Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HGdtbrgPp9i1ILY0AlpQmm4QHkE.roa
File: HGdtbrgPp9i1ILY0AlpQmm4QHkE.roa (raw, json)
Hash identifier: IwxzhG2jg0WJe+IE3jVltnGTR3HPOa9spI5wADZoYik=
Subject key identifier: 1C:67:6D:6E:B8:0F:A7:D8:B5:20:B6:34:02:5A:50:9A:6E:10:1E:41
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425222C367D0E0D5CAC5A0F4E39FF15A2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HGdtbrgPp9i1ILY0AlpQmm4QHkE.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208191
IP address blocks: 2a0e:b107:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2c:36:7d:0e:0d:5c:ac:5a:0f:4e:39:ff:15:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c676d6eb80fa7d8b520b634025a509a6e101e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:3f:53:e2:75:6e:a8:d0:be:1f:1f:68:bd:
1c:e5:a0:f2:4f:0f:57:4b:78:25:67:21:49:32:4c:
7c:ed:98:b4:5a:a5:d9:fb:6a:74:03:50:b5:f4:64:
c8:ae:df:7e:81:70:07:64:da:58:0f:e2:8c:29:02:
e4:54:30:2e:0c:6c:b9:ce:b5:8f:86:4b:f2:25:73:
cf:4c:1a:28:5a:f9:64:81:4e:cd:d3:27:9c:72:9d:
bb:59:09:ab:5d:67:d5:36:8c:31:40:ff:0e:ff:aa:
3d:5f:e8:91:56:ef:8e:9f:03:f8:9c:88:24:39:08:
f6:98:78:cf:3d:cc:ad:41:f6:c8:fa:cb:18:cb:4a:
54:18:7b:73:0c:fa:a7:c1:76:69:05:2d:65:45:f2:
52:dc:aa:04:a7:a3:bf:b4:e3:d7:a7:cd:14:34:3f:
6f:83:af:8b:56:2f:06:78:bd:f1:01:46:a3:cc:9a:
4b:85:3f:01:19:81:d4:d5:a0:a5:63:ef:f6:bc:9d:
d7:8d:85:fd:5d:07:68:4e:a1:89:51:f7:b4:8f:4a:
e0:38:2f:82:e7:92:df:2b:2f:6d:e7:ca:fe:f0:17:
c5:f7:cb:eb:60:86:e6:78:9b:20:2f:94:2f:99:c6:
9e:b4:ca:f5:ed:e3:27:b8:f0:58:7b:12:04:c5:65:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:67:6D:6E:B8:0F:A7:D8:B5:20:B6:34:02:5A:50:9A:6E:10:1E:41
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HGdtbrgPp9i1ILY0AlpQmm4QHkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:16::/48
Signature Algorithm: sha256WithRSAEncryption
94:c3:48:a7:69:0d:76:99:04:60:0b:29:85:2b:1a:ad:05:bd:
b4:7c:b9:fc:f4:12:74:6f:e9:58:28:b0:7a:ea:e7:dc:50:d3:
d5:a8:7b:63:c4:2b:d2:5c:02:72:24:de:b9:04:3a:dd:45:1f:
a3:e7:da:29:62:6e:dd:50:60:4b:b8:bc:e6:76:0a:35:f3:59:
21:58:ca:e2:41:5e:38:4c:18:6d:04:5a:a3:13:19:a6:54:4c:
a5:ed:61:c7:a4:d0:24:a5:b1:5a:f5:87:c6:e3:f9:3f:3e:6c:
53:47:9b:5e:91:f4:00:f3:05:d8:e2:c2:50:0a:0c:b3:9c:ee:
60:b5:fb:c5:ff:de:b9:02:1d:a8:75:c7:ec:01:de:8d:6a:3e:
0e:8b:fa:02:c7:d2:fd:95:b2:73:d1:06:80:c4:54:7d:8c:68:
78:8b:ae:f8:10:ac:73:f7:19:bf:3f:5d:77:b5:e6:4b:e2:e9:
30:46:7c:5d:15:49:92:31:18:08:dc:80:30:7f:8c:85:71:e5:
fc:bb:e4:ba:d3:b8:81:73:a6:62:ec:20:31:f1:64:eb:54:3c:
42:4b:f6:46:1f:63:6b:08:77:aa:dc:1a:79:c1:e0:9f:74:d5:
e1:d9:e2:0d:60:c5:4a:12:9c:bb:83:df:bd:38:ec:53:d8:5c:
1b:80:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:44:27 2025 by rpki-client