Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Se8CZGSGPtSDbNprdOHpJsyJIjM.roa
File: Se8CZGSGPtSDbNprdOHpJsyJIjM.roa (raw, json)
Hash identifier: +S7SLa6Zv17T8yO66LmuLrk/TgNXelIWPQLff62wWpE=
Subject key identifier: 49:EF:02:64:64:86:3E:D4:83:6C:DA:6B:74:E1:E9:26:CC:89:22:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252258E4B11E57E319EFDFDB216481F8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Se8CZGSGPtSDbNprdOHpJsyJIjM.roa
Signing time: Thu 02 Jan 2025 03:49:55 +0000
ROA not before: Thu 02 Jan 2025 03:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212120
IP address blocks: 2a0e:b107:eb0::/48 maxlen: 48
2a0e:b107:eb1::/48 maxlen: 48
2a0e:b107:ebf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:58:e4:b1:1e:57:e3:19:ef:df:db:21:64:81:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49ef026464863ed4836cda6b74e1e926cc892233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:b6:62:45:58:b5:2b:19:f6:22:42:83:7e:
3f:06:14:ff:2c:eb:62:9d:af:4f:18:65:71:ab:23:
1e:30:79:bb:93:40:5c:87:dd:d3:14:d5:05:e3:74:
93:e4:04:a0:4c:50:3f:4a:50:91:b5:a5:8d:24:a6:
54:e6:3f:ca:88:39:a7:30:10:75:43:eb:e7:41:87:
0e:8b:34:43:88:85:bb:11:39:de:1c:14:ff:4b:bf:
b3:6e:ed:cc:13:92:39:09:05:ee:a7:ea:5d:c8:43:
56:12:1c:20:ae:25:d9:e8:fc:ec:1a:c2:e7:ab:4e:
a8:73:0b:97:66:22:d2:dd:26:f5:bb:e2:aa:42:b9:
c1:dd:ed:33:c3:71:25:48:81:81:ef:b5:d5:b4:5b:
9b:6b:c6:d9:35:11:ae:d5:c6:0c:01:59:ca:03:e6:
6e:57:5f:05:fa:5b:c1:ea:3a:9c:ea:e7:64:c5:49:
86:3f:84:70:f1:ff:e5:3a:2a:f2:34:31:f1:61:1d:
8f:df:89:d0:6f:bd:b3:d6:0d:a1:69:77:fe:dd:cd:
8d:c7:9e:80:0e:a0:8a:8b:67:b8:b4:7f:15:34:1d:
ae:c9:fe:6d:99:79:fb:98:f2:8d:b7:a8:72:3c:59:
c5:77:b6:52:b1:2f:65:3a:4a:01:9f:d3:d8:cb:b7:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:02:64:64:86:3E:D4:83:6C:DA:6B:74:E1:E9:26:CC:89:22:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Se8CZGSGPtSDbNprdOHpJsyJIjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:eb0::/47
2a0e:b107:ebf::/48
Signature Algorithm: sha256WithRSAEncryption
49:76:50:a8:c2:8c:81:9f:b3:85:b1:d5:68:6f:3d:61:67:0a:
6b:05:ae:0f:d8:82:58:b6:92:8d:59:be:4b:3d:b6:ae:ae:5a:
e3:bb:28:65:3d:39:d5:bd:b3:87:bc:ff:6e:9c:8e:80:91:9c:
bb:1a:53:11:33:4b:a4:a8:78:85:91:cd:c8:4e:4f:55:a5:5c:
e3:7e:01:78:14:10:b2:e7:7d:b7:98:47:97:ea:a0:da:75:10:
17:ae:64:ec:a7:e8:45:5a:05:8a:3b:8e:2e:9a:27:26:a7:60:
ef:67:db:64:57:26:73:da:a6:9d:8a:3a:b3:17:50:f4:9d:31:
5b:61:ad:95:ab:dc:3e:03:43:6b:ac:de:35:02:a3:da:91:f3:
6a:fd:4c:22:e5:31:64:4f:56:da:aa:52:37:51:92:f4:76:f4:
d8:13:b3:9f:93:29:e1:28:be:f2:0c:48:a4:85:20:5b:55:25:
d2:13:4b:fa:5c:39:90:e1:c0:09:06:d4:b8:a0:e4:9b:e9:e2:
49:30:b0:56:bc:6e:db:a5:02:5e:fd:94:77:52:8c:be:ab:8c:
a9:1b:f6:53:79:7d:73:6f:61:45:71:08:dc:8b:eb:27:7d:53:
35:d7:d5:13:e1:21:25:25:34:3e:d6:95:31:3e:76:75:1d:96:
00:a2:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:54:17 2025 by rpki-client