Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DSTd1jwLBbdHNs1_EWSBOFjoyoA.roa
File: DSTd1jwLBbdHNs1_EWSBOFjoyoA.roa (raw, json)
Hash identifier: /O2a+bX8tiwt1WMasQOLRV7jlV1AS/R9HaB0tYQq6Ww=
Subject key identifier: 0D:24:DD:D6:3C:0B:05:B7:47:36:CD:7F:11:64:81:38:58:E8:CA:80
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252216A0D37A0C5E1C4164541B6D446D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DSTd1jwLBbdHNs1_EWSBOFjoyoA.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204307
IP address blocks: 2a0e:b107:ac0::/48 maxlen: 48
2a0e:b107:ac2::/48 maxlen: 48
2a0f:e401:110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:16:a0:d3:7a:0c:5e:1c:41:64:54:1b:6d:44:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d24ddd63c0b05b74736cd7f1164813858e8ca80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:7f:78:6b:11:65:3c:ff:a6:13:63:e0:ad:
dc:de:72:d7:25:92:84:07:85:71:7b:4a:d3:c8:91:
00:6f:b1:40:20:e0:98:6e:ba:be:30:a7:30:e5:7c:
20:50:10:ce:0a:fb:e4:43:ee:d4:18:63:17:5a:15:
4c:8f:9d:cb:36:a6:74:49:30:bb:db:81:32:7f:cc:
79:4c:ab:3a:68:bb:43:7e:36:23:32:9e:c7:14:1a:
58:3c:f3:e7:37:76:d9:5c:d5:dd:e4:12:11:40:3f:
84:41:08:9d:78:b3:05:20:d3:59:fd:c2:cd:16:95:
de:fd:c0:9b:29:f8:76:28:32:20:27:3d:f5:1f:52:
79:18:13:72:83:11:25:f3:27:d6:d5:87:17:0a:8d:
bb:cc:38:2a:4a:74:ea:8c:63:1d:cb:49:8a:9d:78:
85:67:cf:8d:19:f3:14:1f:be:cd:0d:f5:fc:26:9e:
14:72:c5:ca:fb:fc:11:ba:81:a3:6c:1d:00:4f:f0:
b6:f9:12:19:df:e2:be:51:db:01:2d:89:fb:f4:3a:
ec:d7:d9:ad:4f:9b:52:df:8a:bb:9f:83:9b:63:27:
43:81:b2:47:26:b5:83:92:69:fe:81:bf:38:b2:24:
5e:f7:09:d9:da:fc:bb:2e:f3:b8:28:06:a1:41:77:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:DD:D6:3C:0B:05:B7:47:36:CD:7F:11:64:81:38:58:E8:CA:80
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DSTd1jwLBbdHNs1_EWSBOFjoyoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ac0::/48
2a0e:b107:ac2::/48
2a0f:e401:110::/44
Signature Algorithm: sha256WithRSAEncryption
5f:bd:96:13:34:42:ca:fb:43:0c:6d:3b:cb:08:93:a0:2d:10:
09:9d:40:52:ac:50:0f:84:a3:52:57:fe:8e:0c:06:18:e0:9e:
9e:48:f6:57:cb:76:84:82:ba:13:e6:d3:47:91:c9:db:b8:db:
99:c0:05:19:be:e7:98:30:a2:b2:f1:af:9d:a4:df:f6:fd:4c:
18:75:1d:c6:c3:fc:ce:8f:4a:62:69:0b:a9:bb:ad:e1:7a:b7:
f4:a6:3f:84:85:3d:2e:33:d0:b2:ec:30:51:d7:0e:5a:60:f7:
71:ee:f5:2b:b3:d7:3d:5b:f6:bd:f7:60:e7:d0:57:ad:2f:0e:
b8:77:46:87:29:9c:cf:2f:e6:90:c6:e3:08:d6:28:d0:5f:f4:
80:7d:05:0d:a5:43:6b:9c:f7:8e:db:f1:1c:2a:ea:3f:47:c2:
5c:64:27:2e:06:4f:2a:8a:8c:25:88:f3:23:28:bf:6a:31:c4:
d1:be:34:47:64:61:db:2e:eb:78:b6:03:8f:9f:4c:73:77:06:
5c:69:0b:1d:85:f1:e3:86:0c:93:19:c4:c9:b7:57:21:1b:79:
55:10:d3:f4:3a:90:6f:31:fe:2e:74:3c:38:82:7b:a9:8b:bc:
e3:96:02:dd:21:f6:c9:cc:a7:42:04:c3:d2:08:9d:b5:9a:48:
eb:42:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:02:23 2025 by rpki-client