Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CKRzbFxCPbn5DCu1y9NbTQj4VLg.roa
File: CKRzbFxCPbn5DCu1y9NbTQj4VLg.roa (raw, json)
Hash identifier: 5n4sCHNQrn6JjVBsPgLMJyZCXvuDoUX7I1c9a7QgRbU=
Subject key identifier: 08:A4:73:6C:5C:42:3D:B9:F9:0C:2B:B5:CB:D3:5B:4D:08:F8:54:B8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D284FB6DD3DD347BA328FAF430FD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CKRzbFxCPbn5DCu1y9NbTQj4VLg.roa
Signing time: Thu 02 Jan 2025 03:49:21 +0000
ROA not before: Thu 02 Jan 2025 03:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48002
IP address blocks: 2a0e:b107:1450::/48 maxlen: 48
2a0e:b107:1452::/48 maxlen: 48
2a0e:b107:1454::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d2:84:fb:6d:d3:dd:34:7b:a3:28:fa:f4:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08a4736c5c423db9f90c2bb5cbd35b4d08f854b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:b2:18:1c:10:48:c0:c8:0a:08:59:10:0b:
a3:50:93:ea:32:36:b0:5e:56:b6:15:be:95:75:21:
da:69:49:48:de:c4:26:47:1b:26:14:5f:6d:28:77:
8b:90:d1:7b:eb:41:af:fe:47:14:71:b2:52:68:bd:
fc:5c:1c:cf:16:a4:51:96:3c:b2:b3:b3:e9:42:06:
f2:8e:af:36:5e:77:87:22:94:82:ff:72:46:82:01:
66:ad:38:dd:93:20:d1:9b:98:c3:3f:04:a1:e9:08:
07:7a:38:ec:76:33:86:cf:ea:39:78:48:e4:80:0c:
7b:73:2a:f4:77:11:6c:a1:22:bb:db:97:6b:6b:35:
17:f6:e4:0e:01:32:5b:54:ee:d2:8e:df:d7:4d:ce:
10:0a:42:8d:64:15:d4:52:7a:47:45:eb:b6:6a:c2:
34:9d:c4:a5:db:74:f8:39:15:a9:d6:fe:45:df:93:
01:4a:23:a0:54:02:88:c0:4d:76:a7:c5:4d:a4:30:
22:b6:aa:37:a2:cc:c5:dd:4a:aa:c0:e9:fe:73:d7:
0f:f8:8b:8f:dd:a5:0a:c4:2a:d8:1d:e3:6a:c7:de:
8b:e6:b9:74:eb:35:8b:67:f9:e3:45:c6:7d:40:e1:
8c:fa:23:6d:49:9d:1c:cc:76:23:44:81:88:a3:1d:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A4:73:6C:5C:42:3D:B9:F9:0C:2B:B5:CB:D3:5B:4D:08:F8:54:B8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CKRzbFxCPbn5DCu1y9NbTQj4VLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1450::/48
2a0e:b107:1452::/48
2a0e:b107:1454::/48
Signature Algorithm: sha256WithRSAEncryption
cb:66:31:3d:d5:41:95:f6:99:42:53:f4:fa:00:d7:3d:50:d8:
e3:8c:f4:bc:85:4d:ac:c8:43:a3:66:4a:34:fe:00:79:2c:75:
0e:f9:bb:6a:d0:ce:40:84:78:76:a0:0a:64:0a:7b:81:69:85:
83:15:31:a7:17:5e:82:f1:a1:2c:85:5a:2b:04:ee:87:45:90:
98:47:80:04:1a:53:58:ea:8d:78:89:bf:88:72:0d:f5:8d:76:
f6:e7:41:b7:c8:e9:5d:57:ee:6e:47:31:d4:d3:85:a2:54:34:
c9:9b:7a:5f:db:13:f0:52:56:d3:6a:01:f5:71:3f:0e:cb:60:
d8:5c:a6:d0:bb:f5:52:b1:05:42:7d:e2:43:a7:e0:78:ff:45:
f5:2f:f5:a1:0e:59:42:bb:aa:32:f9:a7:87:21:70:f8:70:25:
8a:39:ac:ff:a6:4b:89:c8:3e:a3:89:2c:8f:c7:cd:f1:30:9a:
ce:67:2f:e3:1d:53:2e:02:bb:20:35:4a:dd:76:19:52:4b:43:
6a:d5:c9:0f:f3:f9:46:38:66:d1:e3:3b:5b:21:3a:a2:ce:48:
59:b2:f7:bd:cd:14:36:62:f9:15:6e:6c:9b:e9:f3:51:0e:b1:
f7:bf:6f:92:48:52:89:04:bc:e0:1d:80:e0:f7:f0:2a:09:7c:
4a:36:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:41:15 2025 by rpki-client