Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bc9d5h5SxoSJA7OHaYcHZzke5b4.roa
File: bc9d5h5SxoSJA7OHaYcHZzke5b4.roa (raw, json)
Hash identifier: VAwB6b9rt9FFxmfYhS2mSA/qgvr3S7ecbObkOtfN6Es=
Subject key identifier: 6D:CF:5D:E6:1E:52:C6:84:89:03:B3:87:69:87:07:67:39:1E:E5:BE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252293F2D8590A143FA7F0D842DF4741
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bc9d5h5SxoSJA7OHaYcHZzke5b4.roa
Signing time: Thu 02 Jan 2025 03:50:10 +0000
ROA not before: Thu 02 Jan 2025 03:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216065
IP address blocks: 2a0e:b107:1198::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:93:f2:d8:59:0a:14:3f:a7:f0:d8:42:df:47:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dcf5de61e52c6848903b38769870767391ee5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:5c:fb:5a:d5:2e:8f:3e:29:c0:84:02:ed:
50:d8:3e:c4:84:b6:09:3c:83:e9:11:ef:66:02:4f:
4e:c3:73:db:e2:17:b0:88:59:e1:9e:14:d3:e4:70:
9e:ba:80:f5:d7:99:f1:82:21:8c:03:b4:55:8d:52:
e7:19:ce:ab:d7:7b:59:7b:65:60:0e:b5:ab:f2:fe:
8f:8a:fb:fa:2b:06:01:fc:40:e3:bf:d1:ad:e0:74:
cb:a2:ad:00:9f:96:c9:11:fe:4b:e8:a8:f8:18:18:
59:a5:b1:92:fa:18:53:2a:40:e1:56:5b:43:99:58:
41:d3:b4:5f:2f:d4:de:e1:a5:99:30:7b:51:88:98:
70:5a:85:9b:01:da:78:eb:89:1a:bb:c5:75:06:b3:
dc:de:5a:f4:3a:1f:f4:4e:a7:7f:4a:64:fc:84:d8:
73:47:ad:ed:8c:a7:f7:c9:76:36:58:94:09:71:ba:
47:75:33:7e:50:70:7a:78:1e:47:41:8e:76:fe:71:
6a:e1:a2:68:0b:22:36:ef:c9:55:01:af:db:ae:3f:
90:fe:fb:56:9d:d9:ee:27:c2:54:a5:d6:61:e9:42:
09:da:76:f8:a0:9c:f2:5e:3b:41:ad:35:a6:d3:1c:
da:9d:d3:1a:24:1e:8c:83:50:4b:f5:3c:2a:7f:df:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CF:5D:E6:1E:52:C6:84:89:03:B3:87:69:87:07:67:39:1E:E5:BE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bc9d5h5SxoSJA7OHaYcHZzke5b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1198::/45
Signature Algorithm: sha256WithRSAEncryption
ae:78:e9:70:4e:8d:c5:df:8e:51:01:e6:8d:8a:03:9e:d5:df:
e0:4c:39:b0:a1:b8:d0:ec:80:60:68:58:5d:ef:91:47:79:dd:
a2:e3:f1:06:f1:b9:e3:52:e9:d4:bb:e4:3d:6d:e2:e7:3c:7a:
b8:a0:0f:ed:3d:d1:bb:37:b3:d2:36:58:0c:56:a4:04:b6:fd:
69:02:b8:09:55:bf:16:2c:4f:26:7a:1c:d5:33:4a:c3:49:27:
8b:15:5b:e6:e4:10:e6:82:ea:7d:df:95:83:f1:09:b0:d9:4c:
a2:c7:4b:84:d0:31:1f:37:e2:a4:e7:e1:b5:53:0c:8a:92:5d:
0b:25:d6:1d:39:ef:21:b6:e1:f4:09:cf:62:45:dc:e4:3f:7e:
f1:ce:59:ea:a6:7e:6a:dd:96:82:c3:e3:47:94:c0:fd:11:19:
be:1d:bd:2f:06:d5:63:36:66:72:eb:22:d8:3c:88:de:f0:4f:
72:c8:2d:9e:f3:c6:d0:57:03:d9:bb:80:83:69:37:aa:25:ff:
49:52:c1:66:64:fd:b6:53:1b:b7:e3:95:8a:a6:fe:9c:4e:07:
17:3a:b4:59:45:54:24:3b:68:a1:8d:ab:63:76:a8:cf:81:0b:
54:0f:8d:07:8e:67:f0:3c:0d:9f:cd:47:a9:33:48:8e:ff:e4:
fe:d0:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:56 2025 by rpki-client