Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Nf-rNY2Dpq_uJYuYxrTCAqv7PQU.roa
File: Nf-rNY2Dpq_uJYuYxrTCAqv7PQU.roa (raw, json)
Hash identifier: wZym7aRYXu0KDqkWYxeWH0pksUq5ka5g/1kCP9xJ4S8=
Subject key identifier: 35:FF:AB:35:8D:83:A6:AF:EE:25:8B:98:C6:B4:C2:02:AB:FB:3D:05
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220B8C16C445D59364671C3814FC3D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Nf-rNY2Dpq_uJYuYxrTCAqv7PQU.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202427
IP address blocks: 2a0e:97c0:5b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0b:8c:16:c4:45:d5:93:64:67:1c:38:14:fc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ffab358d83a6afee258b98c6b4c202abfb3d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:71:c6:18:8a:11:36:c5:12:01:dc:c2:a1:
53:97:5e:ee:f2:85:7b:72:1a:c1:c6:91:2f:2c:c7:
b7:a0:b8:84:ce:89:0b:d1:30:e1:da:fc:5f:f2:3c:
0a:d0:ed:46:d4:ae:2c:70:ac:24:ec:5d:19:b0:e7:
b9:7b:31:63:5e:5e:86:5b:36:dd:36:93:7a:b9:e5:
91:11:dd:59:7c:2c:6d:7b:7d:92:e7:50:f5:8b:04:
9f:1f:0a:e3:3e:61:03:71:48:17:c4:5a:77:33:40:
5d:99:12:70:56:ba:fb:b1:61:3a:4c:c4:8e:af:c0:
87:8a:43:14:07:4c:c6:e5:22:e8:e8:d8:41:50:7c:
7f:44:52:2d:cc:f7:60:1a:26:20:4a:be:f3:a3:84:
1d:c7:61:55:e6:82:49:9d:84:ca:0b:a0:93:4f:3e:
98:d8:de:12:1c:2b:16:78:da:93:b4:97:0f:cf:b6:
35:12:d5:c0:d6:94:a9:2b:c2:ce:4c:07:b6:58:53:
14:df:65:cd:6b:51:92:36:19:87:33:c9:3d:c7:b3:
1c:9a:30:2c:44:b7:84:38:bb:a5:16:c8:b5:21:c7:
4a:e3:41:b0:92:ea:0d:be:a7:ab:5b:99:25:db:41:
11:7f:85:a8:da:cc:80:3e:f5:12:22:e5:77:b3:2f:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:AB:35:8D:83:A6:AF:EE:25:8B:98:C6:B4:C2:02:AB:FB:3D:05
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Nf-rNY2Dpq_uJYuYxrTCAqv7PQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5b0::/44
Signature Algorithm: sha256WithRSAEncryption
9e:d5:47:d1:0f:f7:1a:ec:ee:54:3b:0e:d1:66:7e:45:cd:1c:
ff:96:e1:58:e2:32:fb:ac:0d:ce:7e:80:ed:44:ef:43:42:fa:
ae:96:41:f5:45:d9:52:b0:1f:06:ea:e7:29:10:b6:01:01:5e:
ab:ad:32:ed:8b:7b:14:41:c5:fd:bf:cd:bd:07:08:18:6c:f7:
c3:cb:fe:95:b1:da:a5:41:5c:8a:b2:5b:4f:3b:1e:ad:3b:da:
c0:3a:b8:c1:47:74:4c:9f:f1:bd:c5:9a:f7:14:7f:00:6f:b1:
05:47:9a:bb:55:60:27:75:9a:ec:9f:c0:7b:90:17:43:45:5f:
65:ce:43:04:b6:24:ed:a3:36:f3:b8:d1:b7:bc:97:a2:04:27:
2e:72:ae:30:1e:da:a7:1c:13:e2:3a:9f:a6:ae:69:1e:eb:bd:
ec:aa:10:10:c6:e4:b9:95:f2:9c:22:64:a7:b9:e7:cf:18:03:
67:7a:7b:aa:ae:a1:7e:26:52:30:d6:3f:d9:f9:3a:8b:90:86:
93:b0:ce:d4:d2:50:71:47:ab:4a:bf:58:b8:4e:80:49:e3:b2:
f3:a6:2a:06:11:04:09:a2:6f:1f:a2:ed:70:b1:52:89:b1:3f:
a4:0e:73:21:6b:8a:c0:91:8a:ad:73:11:7a:5d:7b:2e:6b:92:
ed:5e:c4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:00:06 2025 by rpki-client