Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NXkdwQ3xe78bWqxWxXZMvHIot6s.roa
File: NXkdwQ3xe78bWqxWxXZMvHIot6s.roa (raw, json)
Hash identifier: blHJF+HZ1CBFvP+6HOhoW4DQWum3/ZeJOwMkbFgu/k4=
Subject key identifier: 35:79:1D:C1:0D:F1:7B:BF:1B:5A:AC:56:C5:76:4C:BC:72:28:B7:AB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521FA901343473ADD0D5132879FEB19
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NXkdwQ3xe78bWqxWxXZMvHIot6s.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199310
IP address blocks: 2a0e:97c0:220::/44 maxlen: 48
2a0e:b107:2440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fa:90:13:43:47:3a:dd:0d:51:32:87:9f:eb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35791dc10df17bbf1b5aac56c5764cbc7228b7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:25:bd:92:76:24:50:55:e6:69:1f:c2:06:
19:d5:8e:42:fe:16:4f:e1:f0:54:5d:01:a6:9e:87:
e4:b9:ee:ce:22:4b:f8:1e:bf:e2:ad:b7:48:e7:96:
82:71:d0:e7:07:e4:13:6c:38:0e:26:c3:b8:d0:9d:
83:63:ee:6c:f4:1b:28:3b:5c:e1:f1:37:99:4e:8b:
16:de:82:e0:cf:45:14:87:24:00:01:e6:63:52:84:
22:93:8b:b2:9d:96:42:17:9b:9e:1f:13:64:6d:58:
b4:0c:6e:3b:c2:51:8e:a5:36:0f:31:67:4d:72:21:
6a:4d:e7:81:25:11:1f:40:01:cd:3d:9a:4a:a5:08:
80:b1:d1:47:ff:5a:4b:59:92:ae:c3:28:47:8f:20:
ce:7e:d8:84:8c:e1:38:f4:bb:d3:ea:41:0c:c5:c3:
10:0c:06:32:50:22:c7:80:69:43:3c:a9:5e:8b:87:
bd:c0:78:d6:d6:0d:d6:c3:6d:0d:fe:30:93:ea:8f:
4a:d2:1d:1f:84:0d:ba:94:bb:c1:0b:f6:dd:2f:02:
18:87:17:29:3e:18:e5:ef:12:ea:a3:c0:6c:d6:52:
d7:5c:ca:39:e1:1c:29:8c:88:3f:62:9b:24:32:ca:
ba:4c:3a:02:b9:13:61:6f:e0:bc:b7:ea:bc:cf:e0:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:1D:C1:0D:F1:7B:BF:1B:5A:AC:56:C5:76:4C:BC:72:28:B7:AB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NXkdwQ3xe78bWqxWxXZMvHIot6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:220::/44
2a0e:b107:2440::/44
Signature Algorithm: sha256WithRSAEncryption
31:11:11:ea:18:93:81:b4:cd:bb:99:9f:6b:ea:4f:62:a9:ea:
0d:7a:d8:4f:05:69:81:a5:dd:3d:1e:a3:e3:9e:d1:c1:b9:a9:
44:f1:93:2a:53:b2:cf:93:3f:4e:b2:0b:9e:dd:40:81:07:fe:
da:eb:7d:b8:77:e1:7c:20:7e:c5:71:8a:80:5b:c1:d7:e7:34:
92:9e:74:48:68:bc:b4:05:38:b6:65:e2:c9:37:ea:9f:1c:e5:
b6:74:26:4a:f7:60:0a:cc:89:e6:16:23:7c:26:3b:b9:3b:99:
69:52:20:e3:a6:80:c3:1c:d5:04:d9:67:81:04:8a:c3:b4:4e:
df:ef:7c:2a:5e:6b:ae:5a:5f:dc:33:74:f9:d1:d1:e8:00:a7:
8f:72:f1:0e:29:ba:58:e6:67:9d:e1:43:74:f6:c8:2e:ff:95:
39:57:83:b8:43:fd:5f:94:59:47:e9:46:e5:bc:94:d8:54:10:
04:a4:ba:33:6e:15:f6:10:a7:da:fb:29:33:3d:ae:89:5f:6f:
0d:bb:66:75:56:93:d1:7f:aa:da:79:21:52:1f:ef:28:26:c6:
3c:02:dc:c2:c5:77:63:67:68:42:b0:d3:28:db:f3:72:fe:ae:
02:d4:86:6e:cf:d9:ab:f6:0e:a2:88:fd:14:16:40:c9:07:19:
ad:08:7d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:31 2025 by rpki-client