Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K3E8TZ6ecIWxJ01Fq6QT5rQpDMk.roa
File: K3E8TZ6ecIWxJ01Fq6QT5rQpDMk.roa (raw, json)
Hash identifier: W4K9m5OvMZGr/V9xeZSFFk8An3NGpumxV19fJoXuK4Q=
Subject key identifier: 2B:71:3C:4D:9E:9E:70:85:B1:27:4D:45:AB:A4:13:E6:B4:29:0C:C9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425226CEEE687B3AB12083F0C24778456
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K3E8TZ6ecIWxJ01Fq6QT5rQpDMk.roa
Signing time: Thu 02 Jan 2025 03:50:00 +0000
ROA not before: Thu 02 Jan 2025 03:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213069
IP address blocks: 2a10:2f00:13a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:6c:ee:e6:87:b3:ab:12:08:3f:0c:24:77:84:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b713c4d9e9e7085b1274d45aba413e6b4290cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:89:79:43:c1:bc:64:4c:f6:5d:0e:a0:7d:
ea:61:d3:24:0e:56:bc:3a:de:16:8c:33:04:59:57:
c9:41:76:1c:f5:f2:8d:16:93:29:61:f7:92:42:b9:
64:4b:57:96:7b:d5:a2:e3:b9:48:9a:93:95:bd:f6:
2d:80:fb:2f:3e:fb:da:7d:74:f8:c6:62:6f:b6:c8:
86:4e:bc:54:a4:07:73:88:ab:55:75:c4:3b:29:38:
e0:b3:55:05:fa:20:1b:77:00:e7:a4:2b:78:23:9e:
a3:db:21:3d:4a:13:01:b1:c3:b2:4a:64:ee:33:c2:
0e:09:23:12:d2:47:2a:48:e7:a2:88:08:89:f2:95:
43:c9:c4:19:ff:53:d1:ae:d7:94:59:e8:4c:08:a2:
4a:a0:86:c7:d5:2b:fa:ce:3a:5a:ed:03:54:b9:86:
fb:dd:f3:2b:6f:80:c4:09:cd:78:a2:d3:cc:1e:a3:
6e:ca:95:3b:ea:97:0b:be:7f:40:1b:3b:fa:e7:73:
4e:0c:1c:ec:f9:72:ea:c5:fa:7e:55:9e:fb:bf:bd:
40:07:53:89:f2:07:e9:56:65:2f:6b:41:ac:59:fe:
1f:12:ec:ad:08:8e:8b:fb:55:f4:30:f3:25:fe:65:
b8:aa:9d:ba:fb:d9:e7:73:a5:ac:9e:25:42:a3:f2:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:3C:4D:9E:9E:70:85:B1:27:4D:45:AB:A4:13:E6:B4:29:0C:C9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K3E8TZ6ecIWxJ01Fq6QT5rQpDMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:13a::/48
Signature Algorithm: sha256WithRSAEncryption
97:8c:8a:93:f2:29:00:c6:e8:23:17:f9:bc:3d:18:b5:04:f8:
d6:ca:07:0d:f4:b3:96:72:04:03:fc:26:f2:f8:9d:ca:96:0d:
7b:33:65:a7:53:8a:94:cd:9a:18:52:4c:68:fc:42:94:86:f3:
22:f1:af:4b:65:a4:b5:63:ab:65:c0:6b:2a:1d:72:38:e9:1f:
f4:dc:fb:50:a0:07:3f:bf:33:3e:78:c5:63:f4:1f:03:80:d9:
bd:57:00:14:9a:7f:d3:73:aa:96:a8:b0:63:d0:b9:ea:42:94:
1c:b8:b7:52:bb:92:d7:f7:e1:62:42:59:97:50:98:87:6b:69:
7e:8b:56:fd:cf:ee:f7:7f:e8:63:4c:1d:03:72:e1:ba:26:9f:
77:93:53:e9:85:98:eb:b0:ba:26:ad:39:b8:16:f0:d9:5b:02:
b9:91:80:20:41:8e:67:6b:12:ab:5c:81:ed:5f:1b:d0:97:42:
6e:74:8c:af:5f:2f:88:1d:f6:1a:6f:e7:8c:f6:92:84:57:f6:
bd:b2:96:15:19:0b:31:67:48:b2:e2:53:07:5c:b2:ca:46:cd:
dd:5c:6e:8f:75:2c:ed:9b:63:12:79:67:a9:97:93:29:a5:88:
37:34:06:f0:0e:5e:01:07:4e:aa:a2:4d:20:e2:48:36:1c:07:
b6:6b:0b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:01:32 2025 by rpki-client