf:97:11:21:a5:66:81:7e:23:aa:7a:e8:cf:76:35:50:03:
24:c6:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:53:00 2025 by rpki-client