Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JJOkhWNukk9-X8UnZa7T8XW53ko.roa
File: JJOkhWNukk9-X8UnZa7T8XW53ko.roa (raw, json)
Hash identifier: A3hjCP08ZBZcEBCubmnYYz+LwNwaatrUddR17wspbos=
Subject key identifier: 24:93:A4:85:63:6E:92:4F:7E:5F:C5:27:65:AE:D3:F1:75:B9:DE:4A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252227CB6A5BF781B03373F90F22DDE6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JJOkhWNukk9-X8UnZa7T8XW53ko.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207550
IP address blocks: 2a10:2f00:111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:27:cb:6a:5b:f7:81:b0:33:73:f9:0f:22:dd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2493a485636e924f7e5fc52765aed3f175b9de4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:ed:7e:a1:75:78:34:ad:c4:90:72:ab:58:
ea:91:9e:7f:19:04:51:49:bb:77:32:eb:4b:34:91:
0f:33:f6:18:01:e2:4e:f7:a1:a1:b9:c1:03:34:99:
a5:56:e2:6a:21:11:af:dd:7e:80:92:74:4a:3b:f8:
12:dd:97:ee:f7:ed:e2:34:ff:92:dd:36:c4:87:9b:
94:e1:a9:3e:a0:a7:d3:13:f6:f2:15:dd:90:d3:e0:
63:a1:eb:9e:08:84:94:38:b8:71:d7:dd:d6:ef:bd:
33:f2:da:62:32:f7:e3:8a:32:44:b4:c3:c7:7c:a0:
ae:91:e0:29:18:4c:54:00:c9:ec:8a:15:07:bc:dd:
1c:1c:08:92:9f:9a:71:37:12:a9:6b:7c:62:4e:9b:
22:d0:84:db:53:04:f6:82:35:7a:5b:38:ab:0b:b9:
17:f4:8b:4b:6a:c4:af:6c:dc:56:0c:00:a0:c0:52:
e6:3f:43:f5:9f:37:d9:80:49:e0:66:08:11:b2:fc:
58:78:e3:e0:cb:0e:56:de:92:60:10:1a:c4:e6:16:
08:11:49:7b:cc:b0:f1:c7:9b:09:60:63:3f:79:91:
22:16:2b:2d:03:a4:ed:20:c7:d6:4e:48:8c:6c:25:
e0:6e:6c:d1:90:9a:43:9c:60:9b:1a:23:44:0a:10:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:93:A4:85:63:6E:92:4F:7E:5F:C5:27:65:AE:D3:F1:75:B9:DE:4A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JJOkhWNukk9-X8UnZa7T8XW53ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:111::/48
Signature Algorithm: sha256WithRSAEncryption
86:71:94:03:e8:3c:98:9c:8e:43:cd:ba:e7:23:88:5c:88:cc:
c3:36:eb:1f:e4:b8:96:ba:ff:50:e6:7e:38:2a:01:08:75:d8:
ac:9f:07:aa:ad:34:b1:ee:07:c7:5a:27:e5:34:a1:38:9f:31:
2d:cf:c9:ce:15:7c:f1:6a:53:7e:ed:7b:66:0e:e9:47:5e:8f:
3d:3c:90:c8:9d:9e:6b:d3:6e:ed:27:c1:61:ae:59:a0:8c:18:
5e:90:7b:78:0c:56:1b:c6:03:ce:15:6c:53:75:21:4a:a6:a6:
8b:2f:07:08:51:d8:e0:3d:ee:1c:b0:a6:f8:68:f6:22:af:7b:
52:52:04:11:0b:75:cc:d6:ab:bb:c1:49:61:8d:ac:e3:fa:57:
49:b3:cd:49:42:17:a3:91:64:7e:a9:19:55:ff:d8:ce:dc:da:
a0:9d:0f:59:cf:56:a7:59:1e:d1:84:9c:5b:cf:ba:0a:5f:b4:
cc:41:e9:66:d0:5a:f2:bc:21:f4:d4:db:16:0b:61:e7:8f:43:
89:65:f8:7e:af:05:bc:9d:57:80:4b:c8:f0:31:bb:1f:ff:19:
2a:80:9a:ec:f5:59:bc:a5:dc:ce:3f:2f:5b:a4:6a:60:c6:12:
b8:9e:61:04:72:43:02:ba:ea:4e:62:47:c3:ed:4a:bc:00:c8:
54:7c:46:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:49 2025 by rpki-client