Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fz9jAULflvkt1pb5rzuVAzM_bd0.roa
File: Fz9jAULflvkt1pb5rzuVAzM_bd0.roa (raw, json)
Hash identifier: pqbnp2/OQDJwrWOSfNBTJuHkgeKEOYPk4U5s+hIpDBA=
Subject key identifier: 17:3F:63:01:42:DF:96:F9:2D:D6:96:F9:AF:3B:95:03:33:3F:6D:DD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522890C36FE15623F4AF3F85ABB3404
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fz9jAULflvkt1pb5rzuVAzM_bd0.roa
Signing time: Thu 02 Jan 2025 03:50:07 +0000
ROA not before: Thu 02 Jan 2025 03:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215517
IP address blocks: 2a0e:97c0:6f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:89:0c:36:fe:15:62:3f:4a:f3:f8:5a:bb:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=173f630142df96f92dd696f9af3b9503333f6ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:df:e0:81:34:1c:a1:c0:98:12:25:0e:2d:
18:3c:5c:6a:ee:fa:e5:02:75:10:fd:88:ad:ae:4c:
20:e8:51:3f:63:fa:d4:07:7a:da:8e:32:81:8a:2f:
4d:e0:7d:8a:74:14:cc:b6:fe:c6:47:11:9d:a7:ef:
2a:d0:9a:4b:e9:31:73:ae:bd:52:b4:7b:86:14:06:
8e:8b:9c:8b:99:ac:01:5b:70:51:4e:18:15:f7:b8:
b6:5c:ba:6b:93:e9:6c:c6:47:db:73:e3:88:6d:e5:
13:2f:89:a6:e5:1a:c6:3e:ce:7a:34:c9:32:18:a4:
14:b7:b1:b0:90:df:ea:2f:aa:c0:c6:24:57:3f:94:
66:cd:b6:09:90:d1:50:bc:e1:71:a4:2d:3c:f2:96:
8e:60:40:9c:98:30:78:94:ab:10:b2:db:bd:f0:ef:
6f:90:29:db:c2:8e:94:7f:30:c6:ab:1f:07:c0:da:
e0:2d:89:46:14:ae:ac:b7:57:55:ad:62:7e:fc:7f:
dd:5c:a4:31:1e:4c:6f:27:72:d6:c2:ae:5d:89:d2:
4d:3a:fc:e1:fd:be:bb:95:2a:fb:50:f0:0e:05:9d:
a4:16:ce:fb:6d:9f:68:3e:2c:46:72:31:bd:45:85:
8e:f1:2c:3d:10:a8:c9:ed:15:f4:a0:6b:da:92:7b:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3F:63:01:42:DF:96:F9:2D:D6:96:F9:AF:3B:95:03:33:3F:6D:DD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Fz9jAULflvkt1pb5rzuVAzM_bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:6f0::/44
Signature Algorithm: sha256WithRSAEncryption
08:94:21:4b:ab:6a:4b:2d:c1:98:97:35:1a:fa:d5:79:7d:ed:
0c:31:28:59:09:e2:34:93:65:c1:6b:56:ee:ab:06:c8:0a:d2:
f0:fe:a6:a2:ae:2c:07:da:9f:45:7e:31:fd:39:60:ed:f1:2c:
eb:e1:07:2c:71:b6:78:59:9c:1f:87:d9:58:bc:77:58:44:a3:
6c:7e:32:8c:73:9b:71:ab:18:e5:ad:e6:15:08:5c:a3:08:be:
a0:5a:19:ab:33:71:d4:c5:67:42:34:3a:4f:50:0c:ce:90:ae:
f7:e2:49:d5:7a:ad:89:27:40:df:bd:08:4c:ee:db:ae:0b:34:
f9:e6:27:da:e0:18:0e:0a:f9:ca:dd:63:b8:4a:60:89:a5:4a:
1e:a2:5c:5e:de:6e:95:88:66:f0:4e:bf:43:76:39:30:13:b9:
bd:da:89:1a:85:08:e8:7d:69:32:e8:2b:b6:03:62:79:04:ca:
f0:d7:e9:50:6e:86:02:d9:6f:0b:52:45:34:70:b6:62:f6:7f:
cc:ac:a8:70:50:40:66:ac:a7:51:2b:e6:4f:1a:8a:0c:6c:f9:
4e:9a:8c:b2:38:13:04:e2:d6:89:32:d9:bf:cd:9b:ad:b3:5b:
6f:3c:70:84:e4:15:4c:2a:71:3d:60:98:4a:89:1c:c3:c2:28:
a4:ab:ad:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:48:16 2025 by rpki-client