Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TMIymJpZ_QWJBfInjhGQCVdNu_w.roa
File: TMIymJpZ_QWJBfInjhGQCVdNu_w.roa (raw, json)
Hash identifier: bea0Vft+M7Fg5nsdXXZis+cRJUO0wmMAE8bkwSmLvMo=
Subject key identifier: 4C:C2:32:98:9A:59:FD:05:89:05:F2:27:8E:11:90:09:57:4D:BB:FC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252214D722C64873D50DBE906DA3BACF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TMIymJpZ_QWJBfInjhGQCVdNu_w.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204051
IP address blocks: 2a0e:97c0:b90::/44 maxlen: 48
2a10:2f00:186::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:14:d7:22:c6:48:73:d5:0d:be:90:6d:a3:ba:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cc232989a59fd058905f2278e119009574dbbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:b3:46:bf:43:dd:f3:16:5f:6c:59:05:99:
98:ac:e2:67:12:7e:ce:13:e3:b9:08:b8:65:84:6c:
e1:b8:07:b6:37:44:9e:ee:23:4d:da:de:b9:0a:52:
ec:a7:39:50:bf:64:f8:a1:db:aa:77:ae:71:c3:cf:
52:cc:41:99:3a:53:ca:6e:8d:e5:a8:42:af:fc:3d:
60:77:c1:da:21:02:05:53:b7:93:b9:fb:04:e2:94:
d7:cc:fb:08:e9:c9:6a:eb:82:d5:d8:9a:76:67:a8:
10:72:ae:ad:f2:e9:fe:2a:92:09:bb:dc:10:d2:1e:
dc:14:33:df:62:4d:12:93:12:37:db:28:3e:8e:0f:
91:a1:48:80:d6:92:81:41:ae:f5:44:23:2d:9a:59:
8c:26:a4:2f:f3:20:29:12:21:65:a5:96:30:71:37:
66:07:23:bb:9c:47:59:1d:c8:a2:09:ce:00:bc:fe:
25:ca:45:1b:58:f2:e4:8f:bf:80:79:38:81:83:09:
18:fb:e4:52:b3:26:15:26:57:e9:bf:e1:79:ec:21:
40:d3:9f:f4:1b:a1:6e:4a:e2:94:2a:8d:4d:af:35:
d8:45:bb:a4:98:e5:7f:c7:2c:a8:51:36:a7:89:46:
80:65:38:a0:a6:9a:3a:06:32:bb:3c:a3:17:13:af:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C2:32:98:9A:59:FD:05:89:05:F2:27:8E:11:90:09:57:4D:BB:FC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TMIymJpZ_QWJBfInjhGQCVdNu_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b90::/44
2a10:2f00:186::/48
Signature Algorithm: sha256WithRSAEncryption
39:73:87:bf:43:90:65:0a:03:2b:ed:e9:a9:8d:4f:4c:41:e6:
68:32:0e:32:f4:52:93:03:36:96:e8:8d:fa:f9:05:ed:23:cb:
80:b6:32:de:86:94:ab:ac:80:6c:2b:6b:fe:08:64:e1:da:a2:
e4:3d:b7:25:ee:9e:15:88:f4:8f:bb:fa:fc:05:ab:55:bc:07:
95:1d:55:24:25:ef:f8:f9:14:8f:d7:a5:36:7e:17:5b:1b:c1:
83:b3:db:4a:c3:95:b3:dd:06:3e:f5:39:4c:b5:12:29:0c:e1:
ab:6f:0c:16:37:12:59:c3:ef:43:92:1c:68:2d:17:11:da:83:
5c:03:60:94:d4:a1:60:01:6f:cc:16:90:d1:e1:e7:b0:ef:95:
a9:ba:3a:91:a8:01:89:1d:1f:00:d8:cf:d5:6b:f1:4b:be:39:
55:20:5a:b6:33:b1:ea:55:e8:68:a4:fb:15:18:3e:f5:90:70:
11:71:c4:6e:14:36:24:4c:96:a7:73:9f:fc:f7:bd:e9:c6:53:
56:8b:88:38:ab:b3:30:16:0c:a8:65:67:11:b3:cd:27:ee:db:
6a:27:53:88:c7:60:c0:3b:e6:24:ca:1b:b9:dc:21:05:98:60:
7c:db:99:18:3c:d0:99:5f:b7:18:eb:ef:11:38:06:5d:47:1c:
76:96:9d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:46:36 2025 by rpki-client