Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AIoazFxORriStP_bkxwvO9e5O8o.roa
File: AIoazFxORriStP_bkxwvO9e5O8o.roa (raw, json)
Hash identifier: L/9JGjBvTU3lU+8lqgcsFrKOgexT5hvsl2d0+wtCZ3Y=
Subject key identifier: 00:8A:1A:CC:5C:4E:46:B8:92:B4:FF:DB:93:1C:2F:3B:D7:B9:3B:CA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220D5489164865F83F4D16E91FDCB4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AIoazFxORriStP_bkxwvO9e5O8o.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202747
IP address blocks: 2a10:2f00:189::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0d:54:89:16:48:65:f8:3f:4d:16:e9:1f:dc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=008a1acc5c4e46b892b4ffdb931c2f3bd7b93bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:27:5e:d9:64:59:c5:e2:d6:0a:11:e6:bb:1f:
d0:b4:5d:b9:86:34:25:7a:c9:46:81:12:b7:a2:69:
dc:71:21:c6:40:06:69:ef:08:18:e9:23:3b:4c:90:
36:9c:17:cd:25:53:b9:c6:07:02:af:6a:2c:3b:86:
0b:c4:b1:c3:d1:ba:ca:54:10:37:a1:60:ef:0b:22:
10:43:18:0c:2f:a9:9e:71:43:b5:b0:a5:5c:04:2f:
73:18:82:c1:60:b9:f5:6a:c1:1c:d4:91:9c:9f:82:
b3:e7:f7:3d:74:0d:35:3d:8e:a3:c2:16:a8:91:ba:
d3:ca:25:f2:05:d4:b9:16:5e:8b:83:d5:e2:b4:ae:
4b:07:eb:bc:8d:26:0f:1a:ba:4e:4a:de:c1:63:4e:
76:3a:3b:81:4a:0c:ba:7d:2c:d0:97:e6:33:e0:6a:
ca:bf:42:de:1d:46:46:df:a2:31:b3:c8:35:0d:ed:
98:7b:13:53:11:45:2b:28:f8:db:c6:9f:ba:2e:8c:
4d:17:71:65:27:c7:2d:a4:1e:c1:3b:9f:d1:c6:3d:
b9:0b:25:31:95:f9:8b:ce:da:8e:38:20:27:2e:d6:
75:da:59:f0:3d:af:06:bf:e6:28:40:d3:f3:1f:f0:
54:20:d8:06:b9:ad:e0:47:36:bd:97:98:9b:60:42:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:1A:CC:5C:4E:46:B8:92:B4:FF:DB:93:1C:2F:3B:D7:B9:3B:CA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AIoazFxORriStP_bkxwvO9e5O8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:189::/48
Signature Algorithm: sha256WithRSAEncryption
a7:d7:ea:9e:32:a6:b3:8a:72:26:15:63:a7:0b:35:4a:27:a4:
c4:32:91:23:ad:c1:33:a8:8e:ea:08:00:6b:ff:02:02:82:2b:
72:93:ac:59:85:0b:9b:49:03:aa:7e:e7:9c:3e:d2:7b:ba:7e:
5e:7f:08:33:39:ff:dc:69:d7:bb:d1:2d:04:33:a3:99:b3:85:
f8:f2:fd:bd:de:0c:e0:52:58:e2:af:54:1a:96:09:4a:92:43:
51:c3:bf:9a:e3:58:71:89:15:f7:93:fc:17:62:c3:ae:cc:0f:
42:3d:7d:59:20:97:bb:ba:b6:0f:05:9b:97:2f:44:a0:bb:cd:
db:6a:33:6a:5e:e9:96:c0:e4:72:35:0f:ef:94:16:0d:59:f9:
41:05:67:9d:3b:eb:4d:48:44:d4:bf:b0:9a:53:dc:d9:18:22:
26:09:fd:81:b8:84:c8:2f:a9:d1:6d:9b:8b:52:56:d3:34:f5:
67:43:e1:97:9d:5e:88:b0:c1:53:a2:55:a2:ed:1e:a2:7c:47:
43:d8:39:14:5a:4b:07:d3:1a:69:24:92:f4:2f:20:b9:93:e6:
c5:e1:74:42:db:42:47:2c:9d:34:9e:eb:71:a4:57:f7:1b:74:
25:eb:d0:76:3b:23:9d:db:f7:92:5c:e1:a6:49:48:9f:69:aa:
6e:76:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:57:11 2025 by rpki-client