Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NY_WVxhiq8JrQLBlvm4_VVhHNns.roa
File: NY_WVxhiq8JrQLBlvm4_VVhHNns.roa (raw, json)
Hash identifier: 4+x9z6DkG0BHNB5ydOlreSrlLDf1VfxJ2KRk55HUcLY=
Subject key identifier: 35:8F:D6:57:18:62:AB:C2:6B:40:B0:65:BE:6E:3F:55:58:47:36:7B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220BE417A2F8545453596AB5C7D5CF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NY_WVxhiq8JrQLBlvm4_VVhHNns.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202458
IP address blocks: 2a0e:97c0:c00::/44 maxlen: 48
2a0e:97c0:c01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0b:e4:17:a2:f8:54:54:53:59:6a:b5:c7:d5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=358fd6571862abc26b40b065be6e3f555847367b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:f1:64:78:2b:3f:0c:e0:a1:dc:db:01:78:
36:5e:f4:73:4c:b9:ff:df:76:ac:51:29:c1:96:f0:
8e:4a:70:37:d6:50:08:5a:b2:04:41:3a:de:69:f3:
a2:fe:99:f7:bd:d2:1f:e1:f9:f4:09:c8:71:00:49:
a4:75:ad:67:14:18:c9:b3:a7:85:9d:8c:31:e5:37:
c5:02:94:26:39:28:fa:41:74:80:31:b5:fa:40:b2:
ed:da:1f:9f:41:4e:78:8a:52:5a:89:e4:fb:1c:04:
29:46:b7:ec:c9:10:5f:52:7e:fc:0a:20:ed:48:36:
9c:06:02:14:70:a0:e3:fb:51:9a:3e:bb:be:1d:b6:
bd:bf:bc:be:a0:6d:50:00:43:7d:c5:b8:fa:ee:21:
4b:10:9f:d5:2c:76:de:28:11:5b:49:ad:b1:55:b1:
9f:95:d2:0e:42:21:5e:f2:8e:1c:ce:6a:cc:0d:2a:
79:24:04:3a:c9:28:72:35:ee:9d:90:c4:f4:35:a8:
2c:f3:d8:c4:44:51:de:df:2b:ec:eb:9a:4b:f7:03:
94:5e:a2:5b:3d:ca:e4:2a:0d:5a:e0:67:81:87:80:
0a:6e:23:fa:37:ef:08:10:5b:24:a1:30:b5:62:04:
8f:ac:b9:c0:5f:4a:8f:04:24:a2:82:3b:32:9f:cc:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8F:D6:57:18:62:AB:C2:6B:40:B0:65:BE:6E:3F:55:58:47:36:7B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NY_WVxhiq8JrQLBlvm4_VVhHNns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c00::/44
Signature Algorithm: sha256WithRSAEncryption
52:bb:17:75:c9:3d:b6:84:9e:3d:3e:48:33:31:79:d0:0c:c4:
ce:e1:a8:5d:c5:6d:b2:1f:2d:11:e8:6f:a5:63:e6:f3:97:ae:
2a:fd:93:8a:db:81:75:2d:64:03:80:e5:93:76:93:dc:92:33:
68:64:98:97:4b:32:30:b9:c7:3d:51:c5:3c:59:48:98:8a:a6:
74:13:e5:ec:45:e5:cf:9a:c7:12:d5:98:85:57:bd:7d:0b:18:
49:7b:e1:56:6e:a1:4b:cb:6d:7f:50:1c:bc:3e:4e:81:8f:34:
99:6b:77:4b:4a:f3:69:c6:58:d2:29:b1:03:73:61:a8:a7:ec:
56:c8:ac:83:98:68:95:20:6b:c5:e1:6f:e5:ef:c1:da:30:62:
46:8e:86:8b:59:95:f6:a4:26:c6:0b:a4:e4:16:10:9b:3a:d6:
95:c7:23:ca:18:b5:31:db:18:cb:66:92:64:31:b7:1c:13:c3:
d6:07:20:96:4f:8b:95:89:f6:93:01:e2:ff:77:1a:1f:be:11:
a1:5a:b7:e7:a3:69:c8:81:3f:1b:21:ee:a6:51:9b:f2:28:b9:
f4:62:bd:cd:a7:73:74:7f:79:6d:2d:93:a5:b2:1f:eb:a2:44:
26:57:67:8f:d2:ee:a5:31:8b:36:64:be:5a:1f:ea:d6:2a:2c:
06:ae:ba:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:52:44 2025 by rpki-client