Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hi1UdUAphOEwhnWBbGPEY3neEVA.roa
File: Hi1UdUAphOEwhnWBbGPEY3neEVA.roa (raw, json)
Hash identifier: CARCOgHEMwRcoXbPTgGupQI47ePSlDLPZSBNDjthx6s=
Subject key identifier: 1E:2D:54:75:40:29:84:E1:30:86:75:81:6C:63:C4:63:79:DE:11:50
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522821903A80DF610456193BA28BE24
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hi1UdUAphOEwhnWBbGPEY3neEVA.roa
Signing time: Thu 02 Jan 2025 03:50:05 +0000
ROA not before: Thu 02 Jan 2025 03:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215011
IP address blocks: 2a06:de00:50::/44 maxlen: 48
2a06:de01:d0::/44 maxlen: 48
2a0e:97c0:8a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:82:19:03:a8:0d:f6:10:45:61:93:ba:28:be:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e2d5475402984e1308675816c63c46379de1150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:39:91:c5:35:f4:cd:19:2e:2f:3e:62:35:
94:46:ea:90:a2:5c:41:3a:6b:e2:ad:5f:b5:6b:71:
e0:b0:b1:50:0d:d1:2c:6b:2e:ae:fe:ba:f4:bb:c2:
53:cc:44:d7:7a:6c:8d:8b:07:99:2d:99:7c:9b:79:
38:7a:15:a8:c6:e5:dc:29:5c:8d:5c:6d:d1:c8:cd:
86:31:62:0c:91:3c:33:3f:06:d1:df:ec:ea:e1:8c:
59:18:e5:2c:ee:26:21:84:04:2e:1c:67:07:d1:9d:
b8:79:bd:1b:90:5b:47:ec:f9:09:46:75:2a:9e:4e:
f4:e2:8f:f1:5a:3b:8c:a0:89:fb:6c:b4:2b:bb:47:
0f:9d:e0:a0:3e:04:7e:ad:c4:4e:29:03:c3:6e:1f:
77:a3:b3:a4:19:a2:30:68:f7:88:a5:47:d1:d1:36:
51:79:3b:17:97:62:b5:9b:36:e3:7c:94:9f:e4:0f:
9b:c1:e2:5e:67:b7:2c:fa:9c:82:cf:17:66:c6:22:
fa:c5:2b:79:e7:74:98:5d:9d:dc:68:82:07:3c:a5:
e7:c7:d7:74:ea:a4:bf:86:ca:94:0c:fa:e2:cc:ae:
bc:b1:b8:21:f5:ec:32:fb:a9:8b:45:b9:4a:8d:56:
ee:7f:ea:b0:32:54:45:d8:d6:34:1c:c0:e4:56:22:
16:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2D:54:75:40:29:84:E1:30:86:75:81:6C:63:C4:63:79:DE:11:50
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Hi1UdUAphOEwhnWBbGPEY3neEVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:50::/44
2a06:de01:d0::/44
2a0e:97c0:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
79:6e:38:00:e5:3d:dd:14:38:db:8e:cb:41:09:ec:01:f2:28:
c8:63:7f:36:f7:72:c9:a1:cf:1a:96:a2:13:6c:f8:53:cd:06:
71:6f:bc:47:0b:47:4f:92:df:bf:0f:43:12:32:6a:2a:bb:ac:
86:11:c4:cf:f4:d5:79:8b:85:be:24:ed:1a:73:05:57:91:02:
7e:cd:db:b6:4f:8e:77:d4:20:db:6b:7b:a7:d8:98:00:4e:3b:
81:1c:cd:ab:d7:84:52:87:99:04:ee:b5:cc:49:14:23:e4:51:
c7:cd:54:4f:2d:d4:6f:c9:25:f7:f6:60:ee:2d:d6:55:b5:ee:
48:b2:cd:6c:52:af:84:43:08:bf:3d:d4:e2:0f:ae:00:a2:0f:
ff:f5:a9:d2:81:9c:7b:38:0f:6b:a8:a7:25:3a:bf:86:ae:11:
a3:a3:60:5f:2f:6f:06:c8:33:f3:93:30:41:ed:89:7a:00:aa:
b1:00:77:5b:ad:3d:57:e1:84:00:44:7b:39:45:3c:d5:f7:b1:
e1:37:1c:fb:6f:ca:10:7b:c6:b7:3e:46:dd:5a:98:76:01:c2:
46:a9:81:9c:06:00:1e:44:74:4c:97:e6:86:de:c3:f6:c1:00:
a5:47:bf:3e:b0:f5:f0:5b:fb:fc:9f:58:38:3a:30:01:62:a5:
46:b8:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:08 2025 by rpki-client