Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F1BB3vh3xOuDxyQoreosrdI4FbU.roa
File: F1BB3vh3xOuDxyQoreosrdI4FbU.roa (raw, json)
Hash identifier: 7pIhAVgLiPz+mdrMYkjVweGye4PV8eY4v2afAYyZPWA=
Subject key identifier: 17:50:41:DE:F8:77:C4:EB:83:C7:24:28:AD:EA:2C:AD:D2:38:15:B5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521EB7515B0B203F2CB7B4C739794CE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F1BB3vh3xOuDxyQoreosrdI4FbU.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142597
IP address blocks: 2a0e:b107:15aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:eb:75:15:b0:b2:03:f2:cb:7b:4c:73:97:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=175041def877c4eb83c72428adea2cadd23815b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:8a:01:ca:e1:93:d9:02:cf:aa:86:62:5e:
f5:78:39:fb:32:d0:9b:47:ef:63:00:83:e2:f6:52:
0e:63:f1:1d:68:14:0d:b8:e5:95:8b:ff:df:6b:32:
20:4f:19:d7:6d:f1:c5:be:f0:9b:df:5c:56:fd:6e:
ab:0d:4a:19:08:af:1c:0b:28:dd:e3:14:f9:6f:6f:
97:73:b9:54:40:05:36:d4:fa:a8:32:82:03:0e:17:
f5:49:f5:80:67:b5:40:cb:42:e2:98:cb:b4:7c:51:
b0:b3:40:8d:49:7c:10:d7:be:74:1c:5d:b0:7d:0f:
c2:cb:71:f1:d3:73:27:e2:f0:ed:8d:32:a6:53:02:
da:59:34:33:6e:45:3d:b1:6c:ea:cc:c9:e7:ba:11:
2d:7f:c3:2b:8d:57:f1:93:d9:aa:3d:d1:91:10:0f:
fc:68:de:77:79:f3:92:a5:63:84:b0:1a:8d:15:cf:
56:71:a9:7b:33:ec:0a:07:a9:e9:73:51:66:5c:de:
a5:93:05:f8:93:7c:7c:4d:ae:58:6e:78:b1:7d:b2:
ae:b3:ae:de:ee:64:e8:69:fa:f8:f0:43:4f:5f:db:
f4:a3:bd:30:70:da:c2:1d:7a:be:bd:3e:bc:b1:07:
bb:ed:1f:4d:15:2a:b1:ff:2d:45:1a:a2:cb:e0:43:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:50:41:DE:F8:77:C4:EB:83:C7:24:28:AD:EA:2C:AD:D2:38:15:B5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F1BB3vh3xOuDxyQoreosrdI4FbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:15aa::/48
Signature Algorithm: sha256WithRSAEncryption
82:6a:a6:8b:09:12:e4:d5:70:bd:0c:a9:4e:f1:0f:5e:a3:a3:
75:b4:99:ab:4c:79:21:06:06:81:fa:5a:9b:bf:5f:4a:aa:6d:
76:fb:76:32:84:55:53:2a:53:49:87:8d:99:bd:32:fa:db:94:
c2:d0:21:0c:f4:18:14:8a:0d:64:49:6a:5d:3e:41:02:8c:63:
b4:07:22:dd:64:35:ee:8e:7b:f5:24:41:d6:d0:17:10:12:0d:
1b:91:79:11:bc:c6:fc:0f:6c:d9:34:93:8c:6f:2c:66:d6:69:
8b:7e:37:86:d2:87:86:4b:46:be:ee:e9:fe:cf:19:92:c4:02:
dd:e1:66:71:81:86:f3:2a:f1:12:4a:87:e6:56:1e:fd:72:b7:
8f:a7:27:c7:9d:f6:c1:06:6f:55:9b:52:b9:77:4a:00:c6:f9:
3c:68:0b:e0:ab:5c:1d:85:47:7d:3e:6d:41:78:11:9a:b8:c5:
9d:4e:de:cd:2f:07:1e:ad:e4:d7:04:f7:11:5f:05:12:56:a9:
c6:3d:d6:bd:b4:32:da:00:c3:c4:90:84:1d:31:04:b0:32:e6:
09:93:04:5d:b3:d3:6a:98:5b:ea:c0:c5:4d:43:0e:e3:3c:63:
fc:80:48:22:a9:14:3c:bf:58:a7:2c:d8:87:3f:a5:55:f4:4d:
51:26:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:26 2025 by rpki-client