Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PF24ImjNlZbYG-VNeFOtSBS2TSs.roa
File: PF24ImjNlZbYG-VNeFOtSBS2TSs.roa (raw, json)
Hash identifier: p/2mB+8sBRxHh9NKYgi7L7U0gbJcVDtjVYLR2nkgoiA=
Subject key identifier: 3C:5D:B8:22:68:CD:95:96:D8:1B:E5:4D:78:53:AD:48:14:B6:4D:2B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522502EB7A3C4E8646A883BA88E7FC9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PF24ImjNlZbYG-VNeFOtSBS2TSs.roa
Signing time: Thu 02 Jan 2025 03:49:53 +0000
ROA not before: Thu 02 Jan 2025 03:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211293
IP address blocks: 2a0e:b107:2190::/48 maxlen: 48
2a0e:b107:2191::/48 maxlen: 48
2a0e:b107:2192::/48 maxlen: 48
2a0e:b107:2193::/48 maxlen: 48
2a0e:b107:2194::/48 maxlen: 48
2a0e:b107:2195::/48 maxlen: 48
2a0e:b107:2196::/48 maxlen: 48
2a0e:b107:2197::/48 maxlen: 48
2a0e:b107:2198::/48 maxlen: 48
2a0e:b107:2199::/48 maxlen: 48
2a0e:b107:219a::/48 maxlen: 48
2a0e:b107:219b::/48 maxlen: 48
2a0e:b107:219c::/48 maxlen: 48
2a0e:b107:219d::/48 maxlen: 48
2a0e:b107:219f::/48 maxlen: 48
2a0e:b107:21c0::/44 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:50:2e:b7:a3:c4:e8:64:6a:88:3b:a8:8e:7f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c5db82268cd9596d81be54d7853ad4814b64d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:3f:71:67:5d:a4:9a:3e:b6:db:01:ff:e9:
87:d8:6b:f4:7d:a4:44:1c:31:ad:fe:cc:82:ce:e9:
e8:89:95:51:f9:5e:b1:1c:63:9c:14:54:ea:80:24:
76:17:73:73:26:10:76:e1:24:a0:32:f0:5a:10:e0:
ca:b1:56:d0:b4:e7:7c:e0:37:f5:7b:6c:a1:6a:3e:
5f:97:50:86:52:63:e5:f8:0b:df:5a:fe:3f:ce:da:
b8:d3:d8:a0:ce:c0:b1:8b:88:37:e4:c8:fd:37:49:
88:56:29:5a:24:95:7b:cd:ed:64:06:5a:6d:74:71:
01:b6:c3:60:34:33:e8:fe:bd:ff:19:12:ff:cb:47:
bf:7f:e1:76:0a:c3:bc:2b:a1:29:a6:a2:9a:69:52:
10:ce:85:24:76:60:11:5c:52:73:c7:f2:05:df:10:
82:bc:18:59:68:ad:81:18:c8:57:30:c1:05:0c:77:
6b:d8:fe:cf:62:80:de:32:7f:b8:66:65:09:a9:fb:
e2:fc:b1:f3:08:31:6f:8f:c9:8b:46:28:80:0e:55:
81:be:59:27:8a:7d:0a:56:57:80:42:c4:d8:99:60:
08:62:0d:78:d7:e4:3f:bc:72:f3:73:26:7d:7f:53:
ee:65:da:f4:cf:e2:33:0b:10:6e:11:ff:14:d5:9b:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5D:B8:22:68:CD:95:96:D8:1B:E5:4D:78:53:AD:48:14:B6:4D:2B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PF24ImjNlZbYG-VNeFOtSBS2TSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2190::-2a0e:b107:219d:ffff:ffff:ffff:ffff:ffff
2a0e:b107:219f::/48
2a0e:b107:21c0::/44
2a0e:b107:2220::/44
Signature Algorithm: sha256WithRSAEncryption
91:72:82:d0:5f:3c:02:81:68:aa:b8:08:79:c1:62:f7:90:4c:
7e:c4:94:6c:bc:b4:b6:6a:10:1b:57:11:74:73:cf:22:bd:ee:
d5:9e:8b:c4:f6:53:1b:0e:2a:4d:f6:eb:69:94:e5:33:07:87:
95:e5:12:1c:ce:8d:e7:0f:3c:68:0f:8e:d2:47:d6:46:3f:84:
c1:05:2a:55:bc:2f:40:23:d1:9e:f3:23:97:84:04:71:b2:76:
e3:b4:b5:2a:3e:4f:94:a5:08:53:3c:2a:dc:d8:ec:e3:79:bf:
d5:34:f8:3a:45:a7:8c:6c:2f:89:05:f3:75:b9:74:89:02:88:
eb:60:9d:47:a2:09:d8:06:41:22:90:f3:e5:07:f2:33:b6:90:
a9:49:d9:34:ff:bd:0a:40:ed:1f:ca:7b:1d:db:7f:e8:14:68:
14:00:38:59:26:bd:64:6a:f9:aa:6e:56:7f:fe:be:81:8e:34:
5a:32:90:cf:61:de:13:71:d8:f9:bf:3a:6f:5d:e8:20:16:fa:
70:e7:1b:4d:d0:50:6a:cb:50:0a:e5:93:ad:21:1e:2a:56:de:
c0:39:76:93:87:b5:63:8d:7e:2a:6a:0c:7c:c7:18:fa:72:60:
93:ed:a2:a1:30:cd:39:a9:2e:a3:4b:9b:fb:70:b8:3b:bf:ac:
29:fe:cf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:42:16 2025 by rpki-client