Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ItgdbE3F305zeffe4U4hDNkLtlk.roa
File: ItgdbE3F305zeffe4U4hDNkLtlk.roa (raw, json)
Hash identifier: yEy9/zrEheNZwRFilaPlmctxcTIEtDSxfaSYI8dkMBg=
Subject key identifier: 22:D8:1D:6C:4D:C5:DF:4E:73:79:F7:DE:E1:4E:21:0C:D9:0B:B6:59
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425228172D7F6E8C218B863631B70E707
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ItgdbE3F305zeffe4U4hDNkLtlk.roa
Signing time: Thu 02 Jan 2025 03:50:05 +0000
ROA not before: Thu 02 Jan 2025 03:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214939
IP address blocks: 2a0e:b107:28d8::/48 maxlen: 48
2a0e:b107:28d9::/48 maxlen: 48
2a0e:b107:28da::/48 maxlen: 48
2a0e:b107:28db::/48 maxlen: 48
2a0e:b107:28dc::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:81:72:d7:f6:e8:c2:18:b8:63:63:1b:70:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22d81d6c4dc5df4e7379f7dee14e210cd90bb659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:f0:49:5e:5f:a7:28:dd:e8:44:59:d6:e4:
77:a5:b2:bc:3b:66:8d:dc:79:87:ba:fd:1d:dd:29:
19:60:59:3c:d6:a4:c4:f3:54:5a:1b:35:1e:37:10:
9a:02:a0:41:d2:e3:0d:00:81:8f:02:35:1a:da:6e:
ff:59:38:b1:78:07:58:8b:fb:0f:04:5a:2d:5a:06:
f3:4e:65:92:81:b1:f7:15:b0:67:58:ec:3d:73:e6:
fd:50:aa:87:c6:e6:f4:74:c5:72:b0:d0:99:fa:e3:
64:e2:22:d9:e5:ca:33:07:8e:13:bf:46:b0:25:78:
e8:14:9e:49:e8:c6:94:11:88:1f:fc:0d:d9:17:4d:
9b:89:f9:ce:b3:3b:17:9e:e6:22:c2:34:25:5b:58:
19:ab:a5:a2:28:80:05:b1:df:a1:bf:4e:1b:7f:d6:
f3:51:80:ee:d3:24:fa:01:ee:f5:45:5a:5e:fc:d0:
36:37:65:dc:fd:5f:cb:0d:2a:17:37:08:b1:73:1b:
98:13:39:3d:46:12:92:3c:30:0b:78:59:aa:91:99:
8e:0a:f1:22:0f:21:66:ab:8d:02:5e:7b:e0:76:c5:
71:66:a8:49:4a:e6:ee:7d:24:e3:f5:57:57:c8:81:
1a:fa:99:ce:8d:54:b9:63:73:9d:43:e3:c2:aa:4a:
ba:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D8:1D:6C:4D:C5:DF:4E:73:79:F7:DE:E1:4E:21:0C:D9:0B:B6:59
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ItgdbE3F305zeffe4U4hDNkLtlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:28d8::/45
Signature Algorithm: sha256WithRSAEncryption
0b:1c:1a:39:84:f6:4b:0b:48:76:03:c2:21:54:c4:cf:83:c8:
24:c7:08:ea:e3:64:37:ce:83:c8:85:81:13:92:fc:c9:26:96:
c8:1d:cf:fd:25:6e:b0:ef:c5:55:82:84:d6:e2:6f:50:27:5e:
ce:41:20:c9:e9:c6:a9:6b:46:5d:85:30:5c:ee:7f:b1:34:99:
8a:ea:d0:53:98:80:2a:25:62:f4:67:aa:27:7e:68:1a:46:cb:
3a:18:6e:bf:b8:5d:d6:17:04:a7:ba:9e:39:df:88:f1:a6:52:
38:17:66:98:0b:b3:af:f1:eb:8b:ad:f9:47:35:ab:99:31:df:
5c:ce:f1:c7:7b:5a:35:ad:ca:4e:57:07:cb:38:b3:2f:d4:eb:
e4:28:4c:ca:08:1d:c0:cb:3e:8a:92:6f:6f:93:7b:42:bf:9c:
38:e1:e9:14:4b:29:52:dd:6a:bb:cd:ef:51:b3:97:ea:21:0e:
3f:31:bc:94:1e:0a:5c:21:fc:6a:92:4b:98:70:b6:8f:57:70:
ed:cc:7f:33:3d:a9:d0:05:a5:3f:ee:23:2e:26:29:64:72:48:
ef:7c:d7:89:3c:7c:ec:44:0a:57:4c:bb:3e:c4:22:91:7e:09:
bd:22:b2:0c:87:44:b5:aa:1a:5b:5a:7b:a2:cf:7c:fd:ef:3b:
76:d6:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:51:27 2025 by rpki-client