Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QWz8g1rDoFPUei9ZoCPoFyX2d54.roa
File: QWz8g1rDoFPUei9ZoCPoFyX2d54.roa (raw, json)
Hash identifier: v5Y2jYYCj8/k6Wspt5JiCN5bgw5eRETJ9zQrGydS9GM=
Subject key identifier: 41:6C:FC:83:5A:C3:A0:53:D4:7A:2F:59:A0:23:E8:17:25:F6:77:9E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425228F51EB10F9D9D38B3CB39DFAE4AA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QWz8g1rDoFPUei9ZoCPoFyX2d54.roa
Signing time: Thu 02 Jan 2025 03:50:09 +0000
ROA not before: Thu 02 Jan 2025 03:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215788
IP address blocks: 2a0e:97c0:e90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:8f:51:eb:10:f9:d9:d3:8b:3c:b3:9d:fa:e4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=416cfc835ac3a053d47a2f59a023e81725f6779e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:0e:7c:7d:e7:a0:c5:ed:e5:c4:a2:0f:70:
03:f2:7a:ca:26:e9:f7:8a:1a:34:6b:53:b7:ae:5d:
a5:45:e6:87:43:0b:7e:0c:cc:67:0c:1b:50:9c:d5:
20:17:4d:10:65:21:38:2b:07:fb:30:52:38:67:51:
6a:4b:53:7e:35:cf:ed:92:cd:3f:f2:b1:f7:36:8e:
8d:ce:87:a2:bf:dc:19:75:fc:14:d8:75:a1:7c:de:
8f:61:45:5b:38:34:3f:f0:c7:6a:5a:11:a3:55:8a:
59:80:3e:47:8d:4c:70:ac:95:01:23:c4:a3:02:8f:
86:b4:54:d1:ba:e3:54:db:a7:2e:68:bb:93:f3:e5:
f8:84:2d:cc:87:b9:de:95:07:35:3b:87:0d:1b:38:
b5:8e:0c:9f:e0:9a:57:67:90:b9:e4:d9:0d:ff:79:
c9:c6:f3:a3:54:ce:f7:e5:60:f9:d5:a1:c0:03:50:
aa:5c:2f:d3:6b:11:09:dc:cc:3b:c7:59:45:94:bc:
99:c9:08:2f:c3:a5:6c:a7:0c:49:2b:80:da:15:fb:
b3:43:e1:e8:89:0b:1c:ea:77:23:af:05:70:02:49:
95:7c:cd:8d:3b:c5:60:77:e5:e1:06:8e:0e:30:71:
6a:ba:aa:df:f9:fd:65:54:e6:3f:e9:9e:19:0e:0c:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6C:FC:83:5A:C3:A0:53:D4:7A:2F:59:A0:23:E8:17:25:F6:77:9E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QWz8g1rDoFPUei9ZoCPoFyX2d54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:e90::/48
Signature Algorithm: sha256WithRSAEncryption
17:d2:bb:d4:c8:59:e6:b4:9f:60:75:4a:3b:5c:55:f7:c9:be:
df:15:45:14:26:e6:ea:ed:fd:26:22:30:76:64:30:ba:29:c6:
ba:54:98:00:f5:21:ec:18:34:3c:02:47:95:e3:eb:11:55:4a:
2c:15:81:1e:4e:8e:22:3c:19:1e:04:81:e1:b4:70:23:dd:2e:
d2:09:31:08:c7:5c:1d:67:67:af:25:47:16:15:54:8a:00:e5:
d0:13:74:a3:ef:48:bc:9a:7f:c9:44:ce:cb:08:4d:5f:48:96:
3b:62:ce:67:39:c1:62:c2:42:d6:a6:d0:09:78:1a:77:e7:28:
ff:77:4e:71:db:a5:5b:1c:0e:02:f9:95:d1:45:03:ef:7b:04:
21:9d:6e:ba:53:54:f6:cb:a1:43:c3:3f:27:33:7a:e9:19:dd:
f1:c4:43:c7:d3:0f:24:1f:53:0a:a2:ab:8b:7b:5b:e8:3c:0a:
14:38:a1:b9:62:c3:74:02:56:6a:c5:ec:5c:58:29:1d:fc:b8:
41:06:57:dc:7f:9e:b5:8d:49:b3:c5:07:7e:f0:f3:79:e6:f1:
a7:ce:88:4f:78:d9:65:5f:7f:bb:26:db:ad:5c:56:26:13:05:
9c:53:4f:17:4f:65:ab:8a:e6:6a:a3:c6:1a:00:c0:67:97:0f:
b9:96:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:47:47 2025 by rpki-client