Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L68ruKf526XPiVtnXpB_wcu6Nzs.roa
File: L68ruKf526XPiVtnXpB_wcu6Nzs.roa (raw, json)
Hash identifier: 1hZ+Or20Bu1A9nEIzx37vPmU5vj0q2VP53Dl+qstTVU=
Subject key identifier: 2F:AF:2B:B8:A7:F9:DB:A5:CF:89:5B:67:5E:90:7F:C1:CB:BA:37:3B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019501B91C5D04BC7CA22DD6D4BF19CA8058
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L68ruKf526XPiVtnXpB_wcu6Nzs.roa
Signing time: Thu 13 Feb 2025 23:51:03 +0000
ROA not before: Thu 13 Feb 2025 23:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 2a06:de00:400::/38 maxlen: 48
2a06:de00:400::/48 maxlen: 48
2a0e:97c0:db0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:01:b9:1c:5d:04:bc:7c:a2:2d:d6:d4:bf:19:ca:80:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 13 23:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2faf2bb8a7f9dba5cf895b675e907fc1cbba373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:e2:64:12:c7:e3:12:26:fe:ca:63:04:08:
5f:fb:79:63:8c:00:83:44:b5:9e:9a:ee:2b:d7:c6:
71:e5:0a:d3:b7:1f:51:bd:69:81:9d:63:ad:6f:b0:
51:ed:0b:c1:8a:86:f6:d0:81:07:37:e1:c4:38:59:
12:fb:36:a8:80:ec:b4:e6:eb:ad:43:9d:d6:bb:b1:
a9:d2:93:86:70:0b:9a:17:bf:17:1f:d4:87:18:5e:
a2:7b:81:46:d9:d5:f9:5c:64:b9:c3:38:af:79:0a:
74:bf:8e:2f:5d:f6:c0:84:4b:db:25:67:2b:ae:1e:
4e:86:fd:d8:b8:57:a9:79:fd:69:f9:da:6a:97:a7:
5f:bc:63:85:fa:2a:d2:70:da:a5:75:b6:51:a8:db:
0e:8f:3d:3c:e7:86:34:1e:5c:59:15:b1:83:f4:55:
f6:db:2d:1d:7c:0a:c9:0c:b9:f7:c2:4e:8d:56:10:
60:a0:4b:51:cf:7d:fd:24:77:6c:55:bc:3e:d8:be:
0f:7a:1a:04:b0:d5:2b:1d:c8:e9:a5:20:b0:4e:fb:
f1:9a:39:af:01:6c:78:cc:32:66:74:14:9d:62:88:
bf:51:02:d3:f4:2f:4c:08:f4:71:c9:29:b4:f5:f1:
d9:11:93:9a:c6:04:9b:fb:18:57:0a:34:c0:bf:5d:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AF:2B:B8:A7:F9:DB:A5:CF:89:5B:67:5E:90:7F:C1:CB:BA:37:3B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L68ruKf526XPiVtnXpB_wcu6Nzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:400::/38
2a0e:97c0:db0::/48
Signature Algorithm: sha256WithRSAEncryption
88:04:c5:80:5b:68:14:54:d8:ad:25:d6:39:c7:86:d1:01:7f:
61:aa:3b:53:32:9c:20:c3:97:85:53:40:f5:a5:c2:bd:69:84:
70:cb:77:df:af:44:6c:7a:7f:88:35:35:16:f7:a4:d3:2a:bf:
a6:18:4b:68:f9:6f:1a:a6:46:49:8e:fa:36:6e:c9:a6:82:de:
fb:31:c0:5a:2e:e1:d0:7a:ab:a5:64:03:46:24:13:6b:30:f4:
62:00:e9:fd:49:40:49:01:37:69:39:ef:ef:c8:15:59:9c:72:
8b:ed:e5:d1:37:49:ef:8b:f7:58:0a:c2:1b:0a:bd:b1:65:24:
48:ec:2d:00:7a:f2:89:d5:2e:23:0a:b4:d8:52:9a:d2:29:2c:
e9:27:aa:e0:bb:14:0f:a5:aa:dd:05:ce:6d:ed:3e:8b:95:86:
ad:36:e6:40:7d:18:dc:d9:e9:d8:93:51:c1:6f:98:cb:7d:5f:
f4:5b:97:f0:0b:9b:68:9d:d0:22:b0:38:14:d7:85:81:26:aa:
3e:13:bf:a6:e8:9d:a3:9a:86:e6:5a:a8:b5:2c:63:1c:e3:68:
61:af:30:ff:d5:40:36:80:c3:94:fa:45:51:56:d5:31:c1:65:
68:fc:f5:67:57:0e:a7:f3:17:9c:71:e2:39:5a:cb:3f:90:6a:
ad:36:12:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:14:01 2025 by rpki-client