Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rjai6QKyMDR8yPIUO1QvpPu1j8k.roa
File: Rjai6QKyMDR8yPIUO1QvpPu1j8k.roa (raw, json)
Hash identifier: B8lWyC2e46rh3QYrE7x53RN9VKPIB3MELclB2CMyCJk=
Subject key identifier: 46:36:A2:E9:02:B2:30:34:7C:C8:F2:14:3B:54:2F:A4:FB:B5:8F:C9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195C56A921802BCB6EFF929970AA900CD87
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rjai6QKyMDR8yPIUO1QvpPu1j8k.roa
Signing time: Sun 23 Mar 2025 23:50:50 +0000
ROA not before: Sun 23 Mar 2025 23:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209105
IP address blocks: 2a10:2f00:17f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c5:6a:92:18:02:bc:b6:ef:f9:29:97:0a:a9:00:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 23 23:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4636a2e902b230347cc8f2143b542fa4fbb58fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:82:bb:e3:5e:23:26:87:38:f6:36:3e:f5:
00:77:e0:ba:34:99:59:55:e8:95:4b:3d:c6:59:4a:
55:11:a0:5f:af:b5:cb:15:52:e9:11:7b:c8:68:2e:
ad:77:3e:d3:61:c1:dc:c4:b7:04:58:43:26:26:bb:
72:e2:3a:de:b1:47:8f:5d:bb:de:95:2a:ab:70:76:
7d:67:2e:26:34:ab:91:f5:40:b1:5e:42:73:0d:e9:
29:d1:0b:33:1a:8b:04:06:5a:28:bb:8c:9d:1b:64:
b6:0b:66:36:c3:85:22:0f:63:53:b8:c2:57:07:10:
7b:7f:eb:0d:7f:ba:55:44:9d:ba:08:ab:f1:60:76:
05:25:23:13:fd:24:e0:bb:c6:c3:e0:44:1a:0f:ee:
64:56:3f:9b:b8:16:11:bd:9c:b5:a7:65:7d:73:58:
13:75:cd:45:04:5c:f6:91:8c:51:8e:f3:c1:e7:03:
eb:38:e8:77:3e:e2:87:1e:84:e5:d8:30:2e:c3:99:
8b:6c:db:b1:c2:3b:b9:0e:6d:67:7e:68:2f:3c:d8:
8f:d1:d4:03:fc:e1:0b:e4:af:db:77:35:3c:f6:3f:
4a:c4:6b:81:4c:95:79:b7:bd:07:02:84:67:e6:6f:
0d:40:6d:3a:c1:4f:0f:34:3f:8d:87:63:64:b1:ce:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:36:A2:E9:02:B2:30:34:7C:C8:F2:14:3B:54:2F:A4:FB:B5:8F:C9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rjai6QKyMDR8yPIUO1QvpPu1j8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:17f::/48
Signature Algorithm: sha256WithRSAEncryption
9e:69:91:aa:73:53:6b:61:3f:38:43:eb:a2:d7:34:a2:2f:17:
8d:67:40:c5:88:f6:4a:59:f7:82:6c:a0:cc:5e:9d:19:bb:c5:
da:17:3f:67:ed:f3:2e:89:1e:d8:14:47:97:9c:83:7f:35:36:
06:1e:4d:d5:aa:a0:23:05:12:ae:66:d2:db:1b:c2:8b:f9:77:
8f:db:c0:4f:3f:3a:d3:8a:1e:9e:30:da:2f:6a:e8:e8:23:aa:
14:56:10:f5:5e:c1:0a:e2:39:d2:c2:ef:48:2b:d6:aa:08:fb:
ef:d6:80:6e:47:e4:76:4b:ca:a5:5c:a8:e7:de:5c:57:e9:62:
ee:71:62:b5:24:6b:90:d4:d9:86:8d:19:50:8a:f9:7b:6e:34:
18:0b:f8:25:a3:31:72:ce:35:fe:aa:aa:52:c9:43:fc:45:bb:
92:b7:83:81:9d:c2:63:05:7b:c5:b3:b7:e2:d7:72:b1:12:06:
8b:3f:bf:b6:43:29:dc:83:7e:ca:c4:0b:40:f7:78:9f:63:ec:
12:c5:fa:fb:81:7b:fe:ca:13:f0:61:8f:7e:55:35:c5:63:e4:
f2:68:1b:7f:c3:4a:c7:2a:ed:70:22:b2:78:07:9b:af:42:5e:
07:54:41:63:d4:71:d6:76:8f:2e:d1:e5:6f:80:ff:45:46:96:
87:12:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:25 2025 by rpki-client