Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bP5388TNEEF-XpLa8C-4g5RzQ5c.roa
File: bP5388TNEEF-XpLa8C-4g5RzQ5c.roa (raw, json)
Hash identifier: RmzFA9jYOHgvBvcyPl9IqTlXBHARIfD+asBQP7g4B/M=
Subject key identifier: 6C:FE:77:F3:C4:CD:10:41:7E:5E:92:DA:F0:2F:B8:83:94:73:43:97
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521E8FE745F678651B312CFFE882435
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bP5388TNEEF-XpLa8C-4g5RzQ5c.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142282
IP address blocks: 2a0e:b107:120f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e8:fe:74:5f:67:86:51:b3:12:cf:fe:88:24:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cfe77f3c4cd10417e5e92daf02fb88394734397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:bb:fa:9b:27:50:3c:b5:35:4d:3f:f1:24:
ae:a9:f4:c1:a4:38:3e:46:84:e5:3f:54:ab:44:95:
e1:3b:c9:6d:14:84:da:f6:e5:39:6c:28:82:60:2b:
28:fc:98:b1:b5:f5:5a:11:d2:0c:9a:f3:93:f8:1e:
18:e5:4a:43:a8:e3:02:4b:29:bb:66:03:7e:be:50:
01:20:81:6a:5f:1d:db:2b:84:8a:a7:41:da:da:52:
9c:89:e3:e2:40:2f:28:20:f4:c6:34:97:a1:65:ae:
d2:70:08:89:6c:0b:92:98:22:8f:86:8e:a4:d7:dd:
84:25:ca:a4:8d:7c:36:ce:ff:ec:c2:6b:24:f0:51:
c2:3a:94:a0:ce:1e:6e:3f:e8:7f:4f:17:39:96:fd:
9a:a8:fe:98:d9:34:5a:95:15:c2:b5:1b:bd:0d:ea:
08:a3:34:9f:83:fe:49:55:80:a8:93:ce:cf:e3:80:
71:8b:22:1e:0a:32:fc:e4:eb:16:b4:a7:92:0a:03:
0e:8c:e7:b7:f9:3e:68:ca:62:fa:7d:3f:7f:17:12:
d4:a2:06:fa:4c:ef:d0:42:0d:70:16:90:da:24:0c:
df:32:fa:1f:01:90:31:6d:a1:58:d9:a8:ed:96:7a:
f2:53:e5:89:73:28:d3:db:20:72:09:33:a1:20:5f:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FE:77:F3:C4:CD:10:41:7E:5E:92:DA:F0:2F:B8:83:94:73:43:97
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bP5388TNEEF-XpLa8C-4g5RzQ5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:120f::/48
Signature Algorithm: sha256WithRSAEncryption
a7:d2:b2:64:06:e2:18:11:8a:d9:86:29:e4:8d:c3:83:8b:0e:
9f:a9:37:77:1a:be:20:75:7d:36:a4:e0:c7:05:6e:9d:91:49:
b6:73:75:ba:06:a4:3d:f2:98:c3:63:85:92:5e:76:30:7e:57:
87:04:b2:ff:61:e1:0f:5e:d6:9c:4d:a2:11:5b:0f:e7:ac:23:
eb:c3:58:7e:29:2a:0b:1b:87:79:a7:81:db:f9:67:e9:ee:eb:
ca:d0:6c:2e:21:48:c6:8d:21:9c:98:69:7a:6f:87:46:0a:e3:
cf:e4:0a:8e:50:b1:8a:fe:85:a8:47:28:60:4d:7e:e5:b5:f8:
cd:79:86:a4:81:f2:d6:ad:19:5b:89:23:5a:51:76:7e:87:d5:
d7:67:77:c9:28:ce:86:be:f6:08:e9:04:70:ea:31:0e:b5:89:
e8:7c:cd:1f:ca:6e:05:6d:44:d8:aa:48:b6:f8:f3:1e:07:26:
ac:42:ea:5b:e5:60:2d:26:2a:10:c4:27:9e:df:87:47:3d:f8:
34:c3:ee:09:5c:fd:00:1c:07:f1:6d:bd:02:8c:87:0a:8d:03:
48:43:61:5b:9d:b2:28:0e:ef:18:9d:20:ad:33:05:c4:42:24:
e3:ea:d1:4b:bb:6d:99:37:1b:12:8e:40:73:78:ee:2c:9c:14:
45:95:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:31:38 2025 by rpki-client