Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RCaj9Pw69pouOVgojNmAgyn7Tc8.roa
File: RCaj9Pw69pouOVgojNmAgyn7Tc8.roa (raw, json)
Hash identifier: D60/81hz8cPaS/oZdseZXiAvoYGWLVz8nEU0BIH3f78=
Subject key identifier: 44:26:A3:F4:FC:3A:F6:9A:2E:39:58:28:8C:D9:80:83:29:FB:4D:CF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196437DF8BEA2ECAFD6F538149021C41157
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RCaj9Pw69pouOVgojNmAgyn7Tc8.roa
Signing time: Thu 17 Apr 2025 11:24:11 +0000
ROA not before: Thu 17 Apr 2025 11:24:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56755
IP address blocks: 139.28.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:7d:f8:be:a2:ec:af:d6:f5:38:14:90:21:c4:11:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 17 11:24:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4426a3f4fc3af69a2e3958288cd9808329fb4dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:c4:10:63:24:6e:58:23:31:d9:68:bf:e4:
81:7e:2b:0e:f6:36:6a:07:85:d6:7a:b6:3e:76:3e:
4d:90:5e:78:02:18:d7:48:98:21:16:44:4a:1b:29:
e6:3f:61:17:3b:b8:fc:19:04:be:5c:27:bb:9f:07:
bd:53:54:5a:44:d8:54:b4:4d:a2:69:b8:c7:47:c0:
38:c5:5f:8f:39:f2:2f:57:8c:d6:03:cb:7f:f3:00:
c9:1c:88:7c:87:7a:fe:74:28:71:ad:b0:92:71:2e:
03:bd:df:d6:5d:54:4d:5c:fc:07:c8:79:b8:85:12:
14:9b:26:60:aa:67:98:92:04:93:14:88:58:44:89:
20:c5:d4:b3:0e:55:60:8a:a9:ef:ce:d3:e3:48:ad:
43:e9:d6:d6:3f:e2:d3:34:94:00:f1:65:9f:7c:d2:
bd:22:99:6f:c3:85:79:5f:b4:1d:74:25:7e:a9:3d:
bd:ca:3f:fa:8d:98:9a:4c:e9:90:5e:ae:9f:66:f6:
88:21:a0:eb:bd:e0:d4:ba:50:c0:f7:03:c1:e5:14:
ad:07:90:32:1d:a4:7c:9d:e8:d5:0c:22:25:d7:4d:
5a:fa:ea:0b:74:7a:60:74:0c:d9:38:da:ff:74:51:
a2:41:70:31:10:00:dc:d1:0f:cc:8a:4a:bc:f8:06:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:26:A3:F4:FC:3A:F6:9A:2E:39:58:28:8C:D9:80:83:29:FB:4D:CF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RCaj9Pw69pouOVgojNmAgyn7Tc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.99.0/24
Signature Algorithm: sha256WithRSAEncryption
40:83:6e:de:b5:a7:72:6c:92:8e:4c:e5:ff:6b:c6:73:93:e7:
3e:cb:4f:a6:34:c8:79:73:14:6f:59:5e:7d:a9:d7:f2:d8:b1:
3e:61:ab:a0:68:aa:66:59:18:0b:83:f1:60:b2:87:37:b0:f5:
84:e8:c1:c1:f9:d0:e3:60:6a:9e:ce:5e:ab:dc:23:62:dc:61:
a6:eb:42:f3:d2:fc:45:10:62:55:91:c7:a5:f0:14:f5:d4:38:
03:e6:22:55:df:a9:ec:bb:d6:48:ac:f5:cf:46:d8:16:fb:6a:
43:79:61:98:ae:13:cd:6d:b0:e5:79:5a:7a:51:1f:db:66:00:
34:97:53:55:4e:12:e0:34:d4:4b:55:ab:2e:a2:96:c0:8a:ca:
0a:40:4f:90:96:3c:27:9a:5a:84:ff:5a:64:a8:be:1c:6e:c4:
7d:b8:36:70:45:fa:7b:2a:27:7c:8f:e7:7e:26:92:67:af:37:
be:14:6f:87:8e:0f:15:e4:97:e4:e9:43:21:eb:da:6b:f9:0d:
f1:f8:7f:b1:99:92:69:4e:36:40:b3:c3:83:1b:2e:cc:af:56:
0f:fc:74:4b:c4:c3:ad:7e:33:fc:58:54:f2:5d:ea:a6:c2:42:
a0:a3:61:96:a7:71:51:bf:aa:f1:43:2f:97:3a:ab:f4:28:74:
9e:4b:f9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:27:36 2025 by rpki-client