Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E8wl_pi7GG8UzeTOhvgt01fDRVU.roa
File: E8wl_pi7GG8UzeTOhvgt01fDRVU.roa (raw, json)
Hash identifier: ozf1pV1wXIyHx8qORXITCUTGcZI4Uc70d7s3/oEbgaQ=
Subject key identifier: 13:CC:25:FE:98:BB:18:6F:14:CD:E4:CE:86:F8:2D:D3:57:C3:45:55
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252237ACFE9BB3F8D4C281DDCAA9132B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E8wl_pi7GG8UzeTOhvgt01fDRVU.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209533
IP address blocks: 2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:37:ac:fe:9b:b3:f8:d4:c2:81:dd:ca:a9:13:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13cc25fe98bb186f14cde4ce86f82dd357c34555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:34:f7:73:f5:5d:91:e2:5c:4d:a2:80:4d:
b5:c9:5d:ac:a0:b6:0a:ad:53:08:8c:f3:fb:73:e2:
73:25:53:4e:69:d9:36:b9:bf:8f:0e:2a:cd:98:10:
2e:3e:70:03:3e:01:83:41:f5:83:70:ef:09:35:76:
24:60:9b:d6:c9:80:75:09:89:bf:42:a1:37:b6:cb:
6d:a0:25:5e:75:7e:2f:29:7e:70:9f:62:f5:96:17:
fd:7a:c2:92:e5:2b:cd:f7:69:6b:a5:90:98:f1:75:
ff:b6:77:b0:7a:02:5b:d4:26:d0:c3:24:2d:21:f7:
20:8c:01:d5:89:a1:29:42:17:05:92:e9:7f:13:e3:
22:11:b4:4d:bd:85:72:9d:75:46:5d:5a:30:a1:31:
3e:0e:4d:8f:c0:47:a5:f0:43:0f:cc:d5:09:ba:51:
34:49:90:ca:62:e3:79:fc:46:fd:b5:7b:a3:97:4a:
df:53:5a:a0:80:5c:df:76:e2:a8:90:80:45:e0:f5:
83:87:ee:49:49:fc:f2:62:06:9a:61:1a:09:5a:15:
53:58:5e:33:ba:89:04:c2:9d:f3:85:5e:e2:24:57:
2f:45:5c:78:b1:7d:43:81:50:ec:a5:71:a6:92:bd:
89:25:b8:1c:40:b3:c6:14:42:40:8d:f2:fb:01:f3:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:25:FE:98:BB:18:6F:14:CD:E4:CE:86:F8:2D:D3:57:C3:45:55
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/E8wl_pi7GG8UzeTOhvgt01fDRVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2220::/44
Signature Algorithm: sha256WithRSAEncryption
b1:22:19:a9:50:cb:ef:c1:ec:38:fc:60:44:20:cc:89:01:b6:
95:42:df:b2:f4:3a:62:3b:92:4c:dc:85:d0:fc:bb:eb:c4:ea:
13:d4:a9:90:24:8f:ef:ce:71:e7:8b:7e:1c:ea:76:27:d8:d0:
2d:66:87:60:42:31:2c:f1:d9:2d:3f:3b:ab:3d:96:04:75:70:
81:1d:47:bc:2d:10:cb:e7:fc:39:2f:09:d7:80:83:b1:ec:88:
5c:8e:f1:c9:f1:da:c7:f6:8c:7f:70:e4:d0:24:97:4c:22:b1:
4e:39:b8:0b:71:01:77:7e:85:18:c2:8c:ae:1b:7f:c7:14:66:
e3:1f:78:ae:50:f6:df:c7:b3:ce:44:4d:6d:af:5c:d8:2f:dc:
c7:b6:24:e6:14:c8:3c:29:ce:9b:98:cf:8a:b6:a4:fa:84:06:
1d:fe:71:36:5a:d2:51:f3:52:ff:04:89:f4:ee:6c:12:01:58:
4b:9d:85:c5:5d:36:fc:c0:e8:a2:9b:ec:ed:58:41:01:0a:af:
65:8f:28:8c:c0:2d:1d:6d:b1:64:3f:bb:bb:62:ee:f8:84:8c:
89:61:78:35:c1:15:2d:5d:da:e7:eb:c7:0c:0a:87:37:46:74:
dc:80:29:df:07:c0:2b:05:25:d8:7b:de:f5:a4:fb:0b:9d:92:
29:8b:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:01:34 2025 by rpki-client