Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bde6YT1T00CVIFXvnqqmtomkU3U.roa
File: Bde6YT1T00CVIFXvnqqmtomkU3U.roa (raw, json)
Hash identifier: qFLiVSFNtzaDhj+AKQydH8mxoHvn5gim+lsSGif0/Sg=
Subject key identifier: 05:D7:BA:61:3D:53:D3:40:95:20:55:EF:9E:AA:A6:B6:89:A4:53:75
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521DAC9471138BF30952CEFC3E19EBF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bde6YT1T00CVIFXvnqqmtomkU3U.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58015
IP address blocks: 2a0e:b107:11d0::/47 maxlen: 48
2a0e:b107:11d2::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:da:c9:47:11:38:bf:30:95:2c:ef:c3:e1:9e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05d7ba613d53d340952055ef9eaaa6b689a45375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:0e:14:bb:af:0e:a2:87:5a:31:c3:9d:5e:
3b:20:d9:0f:1c:74:59:16:e7:33:00:e9:29:be:dc:
c8:19:57:88:20:a2:36:78:c7:38:23:03:a8:be:bb:
61:88:ae:67:76:ef:20:1b:6e:8c:22:5a:60:18:e6:
f8:d9:63:0b:fe:80:76:6a:48:6e:db:3f:b2:51:5f:
ac:07:75:6b:e0:e2:d8:e3:34:3b:d7:2a:34:c0:ef:
15:5b:3b:ca:ee:12:97:e8:90:e5:58:fc:99:4c:48:
ca:36:d3:a4:70:fa:ba:a6:76:c5:63:aa:fd:38:1a:
76:bc:78:6b:4d:12:7f:ba:14:8f:71:6a:f1:7b:26:
89:85:f6:4e:95:8a:57:77:f0:dd:12:6b:c9:fb:c7:
49:d7:38:de:24:6d:51:e1:e8:76:4e:9c:94:d8:2b:
b7:1c:14:7d:d3:b7:e5:94:69:6c:b2:77:13:f1:66:
4e:10:60:d7:a6:32:c8:19:d4:8b:0e:13:2c:60:55:
8b:45:95:42:af:fa:7c:90:97:b7:b9:c8:1e:6b:4a:
26:8c:f2:2b:bc:4d:c4:dd:e1:06:1e:77:ce:90:a4:
bb:5b:14:97:7e:57:db:f5:cd:d6:f1:38:eb:38:c6:
17:94:88:33:05:8b:98:65:1b:e7:82:c5:71:db:fd:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:BA:61:3D:53:D3:40:95:20:55:EF:9E:AA:A6:B6:89:A4:53:75
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bde6YT1T00CVIFXvnqqmtomkU3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:11d0::/46
Signature Algorithm: sha256WithRSAEncryption
cc:5b:6e:fe:53:db:7f:f9:6b:14:ac:ae:e7:2a:34:bd:2f:88:
50:19:16:61:42:91:0c:5b:2f:39:3f:e2:0a:33:1c:77:81:e2:
91:cf:2f:a0:77:89:6a:43:ed:29:6b:0b:e8:87:e6:9f:e8:42:
7f:3d:db:fe:c9:a9:60:46:6b:3a:6a:cc:f2:39:4f:77:70:f1:
36:d1:c2:76:33:54:17:2c:25:58:34:12:03:3c:3e:0c:1e:e3:
00:99:70:e1:04:0e:cd:81:54:f5:88:5e:44:c2:72:ef:59:eb:
c0:6b:b7:95:27:36:39:42:47:2b:49:40:8f:2a:e2:c7:b7:20:
e8:b4:1d:2d:a0:e7:a0:56:7d:09:23:ce:a5:36:fb:f8:90:c2:
cb:41:79:aa:80:d7:26:7b:5a:7b:48:16:8b:f0:e8:73:d5:9f:
aa:c5:c9:8c:95:a8:48:87:ad:c0:ae:09:8e:97:ab:d8:aa:c7:
b9:f1:ae:cd:da:a0:df:94:d7:78:cb:95:de:da:4f:2c:21:f3:
75:8f:49:bc:b4:46:90:5a:80:5f:b6:a6:ba:e4:78:66:55:8a:
da:fe:27:c7:66:a6:4e:f3:6f:43:d6:be:04:17:46:ac:b7:44:
81:1c:3b:89:02:0c:c1:de:07:82:40:6d:ef:e5:0f:af:b3:02:
b4:4c:b3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:56:33 2025 by rpki-client