Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aMkjANgT1VWR2wTe8u-XsjsC6_c.roa
File: aMkjANgT1VWR2wTe8u-XsjsC6_c.roa (raw, json)
Hash identifier: 8WPehxeM06GaPLYEodrUERj0DW6agu7HZ/Funn6QZno=
Subject key identifier: 68:C9:23:00:D8:13:D5:55:91:DB:04:DE:F2:EF:97:B2:3B:02:EB:F7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252299E1D7347EE1E02577B6642CB902
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aMkjANgT1VWR2wTe8u-XsjsC6_c.roa
Signing time: Thu 02 Jan 2025 03:50:12 +0000
ROA not before: Thu 02 Jan 2025 03:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 2a0e:b107:7f7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:99:e1:d7:34:7e:e1:e0:25:77:b6:64:2c:b9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c92300d813d55591db04def2ef97b23b02ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:cd:09:92:22:ca:71:e3:b9:f0:0d:bd:3e:
a3:fc:d0:65:db:ad:f3:32:53:9c:5b:d2:3b:95:56:
30:5c:87:74:db:87:7b:bd:4b:1e:4e:b2:64:3a:f7:
14:60:5d:1c:e3:80:52:d8:21:7a:54:2f:07:fb:fb:
99:93:ea:a8:26:b6:6c:ff:a0:1a:36:b3:95:bc:b4:
38:b9:64:66:b4:ca:87:04:d7:14:16:73:55:ef:2a:
4e:d5:c8:68:cd:2b:18:dd:59:6e:d8:9e:63:d9:d4:
74:58:20:41:ab:9e:a7:9a:cf:a4:d0:58:c4:bd:2b:
93:30:07:ef:cf:9d:57:16:39:74:72:07:fd:62:0d:
af:fd:e9:0d:7f:b6:05:cf:97:33:e6:3d:2c:6d:77:
19:bb:b0:b7:2c:14:9d:41:d6:df:3f:5b:0f:73:55:
f5:c3:c9:76:82:ab:eb:9e:d3:da:9c:25:d3:62:e6:
b0:d6:c3:32:fb:4c:bb:2a:af:61:d2:b8:f1:96:63:
65:90:5d:6c:a2:af:a8:80:bf:08:d1:64:f0:a3:81:
3e:41:f9:96:06:94:af:ee:58:67:4f:cf:e7:3e:05:
d1:8f:97:24:84:8c:f6:d2:01:79:3b:2f:b8:55:d7:
db:03:c3:ca:03:a0:0f:31:b8:8b:6d:93:8e:99:68:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C9:23:00:D8:13:D5:55:91:DB:04:DE:F2:EF:97:B2:3B:02:EB:F7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aMkjANgT1VWR2wTe8u-XsjsC6_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:7f7::/48
Signature Algorithm: sha256WithRSAEncryption
02:96:68:93:5d:c4:ab:4e:1f:14:a7:19:d3:92:e3:96:fa:50:
5b:00:85:7a:76:92:5d:8a:1a:65:87:64:65:f0:c3:91:ec:be:
bf:1f:14:61:62:6e:0f:91:45:45:e7:91:6f:d9:a3:14:80:35:
2b:8c:86:9e:45:55:18:c2:94:c6:8c:f6:55:8c:04:7f:c5:27:
09:e1:13:af:18:2c:c3:55:1d:54:b0:09:93:e0:06:3f:e2:72:
13:8d:43:3c:c9:62:d8:a4:4d:14:30:84:7e:bc:49:7d:ba:6b:
c6:cd:97:31:f4:c5:db:4b:d1:4e:fd:3d:2d:1b:a9:72:78:2e:
c1:6b:58:74:d8:04:28:d2:3f:6e:58:74:da:a1:f2:cf:41:e1:
95:b9:61:37:25:5c:1f:ed:f1:46:a6:5d:d8:73:21:d6:2c:2f:
c1:98:5f:5b:1b:c8:54:d2:80:2b:08:9a:ab:49:c2:d3:67:90:
75:ba:e2:07:ba:93:6c:dc:44:96:b3:84:b4:61:42:36:95:91:
fe:2e:1d:7e:cf:1a:5a:e0:16:22:57:b5:bd:51:51:d7:2a:a2:
f0:72:ca:e6:29:f0:78:6e:02:bf:4a:c4:ee:2a:de:dd:e7:c2:
11:b7:04:31:a2:a5:4b:ed:f4:a2:61:37:39:b2:d1:d0:f4:45:
45:66:10:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:30 2025 by rpki-client