Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X0EujaCHiXpdGuzFR9ZpIEUXeyo.roa
File: X0EujaCHiXpdGuzFR9ZpIEUXeyo.roa (raw, json)
Hash identifier: ZvgXLC/gR65L4wwtWdAxQD/TcSPc/abBeGt+hZ/4Kxw=
Subject key identifier: 5F:41:2E:8D:A0:87:89:7A:5D:1A:EC:C5:47:D6:69:20:45:17:7B:2A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252229152E3C8C11D470BAC95B0F6B16
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X0EujaCHiXpdGuzFR9ZpIEUXeyo.roa
Signing time: Thu 02 Jan 2025 03:49:43 +0000
ROA not before: Thu 02 Jan 2025 03:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207705
IP address blocks: 2a0e:b107:1950::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:29:15:2e:3c:8c:11:d4:70:ba:c9:5b:0f:6b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f412e8da087897a5d1aecc547d6692045177b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:a7:9e:56:a0:8f:26:a7:d0:d9:b2:49:fa:
76:58:d8:c0:73:4b:bd:9b:77:9f:dd:ba:d1:0d:47:
a7:71:28:13:48:95:ba:bf:40:e7:28:6d:2b:2b:7b:
82:a9:11:ed:2d:66:b6:a3:38:e0:ac:24:1b:05:82:
d6:f3:1b:40:0e:5d:23:80:7d:96:bc:f7:30:6e:c1:
35:19:b8:41:17:fa:ca:12:96:e5:fc:93:bb:0d:04:
91:cb:9e:92:4f:f3:46:98:95:5f:5d:2b:13:12:c9:
e2:e4:cb:5a:f3:23:28:ac:38:21:3d:e6:ef:b7:20:
82:61:0b:ca:27:46:47:5e:82:d5:65:e9:bb:ea:f5:
48:75:47:8c:76:5e:6a:3c:e1:f8:24:ab:6b:ea:73:
70:d0:6f:dc:73:f8:49:07:5c:83:65:0e:4d:09:27:
62:0f:99:3b:96:93:7f:78:e5:3e:15:d5:a6:b8:a1:
db:3f:48:02:cf:7f:03:ba:ff:20:c9:5c:46:7e:7b:
43:ba:2e:ff:7f:bd:bf:4f:5d:b4:b7:9b:40:ad:bb:
b5:6a:90:eb:65:56:b9:d3:da:e8:a0:84:f8:b1:7d:
bf:1c:57:81:3c:1e:0d:dc:11:d1:18:e3:2b:66:5b:
17:2a:e4:1f:94:3e:83:99:bf:d5:c5:fa:cf:de:fa:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:2E:8D:A0:87:89:7A:5D:1A:EC:C5:47:D6:69:20:45:17:7B:2A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X0EujaCHiXpdGuzFR9ZpIEUXeyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1950::/44
Signature Algorithm: sha256WithRSAEncryption
43:4c:27:37:02:47:70:ae:6f:19:c7:7c:62:1c:f1:ee:83:ad:
60:66:43:5e:8a:e1:6f:e5:ba:cf:a0:e2:45:b0:12:6b:d5:51:
22:d1:f8:c9:13:5f:d9:9b:59:d3:5f:95:99:b8:51:22:8d:ff:
55:32:2b:bc:4f:4e:5a:32:ce:61:18:58:83:3a:b8:fe:21:2b:
7e:e2:ef:f6:a5:c3:21:d4:ee:38:9c:7c:34:a3:87:33:f0:37:
01:ed:d3:4c:56:d3:cb:aa:3b:d0:5d:7a:7b:bb:63:d8:38:ce:
0e:f2:b4:b1:30:aa:72:46:f8:24:2f:09:71:b6:76:5a:e0:c9:
8b:a8:5b:d3:69:2d:b4:31:5b:eb:46:32:8d:a0:ac:54:ed:0d:
12:ac:3c:45:7d:86:39:7c:76:a6:b4:85:06:6e:3d:0e:63:a1:
fc:ef:da:d7:39:65:17:b5:a4:65:40:7b:9f:f3:07:34:0c:08:
ba:0e:c5:0b:4b:4b:62:d5:5f:72:41:02:92:d6:d4:c4:2d:cf:
86:40:6c:99:ab:04:d2:55:f0:fd:20:b3:bb:66:ff:aa:e3:71:
be:a9:97:70:e1:be:c2:9e:3e:ef:ac:c7:0e:c4:81:5e:4a:d8:
f6:f7:a7:5c:3e:60:37:bc:1f:af:7d:1b:7a:50:96:58:ce:f0:
80:d1:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:42:54 2025 by rpki-client