Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FXdj2cdI9kq8RIgukHur7MMrTnM.roa
File: FXdj2cdI9kq8RIgukHur7MMrTnM.roa (raw, json)
Hash identifier: lelkkfSLSU1J6761IwlLMglx4a9ChvadtbHWQQaM498=
Subject key identifier: 15:77:63:D9:C7:48:F6:4A:BC:44:88:2E:90:7B:AB:EC:C3:2B:4E:73
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220EA0A4B0381A4120621DDEB3B32F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FXdj2cdI9kq8RIgukHur7MMrTnM.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202941
IP address blocks: 2a10:2f00:187::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0e:a0:a4:b0:38:1a:41:20:62:1d:de:b3:b3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=157763d9c748f64abc44882e907babecc32b4e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:e7:5a:6a:52:a8:ea:1c:45:75:c7:75:c6:
61:7c:12:ec:32:7e:1d:09:24:31:46:e4:77:ef:76:
90:3d:97:a4:f3:4f:ca:40:5f:4d:63:51:b0:ce:b8:
e9:04:cb:bc:4e:fa:95:95:8c:8f:d5:b3:0a:0b:15:
0b:0a:3d:07:ab:ab:07:f1:f7:1e:97:e2:3a:12:2e:
b2:4d:e3:32:48:ac:69:e2:e4:bf:a2:c3:42:b4:9e:
a3:3e:8d:8d:7a:74:eb:2c:6a:7e:cd:0f:d1:11:96:
cf:65:19:32:5f:de:34:9a:66:e3:6d:7c:df:c7:6e:
92:a8:af:7c:d6:ce:bf:4a:1d:73:93:7a:37:04:59:
b4:28:11:17:6f:f7:cb:97:e8:e0:7a:a4:1d:0b:f9:
3f:fc:ef:6b:a8:4b:cb:5c:31:fa:b7:40:43:5a:3b:
f6:b8:e1:31:cd:30:70:48:5b:72:26:84:75:7c:75:
13:1b:bf:5a:44:c0:74:34:c8:7d:96:78:65:90:04:
a0:06:38:ec:20:42:81:b8:ef:50:eb:e3:7c:81:eb:
75:89:41:e7:89:ff:aa:df:0a:7c:98:80:4a:1d:29:
79:68:a5:ae:16:16:a4:20:ca:43:19:a8:42:85:ed:
7b:1f:f3:87:96:73:1c:c6:e4:66:57:c8:ef:4a:73:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:63:D9:C7:48:F6:4A:BC:44:88:2E:90:7B:AB:EC:C3:2B:4E:73
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FXdj2cdI9kq8RIgukHur7MMrTnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:187::/48
Signature Algorithm: sha256WithRSAEncryption
8b:05:27:7e:46:b3:cd:9b:d8:cb:ce:30:ee:cd:94:1e:5a:87:
36:cf:e4:8a:e6:4c:53:57:b6:e6:0a:e8:6f:8d:01:71:e0:02:
4a:01:55:de:19:97:40:de:f3:b9:a7:21:d5:dc:70:c1:16:a6:
c1:1e:f0:91:68:e3:c5:ba:e1:77:68:ec:70:d6:c0:65:cd:ae:
59:92:f4:9c:6b:9e:09:27:19:2d:9d:f1:53:ca:75:a6:b5:68:
2f:88:34:36:29:3a:72:db:3c:63:4b:5b:50:53:1f:bf:76:07:
9f:df:db:f8:3b:9d:78:4e:ef:6d:cb:88:10:43:63:1e:22:10:
96:56:52:7c:a0:6c:db:5a:7f:19:cc:81:d4:df:56:7e:92:b9:
dd:52:b0:72:43:5f:13:68:ff:5e:fd:f3:fe:b9:3d:78:e7:e1:
60:a8:e0:2f:5f:3e:3c:ce:35:66:c5:fe:ed:3c:59:17:88:cb:
18:d2:cb:32:5d:7e:93:54:92:76:72:4e:ba:02:d9:82:39:a4:
2e:77:c6:8e:b3:f1:21:0f:35:85:25:4d:a2:da:35:3b:81:62:
1f:59:52:5a:05:49:a1:46:f7:42:f3:c1:df:6b:b6:77:c5:3a:
3e:ec:a6:e7:ef:92:21:91:c0:fe:59:b0:c1:9c:4a:f5:36:6f:
72:b7:22:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:51:21 2025 by rpki-client