Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FuA-RxlG-lv91ohsabLBUYeZO9Q.roa
File: FuA-RxlG-lv91ohsabLBUYeZO9Q.roa (raw, json)
Hash identifier: bHAPdT8er4Ms/9F49VTT2RL6oIZXO4YSAa2BKk+P1UU=
Subject key identifier: 16:E0:3E:47:19:46:FA:5B:FD:D6:88:6C:69:B2:C1:51:87:99:3B:D4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425225DE263824DFC670F2BC869EF9912
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FuA-RxlG-lv91ohsabLBUYeZO9Q.roa
Signing time: Thu 02 Jan 2025 03:49:56 +0000
ROA not before: Thu 02 Jan 2025 03:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212267
IP address blocks: 2a0e:b107:50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:5d:e2:63:82:4d:fc:67:0f:2b:c8:69:ef:99:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e03e471946fa5bfdd6886c69b2c15187993bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:e7:f7:35:71:38:c9:c2:a0:6f:0f:66:ef:
2b:4c:f9:1f:a1:07:04:8d:28:d7:80:e1:3c:a4:a9:
24:02:03:41:b3:8e:93:a9:e5:08:f7:b0:22:aa:bf:
b1:64:2f:d8:74:8c:81:ed:65:8c:01:aa:ff:60:57:
96:13:4b:77:75:58:84:f4:14:3c:24:ce:44:dd:bc:
3b:30:2c:f5:77:9c:82:41:28:6b:ac:fd:0d:c4:45:
f4:1a:1b:a5:c5:c5:c2:43:e8:df:e6:3f:88:bd:02:
4d:f6:9c:e4:d3:bb:b7:80:7c:14:10:cb:9e:13:a0:
59:ed:51:f7:40:60:d6:0f:69:d4:57:25:33:64:72:
75:bd:0d:f8:6f:2f:97:66:5f:71:6f:9c:e4:14:1f:
66:a5:0a:1e:9e:1e:14:06:8f:0a:8d:c3:35:2f:65:
85:33:b6:87:b4:c1:4f:ef:f8:54:59:ba:78:f5:5b:
be:1e:fb:56:ba:c8:6e:b6:1f:f3:2c:36:a1:d1:79:
15:6d:9e:d6:4c:45:98:9e:7a:98:93:43:4a:c2:de:
39:29:f1:9d:76:dc:ed:82:b3:bb:1b:ac:37:b4:3a:
32:25:09:6b:74:b9:16:43:73:3c:c8:51:bd:bc:43:
08:37:42:68:f4:ca:37:7b:d8:5e:50:7e:16:3f:4e:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:3E:47:19:46:FA:5B:FD:D6:88:6C:69:B2:C1:51:87:99:3B:D4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FuA-RxlG-lv91ohsabLBUYeZO9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:50::/44
Signature Algorithm: sha256WithRSAEncryption
40:b4:81:b4:75:4b:24:9c:17:3c:f3:5e:fb:cb:b2:6d:07:8d:
06:fc:8a:47:b5:bb:53:40:05:55:80:da:dc:8f:ea:5d:9a:01:
26:a6:05:28:3a:fb:af:d7:50:7c:ee:24:20:12:ea:c1:61:74:
dc:4d:e4:e2:40:44:01:90:e7:51:4f:1c:78:f4:3e:ea:8d:ba:
b1:65:83:35:dd:73:cd:9e:a5:2d:2a:32:a9:b0:33:27:69:15:
96:51:97:e9:85:47:e1:fb:66:07:95:9b:79:c1:90:21:71:8b:
58:ca:b0:c4:6e:e0:da:52:a0:94:cd:33:4c:0d:11:9e:b5:dd:
72:3b:e8:a0:06:a3:71:a2:18:0d:9c:7a:12:c3:21:f0:fd:ba:
9b:0b:a6:28:89:d4:40:16:04:ae:5b:fb:69:d8:69:34:f0:33:
a7:92:ba:78:cc:6a:26:f1:7f:43:f4:09:65:b9:98:16:55:f0:
3e:de:3e:b0:bc:dd:7a:ff:7e:5f:e6:f2:aa:cf:1e:38:46:e7:
db:50:d3:65:dd:15:d1:eb:53:7c:cf:db:bf:92:8b:bc:65:f5:
63:98:2a:14:b2:f1:e2:ee:d4:69:0a:c1:45:2e:10:fe:4b:b2:
13:5a:9f:74:c1:61:4d:a1:b8:c5:2c:ba:4e:ba:61:67:cc:7f:
f4:33:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:28 2025 by rpki-client