Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zf6g8TiPrN2lxF39SNvuT2yV8r8.roa
File: Zf6g8TiPrN2lxF39SNvuT2yV8r8.roa (raw, json)
Hash identifier: Y+16Y0fyQ64PtQPQhAxzxFmBc5mJ+0huYlxa5wKaaxs=
Subject key identifier: 65:FE:A0:F1:38:8F:AC:DD:A5:C4:5D:FD:48:DB:EE:4F:6C:95:F2:BF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425221C1A7732ABDDC3683A2767674DAA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zf6g8TiPrN2lxF39SNvuT2yV8r8.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204778
IP address blocks: 2a0e:97c0:b33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1c:1a:77:32:ab:dd:c3:68:3a:27:67:67:4d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65fea0f1388facdda5c45dfd48dbee4f6c95f2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:a6:57:e5:a8:3c:0c:7e:1a:9a:20:41:00:
38:b3:c1:d0:cd:66:1b:97:cf:cf:c6:84:32:0b:2c:
00:e9:17:bf:7a:db:49:95:ac:c9:96:57:32:c4:93:
28:1a:28:46:1f:3e:29:22:6a:c5:ba:b2:a8:99:ca:
be:01:30:d3:c0:b7:7d:75:38:4f:1e:a6:82:eb:ff:
ce:9d:39:90:2d:c6:e6:9b:aa:2f:98:78:32:0b:f6:
81:29:ad:8f:d5:21:43:8b:1b:9f:d3:f3:1e:4b:91:
ad:65:cf:8a:bd:c0:86:4b:84:fb:ab:05:af:26:5d:
18:71:96:92:8d:a7:ef:7b:21:86:da:45:9f:c2:99:
56:d8:fd:72:8c:ad:61:45:0b:e1:5d:e9:36:5b:e8:
24:0d:f5:d0:e9:dd:b5:d8:95:24:3f:a1:13:56:fb:
56:b3:5f:53:58:05:e2:4a:f6:2b:5f:e6:0c:24:3d:
05:1b:0b:1f:d0:00:e4:71:03:1c:eb:5b:bb:c5:2b:
6b:76:0d:12:b0:c1:fe:e0:38:ee:07:33:20:61:4a:
c5:7c:50:a4:0f:44:a7:46:21:3e:0a:8b:b0:3f:25:
88:92:64:16:96:df:50:b6:74:b4:36:7c:f8:c0:6f:
71:dc:b5:7a:55:d0:04:d6:71:28:44:35:86:c6:05:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FE:A0:F1:38:8F:AC:DD:A5:C4:5D:FD:48:DB:EE:4F:6C:95:F2:BF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zf6g8TiPrN2lxF39SNvuT2yV8r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b33::/48
Signature Algorithm: sha256WithRSAEncryption
23:23:88:33:5c:26:7e:13:7c:fb:98:67:9a:5d:02:d0:ce:20:
7e:d1:82:90:cb:4e:ad:b7:e7:2b:74:89:e0:52:da:a0:32:8c:
f1:e5:41:ce:8c:eb:b7:fd:77:23:d1:b8:5e:59:e5:19:1c:03:
6c:a9:7f:e6:7c:14:0b:59:0f:ec:b4:03:60:b2:a9:b2:92:22:
cb:43:a9:29:4e:18:c0:eb:1e:07:44:e1:14:7d:e3:17:3f:ba:
af:a4:a3:13:92:c4:49:be:25:2a:34:3c:40:a5:74:f5:10:bc:
44:d1:0a:a6:54:37:8a:d1:cc:3b:15:61:a1:11:57:2d:b1:18:
98:e2:68:9c:02:cc:b2:b6:86:f7:b4:6d:62:f0:b9:16:95:c3:
c7:4d:4b:a1:0d:b0:de:d9:fa:36:f6:53:85:1c:50:52:7e:cf:
f3:58:65:08:5a:c7:53:c4:53:bc:7d:2a:6d:10:3b:23:4a:95:
24:c5:f7:9b:3c:7e:8d:b5:09:ef:4f:9a:cf:24:15:19:5c:ab:
64:3a:2e:6e:00:a6:53:32:7e:33:5b:39:96:6d:e3:b9:0a:f0:
91:d3:82:3e:ac:81:97:59:11:5a:84:72:c6:bc:ba:3a:08:4d:
69:f8:aa:aa:23:b5:ad:ed:8d:aa:32:b9:65:08:e3:43:e3:ce:
50:87:ca:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:45:32 2025 by rpki-client