Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N-pmT3_By-7kYj2fDseNHZcHz5I.roa
File: N-pmT3_By-7kYj2fDseNHZcHz5I.roa (raw, json)
Hash identifier: hjIDypwPwYXQWUdJAc6NStDz0PUSAGfAklbtaE7ZGaY=
Subject key identifier: 37:EA:66:4F:7F:C1:CB:EE:E4:62:3D:9F:0E:C7:8D:1D:97:07:CF:92
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521DD8E251E4DB142811977FDECEF17
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N-pmT3_By-7kYj2fDseNHZcHz5I.roa
Signing time: Thu 02 Jan 2025 03:49:23 +0000
ROA not before: Thu 02 Jan 2025 03:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58336
IP address blocks: 2a0e:97c0:550::/44 maxlen: 48
2a0e:b107:16b0::/44 maxlen: 48
2a10:cc44:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:dd:8e:25:1e:4d:b1:42:81:19:77:fd:ec:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37ea664f7fc1cbeee4623d9f0ec78d1d9707cf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:53:a4:b7:2d:c8:80:48:da:a4:ed:15:b4:
17:01:ca:4f:b6:24:ad:80:af:ae:a4:c2:5c:ab:20:
e5:d2:64:64:87:3b:be:8a:65:02:fd:42:81:20:f2:
3f:9a:d2:07:17:bc:46:80:39:94:73:3d:d4:44:83:
d4:b9:2f:af:1d:60:cd:bc:da:b0:b6:59:5b:c2:0d:
c4:e8:48:bb:0b:ff:1e:10:7d:6d:40:d7:0a:c9:c9:
06:7a:64:40:64:6c:ca:04:ee:1b:c7:a8:62:4e:36:
08:7c:98:7d:c0:ab:50:81:7d:e9:7d:c2:06:f2:a0:
b6:82:e4:8a:eb:b7:86:41:61:98:8f:02:59:1d:dc:
71:66:a8:b4:1b:e4:18:fb:64:f8:18:91:19:19:7e:
1f:2a:e7:c1:01:10:e1:2d:14:ac:14:9a:6c:bf:78:
77:c0:af:fd:b0:d4:bd:2f:6d:d4:e5:12:d7:2a:15:
63:72:03:7e:63:77:8b:4f:d6:e9:08:3c:54:65:2b:
94:ea:5d:94:30:a5:5d:e6:8b:bd:12:ba:a1:d3:2a:
0c:fc:4c:cc:60:69:65:9a:57:45:d7:97:49:75:04:
1e:f6:a7:06:02:0e:a4:34:20:ac:ad:6d:50:cf:31:
62:93:05:08:04:76:19:9b:58:27:a6:15:f2:52:34:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:66:4F:7F:C1:CB:EE:E4:62:3D:9F:0E:C7:8D:1D:97:07:CF:92
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N-pmT3_By-7kYj2fDseNHZcHz5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:550::/44
2a0e:b107:16b0::/44
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
3c:ea:4b:73:9c:c2:41:2f:db:c4:f9:69:2c:de:4b:6a:3c:0f:
68:17:10:98:93:c9:bb:3b:59:a2:26:be:c1:48:03:17:6b:12:
82:0e:19:a2:23:7c:12:18:9f:a4:68:1a:62:a9:0e:b9:50:07:
71:dd:a0:09:fd:c9:f7:62:7d:d5:98:af:7f:02:79:2c:f8:1a:
10:ed:dd:fa:71:40:89:af:45:41:74:bf:17:a1:fc:d1:44:c5:
4b:6a:88:00:0d:14:cd:68:56:96:54:6c:9f:c3:62:8c:7c:b3:
3b:04:ca:96:fb:14:b8:91:6c:75:fa:ac:68:09:23:2d:c6:47:
75:00:5c:fe:09:f4:8e:b4:ad:d1:9f:c0:6d:bf:8d:4f:56:5c:
dd:76:0a:5d:c6:08:a6:9d:1e:83:16:f7:96:e0:6f:ae:56:ac:
19:e8:cb:55:48:56:e4:29:d9:40:b5:3f:b6:cd:ee:3e:1d:ec:
b1:b7:69:4e:11:25:37:a1:70:f9:5c:3d:7b:f9:38:b8:0b:5a:
4a:47:f9:5f:a3:94:73:8b:aa:d0:0d:be:05:6b:41:e8:cb:08:
6f:cf:99:af:b0:ad:ba:d1:45:78:72:b6:68:96:dd:33:87:08:
fb:df:d4:1c:1e:65:e2:c4:7d:3a:3e:1b:ac:66:0c:39:e0:a3:
1e:d7:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:32 2025 by rpki-client