Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/INd6Xfu7p5oqRy3fAtR6A7u1g8U.roa
File: INd6Xfu7p5oqRy3fAtR6A7u1g8U.roa (raw, json)
Hash identifier: RlpKhWN0+M/yF/Tuzg04kam+3FW2l0DHzkk+u9AL+OE=
Subject key identifier: 20:D7:7A:5D:FB:BB:A7:9A:2A:47:2D:DF:02:D4:7A:03:BB:B5:83:C5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425229340F4B9E856FC9030B19E91C432
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/INd6Xfu7p5oqRy3fAtR6A7u1g8U.roa
Signing time: Thu 02 Jan 2025 03:50:10 +0000
ROA not before: Thu 02 Jan 2025 03:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215980
IP address blocks: 2a0e:97c0:e30::/48 maxlen: 48
2a10:ccc0:3000::/48 maxlen: 48
2a10:ccc0:3001::/48 maxlen: 48
2a10:ccc0:3002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:93:40:f4:b9:e8:56:fc:90:30:b1:9e:91:c4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20d77a5dfbbba79a2a472ddf02d47a03bbb583c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:60:e8:f8:3e:ce:e2:ac:6e:b1:9a:93:dd:
e0:6b:51:e3:03:5e:f6:44:a8:40:63:0e:8e:39:e4:
5e:5a:dc:49:8d:24:b2:1c:cf:34:89:fd:51:05:9d:
1d:ed:25:02:f3:9f:27:bb:4b:0b:50:bf:82:1b:d7:
92:0b:ec:1c:bc:d8:e1:0c:f0:14:d0:78:02:af:bc:
df:b9:a8:43:a7:c1:88:81:d7:ff:69:da:8d:ca:a7:
ff:67:0e:72:d6:91:84:8a:66:76:83:55:ad:4a:5e:
81:18:3b:2f:27:1a:c8:fb:b4:93:aa:0b:4b:09:e0:
39:36:3b:85:ef:c9:b1:e7:87:f9:8a:eb:b1:99:5a:
64:7a:df:99:6f:29:5e:50:01:3c:c3:6b:77:00:b7:
e2:a0:be:b8:81:6e:fa:c6:5d:66:b3:c6:e8:4e:c5:
ac:aa:68:0e:c7:db:45:10:cb:ea:dd:ea:41:8b:7a:
c8:d5:c3:5f:d5:72:c2:32:f2:29:ed:58:88:a6:0d:
00:09:1f:e2:44:ea:2f:97:41:c6:28:7b:6e:bc:ac:
f5:d6:11:2e:fb:1c:88:41:61:84:93:a7:2c:db:3b:
27:21:33:48:d0:f1:65:df:3f:ca:c7:30:f0:6a:fb:
28:e9:76:a7:5e:ba:71:92:d8:02:4a:6e:20:c3:55:
d5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D7:7A:5D:FB:BB:A7:9A:2A:47:2D:DF:02:D4:7A:03:BB:B5:83:C5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/INd6Xfu7p5oqRy3fAtR6A7u1g8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:e30::/48
2a10:ccc0:3000::-2a10:ccc0:3002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
37:fb:77:91:77:65:34:1d:12:8f:ed:c8:ab:77:ef:26:dd:88:
ba:9f:26:1d:03:bb:20:57:93:6b:ae:b1:1e:37:55:de:a7:07:
ee:d2:c1:a7:54:f5:a7:a3:e1:4b:39:5a:28:02:9d:31:1c:bb:
e0:07:99:46:f0:56:3f:4e:de:63:83:60:fb:74:1f:a9:b7:4d:
54:ea:19:eb:9e:34:39:6c:3a:8e:b2:30:d0:0b:a3:53:1f:98:
49:7e:51:1f:ab:19:83:fa:06:90:ac:22:e6:8e:9a:33:d7:16:
20:be:65:25:7e:5f:b6:05:eb:a5:43:4b:c0:b2:ef:06:a6:e0:
a5:a5:ce:f7:3b:25:27:4c:79:54:da:8f:f2:be:79:08:6d:e1:
d9:fc:4e:b0:bc:68:3d:9f:97:23:46:e8:b6:1d:b4:29:6f:8b:
13:b0:14:50:09:55:50:9e:cf:1d:70:1a:1b:60:cc:27:62:9c:
80:ef:18:af:20:a0:25:9e:b7:d7:1a:d3:5e:ba:41:30:01:9a:
35:eb:69:0b:4d:27:fc:23:2d:ed:dc:0f:57:0f:9c:25:fc:6c:
ae:75:33:db:87:ad:31:92:ce:14:5d:b3:cd:ab:1e:6d:35:3e:
07:69:c1:fb:da:a5:28:30:52:7f:b5:d1:58:eb:f7:0d:a6:65:
86:83:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:58 2025 by rpki-client