Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G5kYlpL77Om3jF4rtiwRaKfgWWA.roa
File: G5kYlpL77Om3jF4rtiwRaKfgWWA.roa (raw, json)
Hash identifier: 15ZVQUP1E9WlIK/+m8voVRGXkAASRj+TYqJW1yVC+Qo=
Subject key identifier: 1B:99:18:96:92:FB:EC:E9:B7:8C:5E:2B:B6:2C:11:68:A7:E0:59:60
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195D4DE8F554A8042AA805A79484730370B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G5kYlpL77Om3jF4rtiwRaKfgWWA.roa
Signing time: Wed 26 Mar 2025 23:51:50 +0000
ROA not before: Wed 26 Mar 2025 23:51:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199310
IP address blocks: 2a0e:b107:2440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:de:8f:55:4a:80:42:aa:80:5a:79:48:47:30:37:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 26 23:51:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b99189692fbece9b78c5e2bb62c1168a7e05960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:33:07:d9:6e:77:37:85:c2:88:6b:46:c7:
58:e2:38:83:06:2e:5e:2e:02:04:c4:a4:2c:96:74:
08:c0:aa:50:37:c0:23:b0:eb:d2:f5:03:a8:ac:2c:
6e:96:7c:ba:9d:44:57:9d:e9:f4:4f:8b:8f:91:79:
90:88:4a:6b:81:d6:d8:6d:f7:b9:d5:fa:ce:e7:ad:
d9:ae:f8:df:7f:ed:2c:17:a7:18:1e:5e:0d:ed:93:
5e:96:ae:0b:dc:77:02:af:c6:10:8d:ee:7d:5f:02:
74:b5:f5:4e:b5:10:ab:dc:20:21:22:3f:fc:af:67:
42:9e:13:be:09:1b:b0:be:62:ae:b0:a1:0a:24:ae:
96:a2:c8:f4:ca:1e:c0:28:01:81:76:59:43:ec:4f:
33:cf:e7:c4:45:d7:be:f2:e1:33:96:16:b9:65:94:
78:42:56:4b:b5:7a:f3:96:f5:13:11:19:e9:38:71:
08:36:85:30:f5:a4:b9:25:94:c4:c2:6c:87:14:c3:
1a:79:38:44:58:4e:b9:c9:41:44:7a:d3:0d:64:54:
0d:39:21:8b:c3:e1:d4:c9:b7:c4:97:8a:de:f7:93:
50:c4:15:21:a4:de:99:6f:96:d3:0e:c6:19:02:9e:
90:aa:8d:8d:78:a0:55:2a:f9:e5:87:f8:a0:d6:77:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:99:18:96:92:FB:EC:E9:B7:8C:5E:2B:B6:2C:11:68:A7:E0:59:60
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G5kYlpL77Om3jF4rtiwRaKfgWWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2440::/44
Signature Algorithm: sha256WithRSAEncryption
8c:09:73:c9:62:41:94:93:db:b2:89:64:40:01:ea:d1:5a:8a:
41:c7:f2:d8:a7:86:2f:d1:89:58:06:eb:dc:bb:44:11:c8:a8:
1e:0d:98:82:7e:29:64:f2:4b:bc:37:24:40:9b:1b:e4:a1:1d:
e4:8f:ef:74:49:84:5b:e4:96:1f:f5:95:fe:4c:dc:79:e5:8e:
86:f3:01:67:ca:fa:03:35:0c:0d:94:ef:c9:1c:96:ab:a8:51:
b7:fa:1f:3e:56:b4:ff:4d:4e:fc:8d:be:a1:1e:23:f4:f7:5a:
57:a8:9f:c3:f4:96:62:ae:00:34:f0:ce:29:ee:8b:cd:36:f1:
1a:a0:de:8a:b3:60:49:32:01:fe:e5:e6:2f:2b:5c:d4:80:24:
d5:d6:df:93:90:ff:07:cf:7b:92:c1:e3:ff:19:f9:60:5c:7b:
62:1c:cd:d6:52:c8:30:b0:a9:58:4f:e0:40:6e:e5:d1:51:16:
2f:4f:be:f7:16:bf:e5:7c:2a:1d:3d:d7:21:13:68:6b:06:05:
1e:bc:af:8d:0e:80:b8:13:d5:a9:b6:71:52:25:0a:42:ff:9e:
8f:c5:a0:c8:ac:f6:6f:f7:13:da:06:61:88:e6:6a:cf:d0:5c:
ca:b1:94:0a:38:97:19:de:ff:a3:eb:d0:87:2d:06:dc:25:a4:
72:be:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:25:12 2025 by rpki-client