Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M1M5vveE1OznOdSC0276UmVNsFA.roa
File: M1M5vveE1OznOdSC0276UmVNsFA.roa (raw, json)
Hash identifier: fN0acACuYdSMQ1+tQyGN3fMWo7Qv3/DR1OdXndn7qB8=
Subject key identifier: 33:53:39:BE:F7:84:D4:EC:E7:39:D4:82:D3:6E:FA:52:65:4D:B0:50
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252250B0AF53514364083E67DF578069
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M1M5vveE1OznOdSC0276UmVNsFA.roa
Signing time: Thu 02 Jan 2025 03:49:53 +0000
ROA not before: Thu 02 Jan 2025 03:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211358
IP address blocks: 2a0e:b107:12d1::/48 maxlen: 48
2a0e:b107:12d2::/48 maxlen: 48
2a0e:b107:12d3::/48 maxlen: 48
2a0e:b107:12d4::/48 maxlen: 48
2a0e:b107:12d5::/48 maxlen: 48
2a0e:b107:12d7::/48 maxlen: 48
2a0e:b107:12dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:50:b0:af:53:51:43:64:08:3e:67:df:57:80:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=335339bef784d4ece739d482d36efa52654db050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:4a:45:5d:58:30:b4:6b:a4:1d:88:7c:5b:
6f:eb:6f:ad:48:15:b4:47:fb:9e:b1:30:fb:e1:d3:
08:d9:61:11:73:91:f5:20:b0:92:c6:16:ef:a1:5b:
13:e8:a6:27:46:05:75:7d:f3:64:16:2e:3c:59:e8:
b1:59:ad:de:c3:ed:5b:16:87:b6:9a:c8:f5:3a:b4:
50:6a:e4:40:b4:ce:cd:f5:3b:e1:63:9b:89:73:11:
6a:7c:1f:87:6e:cd:21:52:bd:f1:78:26:f4:2b:61:
d3:05:7c:d5:82:79:d5:bc:9c:92:3e:ea:4b:61:a9:
40:30:7a:97:82:93:4a:1b:bb:d0:57:88:96:03:51:
19:5f:50:38:49:1f:90:94:5b:7a:df:79:56:d2:88:
ee:16:63:ef:84:26:ca:52:10:3f:f3:f8:65:06:89:
5e:91:55:a3:b0:e0:2e:05:f3:b4:df:1f:6b:91:b7:
b5:05:f6:ee:6c:ce:86:92:e8:49:4a:93:e6:fb:c4:
c2:04:41:6a:66:c0:cf:92:02:3f:c7:d8:ce:95:a9:
c6:8c:0c:a8:5c:24:96:57:db:6e:ba:8d:2b:05:3d:
9c:5b:77:46:10:61:59:d0:55:a2:96:c3:25:1b:f9:
a1:be:a7:89:86:38:18:33:f2:70:81:51:77:de:86:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:39:BE:F7:84:D4:EC:E7:39:D4:82:D3:6E:FA:52:65:4D:B0:50
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/M1M5vveE1OznOdSC0276UmVNsFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:12d1::-2a0e:b107:12d5:ffff:ffff:ffff:ffff:ffff
2a0e:b107:12d7::/48
2a0e:b107:12dc::/48
Signature Algorithm: sha256WithRSAEncryption
45:00:dc:f6:15:c0:5a:30:98:bc:a4:c7:d4:65:b9:f2:33:2b:
01:00:dd:ec:56:24:ea:d1:bb:18:8b:80:2c:9e:f9:51:d5:18:
8b:7c:fe:40:94:f2:af:ba:29:bc:bd:5d:c1:e5:2f:a1:8c:32:
56:07:96:38:91:41:33:87:1a:0f:dc:65:1c:b9:09:2b:0a:af:
23:f0:cc:f0:90:30:ce:88:8f:26:0f:87:1c:de:91:ee:e6:e3:
69:44:90:99:59:8c:2d:0c:80:91:45:59:99:d8:a5:46:9a:39:
83:4c:cd:55:38:f9:bf:e3:c5:fa:60:13:a4:89:5d:1c:52:d9:
76:2e:32:54:db:8e:7a:4b:48:a4:8f:14:05:01:b1:b0:28:4a:
dc:6f:63:8b:42:2e:79:dd:8b:7a:b7:bd:f6:ef:6f:61:93:27:
82:95:ab:a1:fc:dd:84:c3:b8:32:b3:7d:9f:b4:51:d1:cf:fd:
4d:7c:03:5d:0d:05:26:c7:42:ac:e9:af:fd:0e:84:e7:99:01:
63:76:5e:82:a3:f3:32:86:1b:91:b4:94:71:1d:5f:f1:0d:e1:
3e:44:40:93:d2:98:45:98:16:49:38:91:e3:42:7c:b8:73:3c:
06:af:56:50:83:6f:68:70:61:41:a7:e7:06:74:18:fd:22:eb:
d9:e2:3b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:43:05 2025 by rpki-client