Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OXcyDPWvuGqaixJRChutDXHuu1g.roa
File: OXcyDPWvuGqaixJRChutDXHuu1g.roa (raw, json)
Hash identifier: W21VUh5Iy/JIV6AfIZ4JLNpf8xttgqFJR+qUuFAWpKg=
Subject key identifier: 39:77:32:0C:F5:AF:B8:6A:9A:8B:12:51:0A:1B:AD:0D:71:EE:BB:58
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522748701C11E6753393CE83DE8C2C3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OXcyDPWvuGqaixJRChutDXHuu1g.roa
Signing time: Thu 02 Jan 2025 03:50:02 +0000
ROA not before: Thu 02 Jan 2025 03:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213747
IP address blocks: 2a0e:97c0:560::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:74:87:01:c1:1e:67:53:39:3c:e8:3d:e8:c2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3977320cf5afb86a9a8b12510a1bad0d71eebb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:33:5a:9b:14:59:20:f2:84:4f:3a:ef:8a:
64:54:d8:8c:51:8d:31:67:b0:94:5c:79:ad:43:91:
d7:4a:2f:c4:57:e9:71:7e:ac:25:ef:d3:85:89:e5:
e8:4f:c6:18:a8:bb:79:14:4a:a6:ff:ce:74:ee:6c:
72:5a:f2:78:fb:d3:3c:d3:91:6a:2d:3b:ac:9f:09:
2c:3d:4e:a6:f5:dd:b9:6f:62:af:43:d7:e0:0b:98:
cf:92:00:ac:19:ba:35:53:49:77:2c:8d:4d:d9:a4:
36:de:6e:5b:b7:07:f4:85:b2:e8:6f:14:ba:f4:ef:
18:41:17:71:96:fd:74:9b:e3:24:a4:e8:36:c1:34:
d9:7f:41:49:d1:66:74:a3:0d:e3:b8:26:ac:8e:97:
df:bb:de:b5:27:f5:81:f9:a5:3f:74:f2:ab:8c:57:
02:56:61:98:ee:02:c8:03:54:68:22:93:0f:99:17:
1d:88:de:0a:7d:e7:8b:45:ff:b1:c7:2d:74:c4:cb:
b5:63:67:4f:48:ce:bc:91:08:48:3e:9c:25:0e:46:
38:52:3a:19:cc:17:96:53:47:52:d8:6f:e8:55:7f:
1c:76:d8:cc:0a:d2:c6:61:fc:15:64:9d:a8:d7:fe:
1b:66:57:70:39:e4:d8:6e:8c:1e:5b:9a:31:a0:4b:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:77:32:0C:F5:AF:B8:6A:9A:8B:12:51:0A:1B:AD:0D:71:EE:BB:58
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OXcyDPWvuGqaixJRChutDXHuu1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:560::/44
Signature Algorithm: sha256WithRSAEncryption
0f:e8:7e:b2:bb:aa:8c:be:a2:d7:ed:ea:26:1a:93:11:bb:55:
89:e5:4c:5c:a7:d4:fb:da:eb:3f:16:9b:d5:a1:2a:8e:4a:a3:
1f:92:6d:76:ed:97:8a:16:e2:ed:8b:23:f6:3b:80:3a:6a:6b:
ca:a3:c9:23:11:f0:96:df:9b:a1:ab:2e:11:6a:dc:93:2d:5b:
e4:93:a3:cc:32:bd:e3:38:43:df:a1:1d:59:ec:9d:e1:c8:79:
e5:0c:97:39:4d:dd:77:b7:8a:76:d2:99:4d:83:2a:1d:a8:f3:
ec:0a:36:8c:dd:e0:8e:81:81:af:4e:9d:c0:d6:2e:e4:1e:d6:
89:9c:92:79:50:e0:6d:87:33:23:67:d9:27:0f:dd:fd:9e:f5:
0a:00:8e:0b:be:fd:eb:a2:e3:09:c4:2f:b9:b9:9b:ea:90:46:
8f:85:84:0d:bb:f1:0d:ab:04:5d:4b:e4:81:0b:a7:1f:00:de:
20:d7:16:0d:53:cb:e9:ff:ae:c4:a4:e6:48:a0:83:5b:4c:6a:
f1:65:6d:c1:31:25:81:30:fc:bc:8e:92:c8:c1:62:ad:d3:99:
84:3b:f0:81:17:e7:40:84:31:46:e6:bd:7f:62:37:38:6f:d2:
ed:07:32:fa:a6:bc:07:cc:54:d6:2e:33:0d:5a:a8:7d:a2:9b:
e4:eb:d9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:31 2025 by rpki-client