Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VuBHtP8eUIR7YoAFzDmtOSiL390.roa
File: VuBHtP8eUIR7YoAFzDmtOSiL390.roa (raw, json)
Hash identifier: WJLlsA0bVAP65GbF7RWXhXFr6cBLOM1A6SDh1NqSlr4=
Subject key identifier: 56:E0:47:B4:FF:1E:50:84:7B:62:80:05:CC:39:AD:39:28:8B:DF:DD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D5D76522E937611C4E935317A420
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VuBHtP8eUIR7YoAFzDmtOSiL390.roa
Signing time: Thu 02 Jan 2025 03:49:21 +0000
ROA not before: Thu 02 Jan 2025 03:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49459
IP address blocks: 2a10:2f00:173::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d5:d7:65:22:e9:37:61:1c:4e:93:53:17:a4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56e047b4ff1e50847b628005cc39ad39288bdfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:f1:fa:ab:8a:0d:e9:86:cb:2b:7a:09:cc:
39:1f:bb:84:74:96:65:63:b2:f7:8e:a6:51:9b:a5:
42:d7:61:6c:fe:fc:5a:56:69:1b:ed:46:69:e5:17:
e9:0f:92:e2:01:56:e7:52:9a:30:ab:fd:76:9c:3f:
d6:9e:dc:d4:b7:84:6a:65:c2:89:d6:af:ac:2e:ea:
4e:c1:11:4e:3e:bc:13:9e:43:7f:3c:c5:a3:be:50:
da:73:12:ef:0b:09:88:63:ca:ef:7b:8d:1e:2c:00:
3b:cc:de:a4:b7:8d:75:80:46:bd:5b:3b:68:25:e9:
95:03:10:97:42:75:c9:5d:97:bf:03:22:d8:d4:34:
41:59:0a:5f:a2:8f:bc:4e:d5:16:af:f4:66:6b:3a:
2f:3d:45:6a:9d:1f:ef:88:3b:6d:72:f4:70:56:8e:
9e:2b:c3:43:70:e4:65:52:a8:d8:d6:4b:d2:01:c4:
e5:49:73:d9:cc:c1:6e:1d:5c:e9:b5:68:d0:7e:d4:
3e:0a:cc:81:7a:5c:42:24:58:f0:d3:73:c9:7b:04:
c1:74:88:d3:e0:2c:06:df:9b:59:73:0a:25:fe:4c:
ee:3b:a1:c0:f0:c0:b0:7a:89:8f:17:8c:c8:80:5a:
e1:8d:e7:4d:5d:c7:c1:5d:ae:49:4a:5c:ef:5a:c7:
ce:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E0:47:B4:FF:1E:50:84:7B:62:80:05:CC:39:AD:39:28:8B:DF:DD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VuBHtP8eUIR7YoAFzDmtOSiL390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:173::/48
Signature Algorithm: sha256WithRSAEncryption
50:5b:b6:4e:ca:33:5d:8d:e9:86:ac:6f:84:dd:3c:bf:af:32:
c9:cd:09:b8:db:da:79:21:ed:f9:bf:a2:0d:0e:c1:d0:0a:94:
1f:98:f4:dc:09:11:59:2e:58:72:86:95:59:3e:a5:8c:36:d0:
e9:0e:21:da:b8:60:e9:9e:f9:89:41:f1:ef:c8:6c:94:68:6e:
00:ca:8a:5b:45:4b:d4:2d:04:d8:65:f2:f3:67:9d:a0:66:5d:
22:99:3c:70:98:8e:7f:5b:b6:84:e8:e2:26:8b:f3:2c:d9:0e:
f7:58:04:77:3c:32:71:e7:b0:f9:1f:73:9a:95:b8:2b:92:dd:
6e:d8:bc:85:da:22:82:8b:39:d1:06:cd:c9:4c:5b:77:1d:87:
7a:ff:04:eb:03:e7:40:18:41:38:a9:bb:c1:db:15:57:8e:92:
d7:6a:6b:3d:8b:f1:b6:c5:a2:85:fe:3b:e3:92:0b:89:39:f2:
3f:10:e8:00:84:29:6c:61:43:5c:10:aa:80:1f:ea:0b:8c:7c:
77:4e:02:ff:9d:de:9c:48:f1:11:06:ef:4a:b0:ef:a9:0c:83:
a4:35:0f:cc:22:19:9b:f6:90:41:40:83:84:63:4c:2d:95:43:
7d:d8:51:88:e2:35:f1:5a:7f:74:ec:c0:04:18:34:b7:fe:99:
d6:99:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:52:16 2025 by rpki-client