Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CRjdSfDg-2UMIRIU1sS1CHaRfSU.roa
File: CRjdSfDg-2UMIRIU1sS1CHaRfSU.roa (raw, json)
Hash identifier: Hm7DF9WAQqttT58XfDUOBDSgTSzq3kbjtmzb9JaziTg=
Subject key identifier: 09:18:DD:49:F0:E0:FB:65:0C:21:12:14:D6:C4:B5:08:76:91:7D:25
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252277B72FC6AC8D8F1498914BEEEC64
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CRjdSfDg-2UMIRIU1sS1CHaRfSU.roa
Signing time: Thu 02 Jan 2025 03:50:03 +0000
ROA not before: Thu 02 Jan 2025 03:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214194
IP address blocks: 2a06:de01:160::/44 maxlen: 48
2a06:de01:180::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:77:b7:2f:c6:ac:8d:8f:14:98:91:4b:ee:ec:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0918dd49f0e0fb650c211214d6c4b50876917d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:72:f0:e8:98:bf:71:35:8c:82:45:24:82:
51:71:4d:0a:f0:11:71:b7:2e:54:7f:74:88:c3:9c:
44:06:9c:c4:e6:25:aa:94:68:b0:a7:76:f7:1d:39:
e8:35:fd:12:95:2c:5e:08:32:04:f4:5a:95:44:f6:
c0:14:ac:b8:0a:51:6a:c9:56:cf:18:e1:d3:f5:a9:
a2:27:6d:b7:f4:46:7a:81:77:30:9d:57:a5:bd:8e:
6a:c9:02:9e:8c:37:18:30:4b:31:83:56:8e:f4:b1:
21:50:b7:6f:11:63:1d:de:e4:8b:3b:04:51:94:fc:
7c:9d:0c:d1:11:1c:f4:75:4b:99:66:e4:01:90:e2:
c6:14:66:97:e5:ce:4c:cf:8d:78:2d:75:8c:88:a3:
a0:bd:16:b4:6d:f5:90:33:e3:ed:06:fc:9a:cc:6a:
cd:5a:c1:13:58:37:7a:7d:0b:7f:f4:fa:b2:a7:02:
c3:ea:8e:54:8f:86:f2:c4:81:ec:9a:a9:02:e9:e5:
be:ee:b7:69:b9:ab:b4:e8:87:e0:04:ef:9f:f6:8d:
6e:09:ab:cf:2b:a1:3c:5d:d4:a2:ae:e3:35:05:9f:
e1:42:e8:f3:03:0a:bc:10:33:fd:15:d6:df:11:78:
42:0f:37:56:84:76:a0:2d:d3:d3:6c:85:a8:dd:5a:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:18:DD:49:F0:E0:FB:65:0C:21:12:14:D6:C4:B5:08:76:91:7D:25
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CRjdSfDg-2UMIRIU1sS1CHaRfSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:160::/44
2a06:de01:180::/44
Signature Algorithm: sha256WithRSAEncryption
8c:04:9e:26:b0:7a:dc:41:5f:09:79:ec:f7:44:64:ff:fc:2e:
a0:8e:0c:30:13:ea:f9:e6:4e:d6:67:2d:2e:a5:56:0d:62:2b:
d7:4f:0b:5e:3f:92:8c:c5:ae:c2:d6:97:c6:b2:50:e8:77:9b:
9f:d5:81:d6:6d:24:80:de:3f:21:70:7d:5c:42:c9:15:0b:53:
1d:92:65:45:3d:2b:db:da:c4:1f:bf:83:5b:68:18:09:d0:c5:
73:10:49:13:cf:4e:03:da:9b:b9:b3:86:35:fc:f4:38:3c:67:
25:c1:3e:49:b9:0b:d6:d7:5a:eb:70:f1:82:cc:0f:f9:26:ed:
2e:a8:ea:36:77:f0:9b:67:51:ff:4d:a3:a9:b0:7f:df:4e:fb:
f4:84:14:08:23:d6:25:ef:96:be:ea:d0:cc:16:0b:01:b5:45:
e5:20:f4:e5:b6:a4:dc:85:ed:71:86:72:53:d8:c6:6c:28:50:
06:99:37:05:94:6a:a1:0c:11:6c:9f:34:4d:05:6d:1d:74:17:
1f:80:b3:19:1f:b0:ca:72:70:33:22:5c:38:1b:27:65:b2:8a:
b0:e9:6e:95:03:be:5a:b4:af:7b:f7:7d:34:ae:45:75:0a:a7:
45:51:79:0d:ed:32:86:a5:0f:d7:aa:ab:0e:3a:99:94:db:39:
36:eb:f1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:37:06 2025 by rpki-client