Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A0Tqgo65KH-XHM_Sbp5W8fhABvI.roa
File: A0Tqgo65KH-XHM_Sbp5W8fhABvI.roa (raw, json)
Hash identifier: 60dKLYlsN1+lx/AXe3bRYQ2mvopT6dHTMqPG7sVOk+Q=
Subject key identifier: 03:44:EA:82:8E:B9:28:7F:97:1C:CF:D2:6E:9E:56:F1:F8:40:06:F2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220D9F57F3618629E3645382DC9726
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A0Tqgo65KH-XHM_Sbp5W8fhABvI.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202827
IP address blocks: 2a0e:b107:1ce1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0d:9f:57:f3:61:86:29:e3:64:53:82:dc:97:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0344ea828eb9287f971ccfd26e9e56f1f84006f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:ff:c2:0d:d3:a3:60:cb:bb:04:12:0f:34:
5c:a4:ee:d4:53:27:af:13:eb:6a:5b:09:22:f6:e4:
17:8e:2e:b8:a6:93:24:00:7d:f7:f3:42:58:25:a9:
09:b7:b5:e6:e5:99:63:34:c5:30:45:fd:19:f6:3f:
99:fb:ae:6d:7c:c0:29:15:5f:11:d9:e9:c6:61:e5:
23:ae:85:e8:03:11:dc:aa:7a:3a:c1:89:ad:8b:bf:
f2:72:79:83:f7:73:69:4a:16:1c:56:05:dc:f8:11:
8c:42:a2:57:aa:e8:0e:54:42:b3:26:e7:95:f7:7a:
3d:fe:d5:67:42:bd:51:79:82:52:9c:cf:39:98:79:
38:47:da:08:7b:ca:b4:d7:5f:24:cf:d2:7e:38:1a:
19:ea:b0:08:bc:f1:73:c4:5c:78:18:89:eb:df:c0:
50:01:57:b5:6f:54:76:28:1b:a7:dc:6e:3d:67:d1:
d9:27:8e:2c:0b:4b:9f:e1:2f:97:df:aa:cc:af:c5:
45:29:01:e9:f8:a8:97:8b:b0:97:b5:39:09:2e:5f:
38:98:90:f3:f1:1a:46:8a:e6:ae:b1:ad:8f:a2:7e:
90:f9:04:0e:f6:29:3a:aa:40:61:84:55:a5:7c:87:
db:2c:45:19:b5:1a:87:fe:43:3c:03:89:d4:64:ab:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:44:EA:82:8E:B9:28:7F:97:1C:CF:D2:6E:9E:56:F1:F8:40:06:F2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A0Tqgo65KH-XHM_Sbp5W8fhABvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ce1::/48
Signature Algorithm: sha256WithRSAEncryption
4b:db:4f:3c:91:81:c6:d1:cf:e5:6c:23:8f:f4:dd:99:b5:9d:
a2:51:11:a0:b3:df:5f:df:cd:00:ab:67:db:b7:43:2c:44:fd:
84:34:fe:e2:23:b4:04:23:2e:35:51:c2:a4:65:3f:d4:dd:23:
50:f3:2c:d4:5c:9c:ff:75:d4:36:18:db:00:10:3c:38:6f:15:
a4:7f:31:84:79:8b:2d:8a:1f:f0:ac:ad:7d:20:15:45:50:ae:
87:c7:d4:ad:6a:bf:8c:94:c5:64:2d:e2:a4:07:cc:a6:ea:eb:
57:0a:eb:6b:ad:cf:68:f7:4f:3b:9f:1b:e6:ab:f9:15:ef:5f:
e7:25:fb:3f:0f:88:d8:b8:23:85:5e:cb:06:dd:51:f2:e6:f5:
36:91:82:98:c7:82:2c:94:1f:30:81:92:ee:64:4f:8c:eb:45:
07:b9:19:d9:06:8b:29:74:bb:8d:1b:b8:a1:ce:43:1d:2d:ec:
66:a0:ac:15:2a:2a:17:eb:7a:47:a3:ac:90:33:52:1f:a0:25:
4a:ea:70:a3:e2:e8:9a:3e:94:42:7d:64:d9:58:58:06:2c:24:
a8:80:ca:c1:74:31:01:2d:fa:93:ea:13:26:87:d1:d1:db:cc:
b1:60:e4:4f:db:5a:59:aa:e1:96:63:93:b3:6b:ec:5d:1b:01:
a9:00:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:43:11 2025 by rpki-client