Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V1D024Wg9ueCQUDjodvZKOVMGGA.roa
File: V1D024Wg9ueCQUDjodvZKOVMGGA.roa (raw, json)
Hash identifier: ynaGK9UjxQd2D0OzWCY0g+4lrddYqmAFyBMKmbgH3T4=
Subject key identifier: 57:50:F4:DB:85:A0:F6:E7:82:41:40:E3:A1:DB:D9:28:E5:4C:18:60
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252225C2689A06652A2E6A60668B2529
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V1D024Wg9ueCQUDjodvZKOVMGGA.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207317
IP address blocks: 2a10:2f00:11a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:25:c2:68:9a:06:65:2a:2e:6a:60:66:8b:25:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5750f4db85a0f6e7824140e3a1dbd928e54c1860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:cf:b6:b5:80:f5:5d:2f:b9:45:bd:3b:64:
f8:c2:4b:cd:47:b4:55:c4:1c:a8:89:87:a3:f1:07:
67:95:7e:72:fe:6d:02:5d:32:02:f5:f5:c5:d4:c0:
f5:d1:41:58:0e:d1:d3:40:17:7b:e8:8e:0a:b0:47:
6d:a0:0e:ac:dc:9e:22:e0:f4:ce:b0:f9:af:7a:c8:
da:3f:c8:c9:4e:d8:8f:15:c4:e6:be:0d:40:59:e7:
4c:12:31:b6:a4:c8:8b:b7:43:4c:2a:ce:18:de:ff:
64:fc:e3:de:6d:38:a1:22:8e:fb:c3:eb:b2:fe:f1:
25:ab:15:35:a7:28:57:97:c8:d9:5e:4b:41:4e:a5:
1c:51:47:60:d2:d9:e7:ff:de:ea:39:10:75:cf:ed:
60:df:3e:c1:ae:26:f7:7a:a7:c2:fc:81:45:9f:ec:
19:d7:b3:47:64:6c:2a:06:a6:4b:13:08:e1:09:ce:
84:6a:f9:4d:82:22:a3:d8:57:1f:f1:ce:33:58:68:
2f:f8:1c:50:e9:21:75:f7:c5:b9:7f:32:ec:2c:d0:
ea:28:1b:97:af:e3:fc:a3:2b:37:28:f6:07:b7:d8:
b5:72:35:06:02:56:71:69:e2:74:ac:d2:9d:05:98:
35:0f:b6:1b:a9:bc:da:33:33:8b:fb:49:5d:a4:12:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:F4:DB:85:A0:F6:E7:82:41:40:E3:A1:DB:D9:28:E5:4C:18:60
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V1D024Wg9ueCQUDjodvZKOVMGGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:11a::/48
Signature Algorithm: sha256WithRSAEncryption
04:cb:ac:8a:05:d6:24:c7:c4:74:d7:eb:22:16:df:4d:aa:86:
42:91:b3:4b:f6:cf:4b:6a:ac:6e:a9:8f:8b:4c:d6:50:82:9c:
3b:b6:6c:35:e5:7c:23:fb:bf:95:80:00:59:e4:42:40:42:7b:
a0:17:8e:3d:e2:72:77:f4:0b:e2:a2:e0:8d:08:ef:97:de:78:
8b:8d:ff:bf:bf:b8:14:e5:0c:90:0e:69:cc:12:64:99:1f:18:
d2:3a:ef:a8:1b:96:1c:5a:d8:2d:21:28:1b:df:e6:e4:63:85:
24:9c:b1:77:09:32:dc:5b:68:bc:02:75:84:d3:c7:5d:60:1f:
bb:3a:65:d9:83:49:9f:1d:1f:1e:de:de:a4:a1:8e:6e:75:13:
50:72:0a:b2:ea:7b:53:47:79:e5:2f:bf:f6:1f:2a:7e:b0:07:
49:1b:3e:e5:a7:88:87:70:0c:65:8a:7e:fc:4c:3a:d5:ce:f4:
4e:00:5d:1f:da:0d:45:c9:67:91:6b:2f:84:1a:8b:19:c7:fe:
72:b7:09:11:df:59:8b:9f:8d:22:1c:3c:19:a7:16:42:6d:f4:
8c:cd:61:e0:34:00:3d:65:4d:fe:88:9a:7b:e5:0c:4d:fd:87:
5e:a5:4d:2c:d6:75:cf:45:b5:0a:ac:19:ee:fd:42:27:b7:c1:
7c:ad:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:58:04 2025 by rpki-client