Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bSxrMgqySWAyOs1keyVXC-PiCw4.roa
File: bSxrMgqySWAyOs1keyVXC-PiCw4.roa (raw, json)
Hash identifier: Vc0NDirfQuUnU7PzC4/AZxoJwMYIqcxa2dUQlevsaTI=
Subject key identifier: 6D:2C:6B:32:0A:B2:49:60:32:3A:CD:64:7B:25:57:0B:E3:E2:0B:0E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252236363ECC9C8C0334C201F922DA7D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bSxrMgqySWAyOs1keyVXC-PiCw4.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209300
IP address blocks: 2a0e:b107:740::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:36:36:3e:cc:9c:8c:03:34:c2:01:f9:22:da:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d2c6b320ab24960323acd647b25570be3e20b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:b5:04:80:da:15:dc:ce:fc:fc:1b:81:21:
3a:93:8a:8f:12:52:ca:f7:3e:03:8e:e2:e0:e9:f7:
fa:b0:11:11:3c:03:97:42:b0:9a:23:df:e5:a1:c1:
e7:b8:7f:31:fd:b9:93:d9:31:43:14:4b:cb:ab:07:
65:d1:5b:93:73:51:af:ab:c7:24:34:59:18:e7:3e:
a7:5c:80:87:43:96:82:a2:c4:ef:23:de:67:ff:48:
36:a0:59:80:eb:ff:2a:56:20:e6:16:b6:ec:45:f4:
4a:f6:54:a4:32:fd:f7:32:9a:84:86:13:ac:1c:12:
10:67:35:71:d2:54:1e:c2:ec:b3:ef:16:62:d8:b1:
24:5e:71:dc:c2:7b:77:c8:55:0c:83:cc:01:00:0d:
00:19:0e:34:45:6b:50:38:8a:ee:4a:fb:c6:90:78:
27:0f:d5:31:d3:22:85:5e:4b:ea:81:1a:cd:1c:b6:
08:f2:dc:4c:a3:59:16:8a:3b:87:58:50:0a:66:c7:
0b:27:0e:cd:97:7d:5e:a0:c3:09:2d:05:12:0c:18:
d3:6f:eb:4c:27:7c:2f:c1:1c:a7:03:3c:39:ac:cd:
37:3e:7d:ef:c6:95:a3:56:29:08:f3:69:f6:c0:ab:
40:10:08:c5:79:00:ff:3d:1c:fe:d3:92:c6:07:a0:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2C:6B:32:0A:B2:49:60:32:3A:CD:64:7B:25:57:0B:E3:E2:0B:0E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bSxrMgqySWAyOs1keyVXC-PiCw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:740::/44
Signature Algorithm: sha256WithRSAEncryption
a0:8e:69:6a:bf:d0:2e:e2:cc:b2:2c:ff:65:92:6d:c7:38:74:
23:dd:a9:7d:46:13:69:83:ee:4f:f5:fb:0e:24:26:55:ca:3c:
b1:19:23:1f:7e:0d:ee:8b:b6:33:1b:84:04:4d:6a:00:ab:48:
67:2b:99:92:d7:7b:68:3c:b1:52:94:3d:b0:ca:e6:f7:af:04:
55:03:53:66:0e:87:54:62:30:dd:a4:14:aa:6c:62:d0:e6:c4:
7a:3e:c5:f0:0f:76:2d:a8:49:d4:ec:b1:84:8c:6b:ea:14:50:
60:4e:d3:73:ed:27:12:a8:a6:e5:44:4f:5b:bf:c4:d6:a3:5a:
8d:33:19:e0:0a:04:27:1f:88:61:3e:79:14:9c:28:e3:37:07:
64:50:bb:d7:cb:54:5b:b9:13:83:de:f9:ec:72:e6:45:0c:98:
a5:73:66:5e:08:20:b2:ce:53:ae:89:30:04:61:ea:41:56:fa:
2a:c2:d0:ec:0f:84:fb:29:2e:e9:9c:04:76:3d:6a:51:dc:47:
07:92:7f:3e:b9:5d:1e:54:62:a3:c4:2d:d6:c1:5e:69:6b:13:
3c:fe:58:9b:da:e0:5a:95:3d:8f:d9:e8:1d:de:67:5c:17:60:
7b:d4:f0:93:74:ac:02:ea:83:16:ed:3c:3c:cc:2c:21:c1:3b:
33:9a:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:23:48 2025 by rpki-client