Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0zL2H9e3zJnY4IGsdn_HTlGmh4.roa
File: F0zL2H9e3zJnY4IGsdn_HTlGmh4.roa (raw, json)
Hash identifier: fxJJZg9wf+bgOPgrX/5rcZm2iy5TMOK4GkSLgW1Nmig=
Subject key identifier: 17:4C:CB:D8:7F:5E:DF:32:67:63:82:06:B1:D9:FF:1D:39:46:9A:1E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425224A5E46F98F689F3237413EBA2AB2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0zL2H9e3zJnY4IGsdn_HTlGmh4.roa
Signing time: Thu 02 Jan 2025 03:49:51 +0000
ROA not before: Thu 02 Jan 2025 03:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211063
IP address blocks: 2a0e:97c0:480::/44 maxlen: 48
2a0e:b107:1240::/44 maxlen: 48
2a10:2f00:172::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:4a:5e:46:f9:8f:68:9f:32:37:41:3e:ba:2a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=174ccbd87f5edf3267638206b1d9ff1d39469a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:c5:fa:be:f1:8e:40:79:88:ed:f6:2c:87:
a4:02:9c:33:3d:e9:d2:49:1d:5b:98:5c:aa:63:a1:
f4:f5:23:e0:1e:33:6d:11:bb:9a:fd:84:cb:37:cb:
dc:17:b3:19:d2:e8:13:2f:fa:46:e0:f4:1b:3e:d3:
d3:ff:e8:4b:95:47:53:3c:5c:a9:ce:c5:4d:9a:bb:
1b:3d:85:25:fd:f7:c4:8d:c6:8f:fe:97:12:17:67:
1a:6e:a8:a4:b1:05:1e:95:df:0d:05:8e:8b:98:35:
36:2e:e8:63:c4:08:0e:37:a1:20:cb:0c:1c:cf:00:
79:94:2a:8f:67:2e:f5:ec:a6:f0:fe:3d:94:43:75:
c3:ef:e4:a8:b3:0d:e8:27:32:31:c5:ab:6f:a0:e2:
05:1b:3f:98:0f:3c:16:49:d9:1f:fb:90:d8:a1:bf:
8c:97:8f:52:84:03:73:9d:7d:1b:37:b7:29:c4:88:
fb:34:08:67:3b:25:59:7a:e8:d0:da:a7:7e:ad:9e:
68:4a:fc:38:51:18:e4:e3:db:43:86:1e:36:0c:05:
0b:d8:8e:e9:1c:44:2e:89:f4:06:93:61:13:0f:e7:
ef:d3:c2:07:dd:91:5f:7b:50:c5:8a:64:3d:96:a9:
a0:2d:fc:06:4c:df:11:5a:fc:fc:41:a5:cb:1a:68:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:CB:D8:7F:5E:DF:32:67:63:82:06:B1:D9:FF:1D:39:46:9A:1E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F0zL2H9e3zJnY4IGsdn_HTlGmh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:480::/44
2a0e:b107:1240::/44
2a10:2f00:172::/48
Signature Algorithm: sha256WithRSAEncryption
22:fc:9f:59:fa:fd:93:68:dd:3a:a1:2e:15:2e:32:55:ba:5e:
d7:92:f4:8d:a4:7f:cc:db:5d:08:b3:10:de:cd:59:70:90:c7:
c1:d3:e6:f6:0d:0d:01:4f:3f:48:ef:03:1a:1d:b7:c8:a1:f0:
a1:fd:ab:0e:68:ae:5d:ca:69:45:28:a4:19:f7:dd:9c:54:b8:
e0:b3:51:92:41:ed:d1:42:ab:84:75:04:53:06:d0:d8:d3:41:
49:87:50:a3:a0:82:d3:f2:50:f8:56:4a:41:e2:6b:10:cb:52:
96:de:12:48:fc:eb:8e:45:c8:c4:43:6e:76:06:ef:95:58:19:
d4:ca:2c:8f:18:1e:c9:72:18:b7:e2:3b:10:65:ef:68:db:f3:
0d:b8:d7:d3:67:0a:3c:fc:f7:0c:9d:67:1d:ef:15:d6:b8:83:
b4:a1:e2:2f:1b:93:81:b2:c2:02:7c:e6:b7:f0:64:e9:02:e5:
06:2c:f4:f4:a1:8b:35:ee:c0:76:2e:ec:d8:59:df:35:3b:b1:
aa:b3:c4:6d:38:9b:1e:1a:14:3f:8c:88:51:ac:c2:92:5b:54:
ab:c2:e8:be:29:07:bb:a0:2b:18:b1:0e:74:a8:d8:f5:ff:4c:
07:0a:30:13:05:d3:ae:3b:47:83:d8:e7:19:30:e4:72:8a:9d:
d3:11:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:47:03 2025 by rpki-client