Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GRlWkbjWpmUFX_pJggxGtEk9RmQ.roa
File: GRlWkbjWpmUFX_pJggxGtEk9RmQ.roa (raw, json)
Hash identifier: cyPFfmkib5TpPKQX5KokrS40pEYRpomJuD1G8yyupFw=
Subject key identifier: 19:19:56:91:B8:D6:A6:65:05:5F:FA:49:82:0C:46:B4:49:3D:46:64
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522652AF0F103077E4C4145A24C24E3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GRlWkbjWpmUFX_pJggxGtEk9RmQ.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212568
IP address blocks: 2a10:2f00:151::/48 maxlen: 48
2a10:2f01:300::/44 maxlen: 48
2a10:2f01:30a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:65:2a:f0:f1:03:07:7e:4c:41:45:a2:4c:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19195691b8d6a665055ffa49820c46b4493d4664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:49:a2:80:e2:7d:f1:cd:1b:f2:ed:11:a9:4d:
d0:47:7e:47:69:81:c0:c6:01:9f:05:57:af:2b:14:
8c:a2:97:ff:ec:a7:11:bf:19:97:ac:01:0c:34:a4:
28:53:a4:2b:74:18:55:a2:3e:44:91:39:71:87:c4:
52:fa:2d:d0:54:1b:b7:76:cf:56:62:bf:35:c4:96:
6e:8b:4c:94:23:b8:c0:c5:72:31:38:83:48:a9:c5:
9a:c0:27:33:c9:6c:ec:80:09:55:4a:22:41:38:3e:
90:c6:53:6b:66:26:02:17:44:31:f9:00:96:86:4a:
57:1c:bc:15:ea:91:58:33:ba:a3:71:96:a0:90:1e:
92:5c:52:13:48:c2:b7:7a:79:c5:ce:bf:fa:60:45:
4e:2a:fd:8e:f7:ec:e1:b8:46:90:0f:f0:88:d5:83:
63:44:7b:4d:0c:9a:fd:ae:81:a5:3f:63:c5:bb:af:
27:97:df:f8:79:36:5c:a2:ec:e7:3c:ee:c0:7c:c0:
c7:c0:08:03:7a:1c:c1:24:7c:40:5b:a1:a2:38:3a:
ce:4f:85:3f:39:55:e2:66:98:e2:4c:42:a1:1d:0e:
27:44:65:40:fb:6f:77:f0:ec:f9:80:e6:34:d4:2e:
b4:81:c1:59:03:10:17:b7:10:5f:15:e0:e0:58:79:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:56:91:B8:D6:A6:65:05:5F:FA:49:82:0C:46:B4:49:3D:46:64
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GRlWkbjWpmUFX_pJggxGtEk9RmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:151::/48
2a10:2f01:300::/44
Signature Algorithm: sha256WithRSAEncryption
48:ac:de:7d:8b:f8:14:fc:5f:8a:ee:f7:c0:cd:2b:e0:a7:7c:
f0:93:be:a9:36:aa:15:cc:0b:c4:e9:64:71:6d:54:63:2b:72:
09:c3:78:29:d9:66:51:90:ca:0f:4a:13:ef:20:6a:e1:52:84:
8a:2c:17:94:96:46:89:ce:fc:12:e6:ea:0d:8b:8d:a9:67:ec:
7b:da:59:08:95:5d:72:af:7f:b1:63:32:09:f5:b3:c2:a9:59:
94:10:8c:bd:f9:ba:5c:6b:35:a4:1a:d3:6f:1b:73:92:fb:65:
4b:74:ae:f1:7e:7b:c2:a7:e7:d3:32:79:bb:b8:f5:38:dd:a9:
1a:dd:25:f3:ed:81:1b:5c:29:dc:61:2b:61:11:fe:f0:c0:1a:
0b:31:c5:50:2d:9b:32:95:5c:c4:3b:38:8a:6c:a5:17:fa:25:
9c:93:e8:69:c7:99:09:27:05:48:c9:0d:4b:6e:c8:0b:24:20:
33:63:d5:d2:d6:4e:95:fe:43:3b:01:5c:8b:d0:f3:5f:69:ab:
f5:0b:1a:2f:23:78:b8:c9:c6:b7:81:a0:6f:88:76:81:e3:ff:
f9:4b:3c:7d:32:b7:5e:61:78:87:58:07:48:7e:9a:f5:22:d1:
e8:7f:e3:30:01:82:e8:57:85:c3:9b:48:5c:21:57:d6:c8:05:
4a:1f:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:31 2025 by rpki-client