Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G5TNk-F8CmRjvi6jKKhq2aO21b4.roa
File: G5TNk-F8CmRjvi6jKKhq2aO21b4.roa (raw, json)
Hash identifier: awDmQJAzJ9S53kuTEz04aRAgK/U2UchpZAzBbgXvZHc=
Subject key identifier: 1B:94:CD:93:E1:7C:0A:64:63:BE:2E:A3:28:A8:6A:D9:A3:B6:D5:BE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522358941B5A0C86E1DF7C4BF242E05
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G5TNk-F8CmRjvi6jKKhq2aO21b4.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209225
IP address blocks: 2a10:2f00:17e::/48 maxlen: 48
2a10:cc40:100::/44 maxlen: 48
2a10:cc40:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:89:41:b5:a0:c8:6e:1d:f7:c4:bf:24:2e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b94cd93e17c0a6463be2ea328a86ad9a3b6d5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:0a:25:84:28:a8:4e:78:ad:df:c5:fa:cd:
cf:1c:6e:27:92:f6:dc:61:b9:95:13:d0:ca:71:f6:
dd:c4:ec:80:01:67:b0:ee:61:a3:a7:a9:2f:74:43:
89:45:2e:f0:30:a1:06:61:f4:60:5c:fb:be:22:81:
38:36:ce:42:e9:2c:0f:4d:11:8c:71:fe:a0:b6:d7:
2e:7f:27:2a:d9:08:d8:63:c5:77:42:8d:b2:ff:82:
04:e0:e5:66:7e:fd:47:99:1d:db:2e:0e:7b:65:19:
97:a1:92:7c:a2:34:99:c0:fb:6f:9b:10:22:29:59:
60:5c:d5:8c:7f:17:c4:b4:b6:c0:b9:18:68:43:68:
6a:63:7d:6e:1e:89:b8:78:dc:c6:9f:40:e5:b1:5e:
e1:8e:0d:73:3c:21:f9:c4:75:44:a2:e6:b8:db:64:
a7:df:16:2c:a2:3f:c1:12:fb:a8:fb:bb:c3:65:98:
88:d4:86:45:bc:63:fe:ef:25:1c:51:b9:5c:3d:ea:
11:9f:75:6c:e3:79:8f:50:8f:5b:c0:06:73:66:ec:
16:80:3a:34:9e:6e:af:25:be:47:bf:0b:74:b3:f1:
79:bb:55:93:17:4c:8b:52:3d:6d:3c:53:aa:ab:d3:
3a:48:50:05:9b:8b:b7:20:35:75:a0:8d:a4:2a:b0:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:94:CD:93:E1:7C:0A:64:63:BE:2E:A3:28:A8:6A:D9:A3:B6:D5:BE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G5TNk-F8CmRjvi6jKKhq2aO21b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:17e::/48
2a10:cc40:100::/44
Signature Algorithm: sha256WithRSAEncryption
0b:aa:ca:7f:93:84:2c:0f:51:ff:36:74:83:ee:f9:92:7c:65:
56:7a:f3:83:10:59:8c:25:0f:92:6c:8a:7f:cb:af:6c:ea:76:
5d:6f:10:66:0b:e7:8a:83:29:60:9c:25:de:fd:85:8e:1d:47:
04:32:f0:ba:b4:8b:a4:21:18:5d:23:4b:39:74:20:5b:7b:6a:
ce:f7:7a:64:a0:55:e6:b4:4e:71:7c:98:36:69:b5:d3:be:60:
28:a7:59:74:3d:3d:c8:19:d0:c6:23:5f:a4:6e:b4:59:ce:15:
e1:f8:b7:b9:18:d2:a6:b1:be:68:65:51:12:c0:e9:0c:07:3a:
cf:5f:f1:45:65:38:70:08:09:d6:cd:96:47:b4:c0:88:4b:db:
89:89:6f:6a:9e:43:38:96:7b:39:0a:57:f7:db:16:c4:ff:48:
ea:49:cd:e2:9e:28:ea:1a:d2:83:49:14:0d:d9:01:6b:87:e7:
ff:8e:c6:a1:64:33:cd:7b:0f:dd:d1:f9:e1:93:67:c8:dd:fb:
cf:e1:11:39:e9:a7:dd:36:7f:d9:82:17:e8:1c:ed:dc:2f:20:
55:e0:f7:5b:c7:65:dd:ac:02:bc:2d:1f:fe:7e:b2:b2:7b:92:
32:d2:74:e5:73:86:ee:ce:cf:9a:f9:fc:c0:9b:e5:d3:ea:a3:
c7:68:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:59:07 2025 by rpki-client