Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rk6Vwx8NywpMwKFCp8ZClym9PL0.roa
File: Rk6Vwx8NywpMwKFCp8ZClym9PL0.roa (raw, json)
Hash identifier: m0Ke+cLjj1veH//wjmYOD7U5Xf5dHjfDdk7eBlfD8/c=
Subject key identifier: 46:4E:95:C3:1F:0D:CB:0A:4C:C0:A1:42:A7:C6:42:97:29:BD:3C:BD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425229A4031F1D7DD9E9E46C56DC6F25A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rk6Vwx8NywpMwKFCp8ZClym9PL0.roa
Signing time: Thu 02 Jan 2025 03:50:12 +0000
ROA not before: Thu 02 Jan 2025 03:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400542
IP address blocks: 2a0e:97c0:a46::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:9a:40:31:f1:d7:dd:9e:9e:46:c5:6d:c6:f2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=464e95c31f0dcb0a4cc0a142a7c6429729bd3cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:18:15:7d:4e:ac:66:f1:9d:5c:65:7c:9b:
39:5a:aa:d9:2c:c4:3e:5b:b8:ac:f5:dc:ea:94:c9:
54:66:39:28:94:55:60:88:54:56:a1:b7:1c:b3:3c:
7d:ee:20:64:ec:8e:6f:10:3a:1e:06:28:3e:d0:9f:
c2:95:27:cb:27:98:33:25:58:5e:58:26:4d:6d:62:
67:22:29:b8:8e:b9:4c:b8:2d:23:d8:63:6e:07:67:
fd:d2:43:5d:56:57:af:33:03:20:57:6c:78:09:88:
97:b4:03:32:fe:d7:4c:7c:4b:a9:6d:e6:1b:3f:02:
3c:9b:e2:92:7d:d6:00:6d:3d:bd:c0:0b:af:6f:33:
12:64:bb:8f:90:31:82:76:89:19:05:fa:fd:96:49:
6d:f7:dc:d3:cc:9f:bb:6e:3a:25:d0:f0:6c:93:20:
ad:97:a2:3e:67:de:60:1f:6d:21:f2:8f:da:9b:b1:
9c:c1:cd:9c:b4:b4:1a:8a:a5:25:d2:24:5d:27:b7:
90:63:93:de:2d:cc:0d:49:ac:a8:ce:db:5c:39:95:
70:10:1b:74:da:f1:a5:1c:85:37:4c:c9:3f:41:62:
85:50:4f:ad:49:6e:eb:3f:85:c1:56:a4:d3:c0:47:
38:20:3d:84:8d:de:6e:0e:86:11:9a:d0:e3:52:82:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4E:95:C3:1F:0D:CB:0A:4C:C0:A1:42:A7:C6:42:97:29:BD:3C:BD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Rk6Vwx8NywpMwKFCp8ZClym9PL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:a46::/48
Signature Algorithm: sha256WithRSAEncryption
8e:0f:80:55:75:2d:ce:46:1e:52:7a:4a:80:58:81:23:ce:36:
34:dc:52:48:06:e4:39:f5:19:70:fb:00:46:f8:92:23:41:41:
33:a0:e1:08:2d:58:1a:46:2e:a4:61:68:0b:56:bb:08:5a:0f:
e4:48:8b:2d:49:a1:5f:a7:59:7d:bd:f4:d6:cc:97:90:49:fb:
6e:45:09:ca:d9:76:c0:03:a2:6b:43:1b:39:5e:e9:0e:2c:b7:
a7:40:a3:43:6f:d4:0b:f5:81:36:e8:8f:2b:73:83:d7:8d:0c:
ba:64:66:50:cc:d1:9b:91:f6:79:cd:d5:20:f5:2f:46:a6:75:
5e:eb:d2:49:c3:e5:3f:8a:8a:98:9d:23:6a:36:aa:1a:a8:ef:
e1:c8:6c:57:a4:32:5a:92:45:2a:3d:8d:8d:bd:20:a9:46:fb:
4e:ec:80:b0:14:56:0b:92:fe:0e:f6:aa:86:58:45:92:35:39:
b7:81:04:86:7c:26:ad:d9:e4:06:37:5c:a4:29:71:d1:c1:3e:
37:dc:b0:72:92:2a:eb:33:80:e9:de:25:43:3f:d2:c6:d0:d2:
8b:22:fb:af:21:10:c9:0d:a6:2e:50:ac:61:0a:e1:0e:c5:b4:
12:b8:c4:b2:46:a4:8e:f0:cf:4b:44:b5:74:4d:5b:fe:11:c7:
ba:74:84:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:48:47 2025 by rpki-client