Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UDyh7rZXNB1U5uWelTeVxttS8AQ.roa
File: UDyh7rZXNB1U5uWelTeVxttS8AQ.roa (raw, json)
Hash identifier: xlohtMMoXyS8pjFAbPDyd//4/LEQGQWJs0sbFTmyqGQ=
Subject key identifier: 50:3C:A1:EE:B6:57:34:1D:54:E6:E5:9E:95:37:95:C6:DB:52:F0:04
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252292E02B0CBFD5CCEACF8AB78CEF60
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UDyh7rZXNB1U5uWelTeVxttS8AQ.roa
Signing time: Thu 02 Jan 2025 03:50:10 +0000
ROA not before: Thu 02 Jan 2025 03:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215956
IP address blocks: 2a0e:b107:1190::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:92:e0:2b:0c:bf:d5:cc:ea:cf:8a:b7:8c:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=503ca1eeb657341d54e6e59e953795c6db52f004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0e:c2:a7:ff:97:66:2c:e4:34:52:4e:8f:e3:
58:7f:5d:5a:6b:bc:b2:97:59:5b:bf:05:68:d5:3a:
52:44:be:7e:1b:23:d9:08:8b:4e:40:ab:ac:09:50:
f4:89:f3:89:6e:ed:8e:3b:00:49:47:8b:6f:df:51:
ed:01:8e:09:87:44:5e:c9:0c:96:89:13:7b:d4:8a:
30:f9:91:2c:36:ba:86:e7:4d:32:23:0c:b4:05:0f:
c9:69:c5:6e:2f:aa:80:dd:8f:f1:99:a0:d0:09:0c:
bb:ce:b7:11:87:0b:93:f9:67:8a:cb:91:3a:78:65:
53:fd:c9:77:ad:2f:c8:25:f8:62:2d:3c:3a:1b:98:
1f:63:c0:2a:4c:39:29:4b:3b:08:41:69:83:9b:f4:
bf:b8:f8:f0:67:81:03:51:87:48:43:f6:42:9e:71:
ec:92:17:92:65:1f:ba:2f:17:c4:98:aa:55:9d:30:
2d:a7:3a:c7:11:7e:a4:cd:56:02:3a:30:28:9b:a4:
31:be:fc:9e:b4:f0:49:d4:dc:95:e5:5d:8a:a4:2d:
d5:60:bd:15:ba:76:a2:b3:49:7a:a5:50:2e:2b:97:
54:fe:d5:f7:b0:b7:21:a7:80:34:db:e5:f0:e3:91:
e8:8a:58:3d:93:4c:2d:82:f4:bb:09:e7:35:12:e7:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3C:A1:EE:B6:57:34:1D:54:E6:E5:9E:95:37:95:C6:DB:52:F0:04
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UDyh7rZXNB1U5uWelTeVxttS8AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1190::/45
Signature Algorithm: sha256WithRSAEncryption
8a:e8:13:4d:e6:5f:bb:02:4d:74:c5:07:ed:d4:93:6a:b7:07:
67:26:01:35:17:73:94:c2:46:0e:d0:a8:8e:6b:21:05:c6:81:
23:65:17:51:61:c1:c2:a7:b3:5a:2d:d2:55:f4:da:b0:44:59:
9b:7f:d5:bb:76:47:ce:c6:53:44:72:8b:f8:e7:39:8a:0e:37:
41:c3:2d:a3:95:2e:d3:23:17:c9:38:dc:e6:0b:1f:d0:d3:7f:
59:1b:30:68:f7:7f:bd:d3:ee:1e:71:69:7c:d5:e7:3e:1a:30:
4a:cf:87:91:e0:41:c4:4e:91:ec:ef:85:07:4d:ae:03:0e:f7:
25:7c:b2:0c:5a:26:37:c3:d7:74:24:28:6d:f4:a8:88:c5:e6:
52:28:d0:5c:7e:2c:60:92:90:ba:a9:c3:bc:15:3b:21:09:4e:
ce:2d:e6:29:9b:98:8e:31:95:e0:72:16:0c:13:7e:3d:6a:4e:
98:f6:7e:eb:55:cb:e1:a4:39:8e:b4:04:0d:14:a9:59:e8:ab:
5e:d0:e2:af:39:df:a7:1e:1d:24:52:c9:0f:e5:e4:7c:10:af:
37:7f:38:b4:d3:9a:c4:2f:3c:2b:2a:0f:dd:a4:27:00:1a:e4:
31:3b:19:43:c5:ae:ac:b7:31:22:19:1b:8a:39:d3:3a:e8:4e:
31:c5:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:55:04 2025 by rpki-client