Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NTkIXQvaMhKzt8ei9q0D_4yDCfM.roa
File: NTkIXQvaMhKzt8ei9q0D_4yDCfM.roa (raw, json)
Hash identifier: ecpS/pwMDWzDQmQvu+Lzafk7ibRU8KFGG8mlJPaPbQU=
Subject key identifier: 35:39:08:5D:0B:DA:32:12:B3:B7:C7:A2:F6:AD:03:FF:8C:83:09:F3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252210271E5967BA042C78C9EDA3A14A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NTkIXQvaMhKzt8ei9q0D_4yDCfM.roa
Signing time: Thu 02 Jan 2025 03:49:36 +0000
ROA not before: Thu 02 Jan 2025 03:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203472
IP address blocks: 2a0e:b107:2710::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:10:27:1e:59:67:ba:04:2c:78:c9:ed:a3:a1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3539085d0bda3212b3b7c7a2f6ad03ff8c8309f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:0e:a8:00:5e:11:ec:04:e6:33:9a:39:66:
37:5e:8b:ff:a7:82:10:11:67:79:9c:39:81:a5:c3:
f8:e6:fc:5c:43:d6:09:60:92:0c:b5:fa:38:3d:02:
30:96:5d:e3:45:c4:ff:79:5c:71:1e:aa:a7:7b:83:
9e:8a:2b:a4:4c:41:4c:f2:16:86:55:10:6a:d1:30:
1d:8d:8d:e9:00:72:e6:51:fe:fd:ba:06:a0:67:61:
b4:9e:df:d6:4c:45:c8:02:aa:6a:bd:c3:29:cc:a0:
57:e3:31:be:10:9b:b9:0f:8a:71:20:51:0e:04:19:
05:e6:70:da:88:4c:4d:b1:46:9b:b1:01:a1:c2:b4:
2d:3e:65:14:43:c7:5a:50:40:d1:95:c5:4f:3d:05:
b1:ec:aa:99:13:b3:ff:ff:38:52:3c:ef:10:15:4d:
8b:d5:ab:53:53:9a:5e:b2:93:71:f8:ef:22:14:af:
69:cb:e4:52:3e:ab:c0:8f:17:1c:a3:1f:48:7c:99:
6d:83:00:65:32:c9:1c:f2:da:f6:42:74:f6:64:2b:
0d:98:27:1b:cd:af:19:6a:69:03:24:d0:ef:1f:6b:
3e:b7:bc:6f:0e:17:78:f2:32:60:9f:04:94:a6:84:
24:49:bc:99:a1:83:f2:31:53:d0:b1:f3:51:ec:86:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:39:08:5D:0B:DA:32:12:B3:B7:C7:A2:F6:AD:03:FF:8C:83:09:F3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NTkIXQvaMhKzt8ei9q0D_4yDCfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2710::/44
Signature Algorithm: sha256WithRSAEncryption
78:f2:ed:11:27:71:66:94:b3:b1:23:0d:1f:a2:32:ac:5a:98:
22:6f:74:ae:dc:9f:f9:63:14:e1:68:11:a0:0d:9b:bf:ec:77:
43:73:a1:51:75:22:3e:e1:e4:33:92:e2:d8:61:25:f6:82:d6:
10:a2:6c:78:5e:6a:a2:d7:9b:2f:d8:1a:a1:9a:e5:fc:1f:43:
df:83:34:bb:e4:43:b2:eb:cf:36:bc:ce:52:59:26:da:01:f0:
96:91:c7:12:ca:78:34:0e:bc:1f:eb:2c:3e:e9:75:92:3e:ea:
85:1f:39:ff:3d:00:3c:8f:67:3e:92:83:2e:f3:06:1b:82:a0:
2e:06:df:10:a4:00:ef:a6:5e:73:93:8d:6b:bb:cc:0f:47:fe:
ad:dd:d4:c4:68:08:ee:20:37:a0:e7:42:3e:e7:0a:78:6e:fe:
50:43:30:0e:64:d6:33:08:63:28:3a:c7:5e:6d:f9:43:98:0f:
bd:44:ae:c7:23:3e:7a:17:19:f0:f4:c5:de:51:78:90:0d:01:
f2:bf:45:fd:ce:01:6a:18:8d:00:d1:dd:49:8e:bf:d4:20:06:
26:4f:64:92:14:9f:f3:c0:08:ae:7b:8c:77:e8:50:20:be:d8:
13:d0:8f:d4:3c:fd:54:75:80:8a:3e:21:0b:47:69:2d:cd:b0:
f2:e1:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:54 2025 by rpki-client