Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QTIwNZIeWp05lsy9HBpSHo7OsVo.roa
File: QTIwNZIeWp05lsy9HBpSHo7OsVo.roa (raw, json)
Hash identifier: rQXmOEjVq13muuL0Bwr8rSJCNI2/l2x+Ckb5mxJunSE=
Subject key identifier: 41:32:30:35:92:1E:5A:9D:39:96:CC:BD:1C:1A:52:1E:8E:CE:B1:5A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522797B976F21EAAAB3842E8E334DE2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QTIwNZIeWp05lsy9HBpSHo7OsVo.roa
Signing time: Thu 02 Jan 2025 03:50:03 +0000
ROA not before: Thu 02 Jan 2025 03:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214288
IP address blocks: 2a0e:97c0:460::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:79:7b:97:6f:21:ea:aa:b3:84:2e:8e:33:4d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41323035921e5a9d3996ccbd1c1a521e8eceb15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:84:df:33:fb:f1:c4:5c:e6:6b:5e:76:b5:79:
7c:57:27:83:98:f6:cc:18:58:1e:17:75:7b:9d:8a:
12:0d:ea:9a:13:7a:f9:30:1f:8e:c3:c9:d1:fc:78:
ec:b6:6b:e0:cc:de:21:93:f5:b1:87:71:dc:dc:ff:
f8:9e:22:49:4b:88:0f:5e:0d:5c:28:b9:dd:03:55:
8a:a0:5e:9c:b0:e3:9a:a1:57:9b:9b:7c:98:fd:a2:
1c:e0:8c:36:11:59:d9:d7:43:e9:e2:16:93:ca:53:
a6:8e:66:5a:93:83:d6:89:bb:9e:d0:b1:0f:94:b6:
0b:4f:fb:b2:25:09:f9:d1:b0:41:a7:d7:62:1c:0f:
f0:eb:9f:d7:e7:44:85:e3:58:99:8a:07:1c:72:f5:
0e:14:7c:a7:42:f5:ed:22:29:17:4f:86:c8:f3:02:
ea:a7:a2:0b:0e:5e:1f:d1:5f:34:1d:46:11:2d:ab:
e9:d6:b1:ca:00:22:ef:2d:f2:60:33:26:f7:31:b4:
c3:e5:b6:d7:83:e4:d2:ae:d9:8a:a8:76:6e:f3:8b:
9f:a1:bd:2a:7b:d6:58:fc:0c:22:79:b4:18:87:67:
d2:30:63:a0:10:15:aa:02:ec:83:45:81:f2:ea:0a:
ef:45:08:dc:d7:0d:38:83:ff:80:73:d4:a1:ac:20:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:32:30:35:92:1E:5A:9D:39:96:CC:BD:1C:1A:52:1E:8E:CE:B1:5A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QTIwNZIeWp05lsy9HBpSHo7OsVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:460::/44
Signature Algorithm: sha256WithRSAEncryption
03:f6:47:67:e6:75:d0:72:91:6c:0f:70:4e:a3:83:c3:07:49:
fe:d9:f3:de:f6:63:fc:b1:a4:b9:58:9b:50:82:09:f7:f0:52:
61:52:f0:43:f0:c6:dc:b0:db:28:34:4a:3c:0b:b5:c1:a8:70:
25:73:51:e9:2d:c8:a1:ea:19:b2:71:ce:c3:6b:f2:20:12:f8:
bd:64:b3:9f:29:4c:01:46:c5:8a:04:5b:d2:76:6e:d2:70:cc:
18:41:1a:8a:18:86:e3:56:6f:e8:ee:60:c9:84:83:eb:5a:b6:
51:1f:cc:1a:b3:b5:d1:f4:27:22:1f:ce:53:ae:f3:c2:84:bc:
f1:b6:8f:42:dc:5b:b9:31:e5:73:fc:0d:87:b5:8b:de:3d:aa:
62:d8:92:8e:62:62:ac:d0:98:2d:ee:62:a0:fb:75:d8:48:00:
1f:7d:48:4f:30:4a:0b:39:fb:1e:18:19:2f:2f:94:fa:31:c3:
fd:eb:89:23:4e:e9:30:d9:25:0e:1d:1f:92:fd:e0:ae:bd:62:
8d:24:bb:2e:48:3f:9f:c9:fd:84:2c:c8:5a:eb:4c:0f:d4:00:
8f:12:2e:f5:76:d3:e8:0f:87:15:33:44:b1:d7:ca:c2:83:95:
2a:36:b7:21:e0:01:53:32:56:48:2e:6d:80:7e:dd:14:cc:ad:
f8:7b:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:41:02 2025 by rpki-client