Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DlM1rk3b6nsvMn8ohQeY9oqLFRg.roa
File: DlM1rk3b6nsvMn8ohQeY9oqLFRg.roa (raw, json)
Hash identifier: cu043r3tjrXHSATRConAyrTpE4ToD+5n1EgB69RifSw=
Subject key identifier: 0E:53:35:AE:4D:DB:EA:7B:2F:32:7F:28:85:07:98:F6:8A:8B:15:18
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252265923FF35191A304EF6520844ABE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DlM1rk3b6nsvMn8ohQeY9oqLFRg.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212580
IP address blocks: 2a0e:b107:de0::/44 maxlen: 48
2a0e:b107:e00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:65:92:3f:f3:51:91:a3:04:ef:65:20:84:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e5335ae4ddbea7b2f327f28850798f68a8b1518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:97:e6:99:b0:1a:f8:66:2f:eb:fb:1c:2c:
8f:c8:55:0e:54:ae:32:2a:d7:59:b7:04:ff:c3:e1:
82:41:3d:3a:95:09:dd:91:26:8c:0e:0e:30:b5:46:
57:60:b1:3b:51:18:c9:dd:de:e3:40:4b:dc:fb:80:
fb:b3:3b:cf:27:ec:43:ed:83:37:d6:84:40:c7:b0:
ef:6b:63:c7:1d:60:82:6f:03:5a:a8:c6:7e:31:96:
7d:10:8c:93:3e:07:b7:23:1e:c0:df:9c:64:ef:9f:
33:d8:8d:23:35:81:29:8b:29:68:1b:92:7d:ab:c5:
1b:77:1d:93:1e:ad:92:13:d4:27:f1:61:82:47:05:
c3:03:28:36:11:5c:34:71:07:1f:d1:ee:3f:17:63:
2d:da:e9:85:27:b4:a2:d1:d9:c4:a8:92:9a:23:ef:
16:f4:96:7c:6c:df:02:c9:08:31:6f:32:dc:d4:2e:
69:02:e0:96:27:c0:60:20:ad:5f:66:10:2b:f0:fc:
56:06:ea:2b:1d:5d:dc:ef:b9:cb:3d:dd:c2:d6:f8:
85:be:87:00:d9:17:13:e2:29:e9:f9:c0:fe:23:e7:
50:f8:80:4c:3c:80:5d:15:bf:fb:d7:d5:71:bd:c2:
c8:7e:a2:ef:17:68:7c:b5:f5:49:56:97:d7:98:ea:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:53:35:AE:4D:DB:EA:7B:2F:32:7F:28:85:07:98:F6:8A:8B:15:18
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DlM1rk3b6nsvMn8ohQeY9oqLFRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:de0::/44
2a0e:b107:e00::/44
Signature Algorithm: sha256WithRSAEncryption
a8:83:d6:3b:38:19:db:45:81:67:b4:11:6b:32:08:6b:4d:07:
9a:bf:63:35:a5:b7:16:ae:27:1f:81:b6:b0:94:e4:1a:11:a9:
1d:cd:98:01:fd:0a:09:bf:72:92:3e:49:1e:6a:a0:90:0e:16:
bb:d7:d5:62:ce:2b:b5:80:86:21:62:f8:36:ab:70:1a:8f:04:
83:ca:94:71:fe:8a:9b:e6:ba:be:30:ba:36:1a:83:77:5c:aa:
3e:7d:9f:75:50:44:65:dd:dc:43:23:fc:72:31:38:6c:19:05:
10:50:ef:7f:04:64:cc:94:f5:64:07:93:6d:75:41:77:fb:1f:
5c:cb:5b:6b:5d:9a:e9:ef:04:5c:34:01:e5:47:ba:ee:25:36:
16:c9:c3:d7:39:c1:cf:39:d5:1e:ef:64:5e:01:94:f3:73:fe:
ff:30:07:7f:0f:6c:97:97:79:cb:ca:f4:af:21:4d:e8:d5:cb:
41:7e:bc:de:85:00:0c:8c:a2:73:03:89:53:aa:31:52:45:ed:
b6:9e:e7:e1:3d:1e:a6:6e:a1:12:41:0b:16:3b:ea:52:7a:3b:
65:55:06:0c:98:70:64:c1:a7:77:60:55:1f:2a:7a:3e:49:c6:
f8:73:6e:73:8b:0b:a8:17:10:65:aa:21:4a:0d:2b:6c:81:fa:
07:48:0f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:59:34 2025 by rpki-client