Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UDEucszFqnsAM5m2Ff8jxcGxyEQ.roa
File: UDEucszFqnsAM5m2Ff8jxcGxyEQ.roa (raw, json)
Hash identifier: ZT7QBFXS1c3UPyRRrLuetqmgmwee6Nd0nC3hAToql1c=
Subject key identifier: 50:31:2E:72:CC:C5:AA:7B:00:33:99:B6:15:FF:23:C5:C1:B1:C8:44
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252209BD200EFE8B2CF23772D7156C1B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UDEucszFqnsAM5m2Ff8jxcGxyEQ.roa
Signing time: Thu 02 Jan 2025 03:49:35 +0000
ROA not before: Thu 02 Jan 2025 03:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202336
IP address blocks: 2a0e:97c0:c30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:09:bd:20:0e:fe:8b:2c:f2:37:72:d7:15:6c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50312e72ccc5aa7b003399b615ff23c5c1b1c844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:49:57:51:7d:ef:9d:25:2d:3e:4c:b8:a7:
02:c5:7e:ef:9d:fb:05:9e:d1:47:cb:5b:f9:c8:96:
b2:c3:1b:3b:fa:eb:6e:fd:9a:cc:f8:05:26:f2:83:
99:89:96:a2:13:5d:bc:44:ed:0e:78:8d:3c:e2:73:
e5:24:79:44:2a:fe:9b:95:7d:bb:66:d1:06:30:7f:
c0:ab:9a:56:c3:31:be:83:8c:4c:53:c6:e7:12:8c:
8e:cb:50:be:6c:a8:28:b0:6a:2b:05:87:c8:6f:7f:
78:27:84:ed:6f:51:92:1e:2d:88:31:14:8e:a8:1c:
37:aa:94:2f:cc:9c:e0:08:32:25:05:46:d6:d3:00:
64:5e:a5:84:86:5c:2c:a5:cd:8a:af:7b:67:01:c7:
2f:4a:98:b1:2d:f1:55:11:49:cc:c5:a0:13:05:9c:
fe:98:f8:78:09:44:b1:c0:0f:56:09:3b:6a:30:37:
70:a7:43:be:2d:0d:fc:6d:68:d4:f4:aa:e9:b4:d1:
ad:c1:03:bf:34:43:da:f4:3a:20:48:f9:ef:75:54:
a7:c0:db:45:60:ea:f0:b3:09:7d:57:7c:0c:9f:62:
62:97:c5:a2:6e:2a:27:21:c1:79:ea:b1:ce:c0:d6:
af:d6:dd:ec:0f:d0:f2:cc:91:a0:3e:8a:b9:87:9c:
9c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:2E:72:CC:C5:AA:7B:00:33:99:B6:15:FF:23:C5:C1:B1:C8:44
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UDEucszFqnsAM5m2Ff8jxcGxyEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c30::/44
Signature Algorithm: sha256WithRSAEncryption
5d:fe:42:28:e8:71:a7:db:78:de:42:74:8e:4f:98:f9:44:6a:
0b:17:8d:a0:b6:2f:85:c7:18:de:04:93:d7:f7:93:a8:ae:d2:
2e:81:b0:e0:5f:f0:39:96:42:1e:b8:d1:8b:37:bb:8b:d5:d8:
4d:bd:b7:21:61:83:d7:51:92:e2:26:7a:c2:17:65:93:39:69:
3d:ce:28:b3:a4:61:3b:42:b5:59:48:74:1d:7f:de:7e:4f:6c:
48:ef:a7:15:2f:91:fd:50:71:48:c5:8e:49:0c:74:fb:97:bc:
b0:00:41:5d:ee:89:46:15:b1:71:3a:f1:d7:d4:be:6e:36:65:
cd:a0:05:1f:a6:38:cf:6f:e4:51:44:6c:04:47:9d:01:a7:86:
8a:5b:b5:89:c3:ac:dd:e8:21:16:2a:fd:c0:71:97:57:9b:54:
59:7e:8e:af:02:d3:66:a7:bd:bd:df:9b:be:50:ac:fc:bd:09:
3e:8a:20:ee:66:fc:e9:bc:9e:15:5c:ce:2d:fb:24:12:18:4e:
87:66:5a:d2:1d:cb:f8:0f:59:33:a1:19:db:bd:6f:b1:87:9f:
06:bb:2e:4f:54:0b:47:45:db:9d:00:d6:6c:81:55:6a:e2:fe:
b7:81:f5:0f:b1:88:8e:57:e5:9e:e2:61:43:84:16:61:72:c3:
31:60:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:37:48 2025 by rpki-client