Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/99srTQBZMunzsFBZUs6GncMQ7Os.roa
File: 99srTQBZMunzsFBZUs6GncMQ7Os.roa (raw, json)
Hash identifier: EKTZB4PojAK6xQJ9n48NGIZe/dhXB+Dlh3Xzv+JZh6Y=
Subject key identifier: F7:DB:2B:4D:00:59:32:E9:F3:B0:50:59:52:CE:86:9D:C3:10:EC:EB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425226D44E66D82AE7F9ACC2306A77E37
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/99srTQBZMunzsFBZUs6GncMQ7Os.roa
Signing time: Thu 02 Jan 2025 03:50:00 +0000
ROA not before: Thu 02 Jan 2025 03:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213086
IP address blocks: 2a0e:b107:670::/44 maxlen: 48
2a0e:b107:1df0::/44 maxlen: 48
2a0e:b107:1f00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:6d:44:e6:6d:82:ae:7f:9a:cc:23:06:a7:7e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7db2b4d005932e9f3b0505952ce869dc310eceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:7b:5a:d8:69:64:5f:51:9c:eb:1d:36:43:
9f:25:48:c8:48:44:c6:28:69:fb:9e:0a:c6:de:f8:
2c:90:c7:48:3f:48:45:96:ea:45:ba:49:52:95:26:
0c:44:39:ac:d4:d0:d2:9c:d2:f4:75:cf:50:08:2c:
bc:a3:82:0e:9d:c3:7b:e6:43:3f:29:df:20:5e:55:
8d:2d:c0:ed:cf:de:b0:e9:0a:7a:cc:37:c0:b4:76:
3b:eb:64:16:9b:bd:e3:ba:64:96:f4:97:77:ac:0c:
eb:db:68:0e:7c:cc:31:75:97:eb:4c:4c:54:03:64:
28:10:a6:e1:d0:76:48:5b:65:56:41:52:d3:a5:c2:
9d:ff:83:03:4b:74:4f:44:26:8d:55:1e:46:2a:1b:
4b:a9:79:35:8a:51:1d:ae:a5:83:7d:4f:2b:e4:44:
64:68:e2:d9:5a:bc:a8:f4:4f:34:20:f8:01:ab:27:
a3:9d:f6:b3:41:a8:5f:ea:a6:b1:f1:ee:1c:af:e3:
e9:46:20:9a:d2:35:69:75:7f:c5:de:cb:2f:53:a1:
8f:01:6d:b3:d2:60:e3:b3:83:4c:c5:73:04:4e:1f:
68:8d:03:c3:95:7e:40:d7:ec:c0:9c:2e:42:f6:40:
e7:b7:31:41:d8:41:43:54:6f:24:31:59:32:28:86:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DB:2B:4D:00:59:32:E9:F3:B0:50:59:52:CE:86:9D:C3:10:EC:EB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/99srTQBZMunzsFBZUs6GncMQ7Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:670::/44
2a0e:b107:1df0::/44
2a0e:b107:1f00::/44
Signature Algorithm: sha256WithRSAEncryption
02:71:2c:5e:16:b3:82:b3:bd:56:ff:dd:24:b9:f3:09:a0:4f:
48:16:68:54:e5:55:d5:1a:ee:1f:8a:ca:40:2e:0c:fe:1f:3c:
cb:67:c4:1c:8c:0d:49:cc:f5:9e:7a:43:49:0f:6f:48:cc:8b:
d2:dd:f4:4f:aa:2e:08:25:37:34:c1:e1:a0:4f:18:ea:53:80:
c0:58:7c:95:dc:7c:9d:2c:69:0a:cb:7e:95:11:1d:f4:6a:b3:
46:fa:3d:51:fc:51:48:1a:c7:28:84:c9:d2:b3:22:3c:a8:38:
95:6f:6b:2b:1a:db:06:43:fc:4d:cf:44:66:cc:35:e0:41:84:
b8:0a:0c:3b:02:06:5d:ad:b4:b7:5e:fe:8f:35:e9:89:80:9b:
de:2c:c0:c7:15:58:24:d3:d7:cb:55:fb:be:9c:1b:c8:4a:ba:
ab:74:33:90:85:88:09:97:09:66:65:79:bb:65:7f:33:66:88:
fd:cc:15:c4:cd:13:85:89:ba:fa:6a:20:c4:97:1d:66:cc:93:
40:13:7d:c1:06:50:22:6e:a2:e8:5c:14:54:33:99:b5:20:44:
04:fa:20:e3:8a:ba:b7:65:67:11:af:84:69:2a:90:17:79:57:
5c:57:c6:2a:af:e8:ca:64:6a:27:95:8e:99:77:2b:eb:bc:be:
35:ab:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:47:23 2025 by rpki-client