Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FkJRoZSblEz-WUFqFuETVSDpzZk.roa
File: FkJRoZSblEz-WUFqFuETVSDpzZk.roa (raw, json)
Hash identifier: LGwPShqNSnUitZEtqNS5PfAcijsIekcz1XpbftzcYwY=
Subject key identifier: 16:42:51:A1:94:9B:94:4C:FE:59:41:6A:16:E1:13:55:20:E9:CD:99
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521C653D95FACD2937D72A7E89A6719
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FkJRoZSblEz-WUFqFuETVSDpzZk.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18041
IP address blocks: 2a0e:b107:1310::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c6:53:d9:5f:ac:d2:93:7d:72:a7:e8:9a:67:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164251a1949b944cfe59416a16e1135520e9cd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:86:b2:50:9b:36:1a:df:34:00:3f:c7:71:
ce:c5:8c:77:f6:3a:e5:d0:b6:99:91:34:83:32:c2:
1c:75:5e:53:77:24:d5:2a:0f:3f:ac:9a:7d:7f:07:
d3:d9:4f:27:51:77:15:97:cb:3f:7b:ae:95:d9:d7:
8f:f0:41:40:0c:20:35:6c:dc:95:c1:87:01:0b:d2:
ac:42:5d:38:b9:7b:a1:a0:02:9e:da:f6:25:81:da:
36:9a:c8:85:54:c5:c3:6c:c9:9b:2d:dd:09:5d:af:
88:5a:55:03:00:56:9c:00:3a:68:d0:47:d6:a3:b9:
df:45:b9:4e:c5:a8:50:ca:3d:94:3e:37:ec:81:dd:
ef:50:ac:1d:b0:c3:c1:15:81:c6:a8:87:71:8f:75:
4c:45:fa:f2:6b:4a:63:29:b6:08:fd:3b:83:0a:46:
82:23:c7:b3:38:9b:ac:19:d7:c6:16:02:e6:a5:47:
bf:54:a9:8d:ab:5b:52:af:5e:0c:47:57:8c:7b:61:
9d:d9:d0:43:d3:dd:d9:7a:bd:c1:28:a3:3e:cf:17:
e1:40:9c:78:c5:92:06:a1:a8:01:28:20:8b:18:ba:
61:df:59:34:6b:b8:e7:80:d8:80:c0:97:e1:5e:f5:
f3:01:c1:40:43:46:da:4b:7f:91:9f:ee:bd:f2:46:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:51:A1:94:9B:94:4C:FE:59:41:6A:16:E1:13:55:20:E9:CD:99
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FkJRoZSblEz-WUFqFuETVSDpzZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1310::/44
Signature Algorithm: sha256WithRSAEncryption
bb:66:6b:c6:e7:1b:0c:f3:e0:a4:38:e1:c4:8a:ba:1f:d0:b4:
39:78:29:ee:2c:bd:30:c5:93:3b:9a:68:39:75:4c:c5:1c:78:
3d:ee:b3:86:0d:8d:98:bb:b6:f9:69:40:f2:eb:af:6e:71:84:
97:2b:bd:e6:12:aa:31:08:56:7e:0b:af:2f:21:34:c2:bf:bc:
0f:bc:63:36:1d:11:a2:2b:6c:ca:c9:30:f1:99:bc:68:09:32:
fd:d3:2c:ed:2f:de:26:0b:9b:91:b9:6c:a6:9b:a3:1e:a9:06:
79:be:5b:e2:9e:70:3c:b4:bf:63:2d:4c:fc:8b:52:51:33:1a:
50:ff:04:d2:4f:67:11:b4:39:a5:c5:13:a1:21:1f:a0:42:6a:
61:ae:15:8b:d2:fc:f7:23:c2:29:ff:ba:7d:1c:c2:34:dc:35:
68:3c:81:94:27:b6:17:fd:64:f9:d7:cb:6e:5f:53:27:3a:ba:
9c:37:a3:d9:27:0c:f9:d2:0e:7e:20:4c:fc:4d:87:63:6c:ac:
c8:5f:10:92:e8:c4:44:06:1d:a1:e9:56:82:82:85:19:ec:9e:
50:0f:21:c0:53:65:e2:94:7e:82:f9:dc:d8:3e:b9:0d:a2:bd:
4a:0c:34:37:fd:2f:c1:64:d7:bb:fa:26:73:e2:ba:0c:82:53:
28:00:50:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:57:39 2025 by rpki-client