Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U9diSUtxiPoYddAn7r6F6lm1Q94.roa
File: U9diSUtxiPoYddAn7r6F6lm1Q94.roa (raw, json)
Hash identifier: tOmvjXuOTGNa+dvUg0I+FOOeM0+MzYEYzgR2SD+cH5w=
Subject key identifier: 53:D7:62:49:4B:71:88:FA:18:75:D0:27:EE:BE:85:EA:59:B5:43:DE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425226642824BC48FBF6AA273C16E0ABD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U9diSUtxiPoYddAn7r6F6lm1Q94.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212746
IP address blocks: 2a0e:b107:d00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:66:42:82:4b:c4:8f:bf:6a:a2:73:c1:6e:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53d762494b7188fa1875d027eebe85ea59b543de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:38:cc:18:c1:db:60:42:3e:06:a0:07:7d:
a5:bf:59:61:0a:83:70:91:66:f2:3c:68:4a:54:fa:
f4:aa:f8:8a:43:ca:78:ba:a4:01:a1:a1:4d:dc:b7:
4c:6f:40:99:e0:b8:1d:18:43:3c:e6:0b:e8:eb:09:
41:10:49:5a:33:f6:28:08:55:3f:c4:e7:f3:be:2c:
71:ff:73:5b:53:36:14:ec:f1:36:aa:e6:4c:ac:b4:
87:6b:30:c4:78:7d:6b:3c:a1:58:22:82:c0:19:b7:
34:58:09:9e:c4:f8:85:03:78:9b:e2:94:af:83:59:
c0:ab:4c:c6:b3:23:18:7f:7e:83:3e:47:40:94:49:
13:27:35:d6:39:2f:62:0b:44:f8:a8:30:c7:ec:b1:
b2:5b:51:6f:7c:b1:79:a8:f3:58:af:9e:26:fe:7e:
a4:7a:e7:1b:3a:6e:9d:b3:18:b5:0c:a7:16:d2:67:
e5:e7:06:4d:68:a0:e7:fd:60:56:9f:06:40:70:f4:
99:1c:b0:41:cf:1e:21:54:4d:39:23:69:b6:67:de:
7b:d4:31:91:03:4c:31:c5:a9:59:b0:c3:ce:03:07:
0f:4e:fb:86:30:26:44:31:48:a5:9d:4a:50:96:7b:
48:77:4c:3e:a8:8f:cd:c4:c9:ee:95:fa:5c:33:1d:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D7:62:49:4B:71:88:FA:18:75:D0:27:EE:BE:85:EA:59:B5:43:DE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/U9diSUtxiPoYddAn7r6F6lm1Q94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:d00::/44
Signature Algorithm: sha256WithRSAEncryption
ad:96:6c:e6:df:48:ab:6c:80:a5:89:f3:d8:b3:32:26:92:50:
fb:2a:9e:28:3c:7c:49:83:23:e2:eb:a0:05:a9:d4:ca:e5:0e:
d4:15:26:6b:bc:81:44:3a:1e:e5:57:f8:bd:62:b2:c4:44:ac:
88:cc:d9:d5:44:38:37:4b:96:8f:16:04:88:52:e5:23:f8:78:
8f:2a:85:25:ce:2a:41:8f:ba:54:a1:ed:e2:d5:27:66:c0:37:
cd:2a:ce:b5:dc:71:59:c9:c4:86:cc:4e:56:4b:d3:52:b9:12:
0d:0e:d8:5e:99:f0:b0:12:66:d8:20:3e:ab:9e:7b:30:44:f3:
0d:1b:1a:a3:2b:39:be:26:f5:88:87:51:00:d1:de:9b:4b:ae:
17:1f:e1:71:18:61:fe:17:d9:b2:27:e2:c2:ca:8d:84:02:65:
2f:31:b3:50:35:f5:52:48:08:e5:d6:f8:99:97:4d:45:11:56:
a9:9c:81:f1:33:1a:16:58:15:9d:2f:bd:78:1b:e0:5a:b6:03:
32:39:09:d8:8d:a0:4f:29:3c:f5:68:99:74:8f:c8:47:ca:85:
08:c5:16:f4:a7:13:3d:47:93:e7:7a:74:b0:ae:7a:08:42:9b:
73:0b:25:46:69:3e:03:fd:be:88:bf:c7:a1:fd:c7:5c:8e:1e:
d6:e7:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:52:45 2025 by rpki-client