Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c9H--1d1TmIx9e33mNDziICIYHA.roa
File: c9H--1d1TmIx9e33mNDziICIYHA.roa (raw, json)
Hash identifier: abnhhEfBGzn+qTV0CXuJnuw/h+4Hc2QNXhyCuZYT5Fw=
Subject key identifier: 73:D1:FE:FB:57:75:4E:62:31:F5:ED:F7:98:D0:F3:88:80:88:60:70
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522751C391B55A3D4798782F828CF9D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c9H--1d1TmIx9e33mNDziICIYHA.roa
Signing time: Thu 02 Jan 2025 03:50:02 +0000
ROA not before: Thu 02 Jan 2025 03:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213901
IP address blocks: 2a0e:97c0:430::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:75:1c:39:1b:55:a3:d4:79:87:82:f8:28:cf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73d1fefb57754e6231f5edf798d0f38880886070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:e1:5e:10:8e:4c:8e:53:54:fb:84:18:91:
bc:87:be:e3:50:46:ba:6a:1f:1e:62:d5:4d:d0:59:
20:30:c6:75:ab:47:92:e7:fc:9f:62:dc:e2:d9:0f:
a7:2c:06:b5:4c:d9:f4:aa:04:6b:d3:38:78:5e:02:
c8:b3:fe:e3:58:bd:74:54:aa:93:ed:a4:8c:94:27:
a1:9d:78:1c:69:07:ba:29:93:31:a5:50:bc:6e:68:
34:07:68:bc:0b:0b:55:f5:d2:30:aa:f3:af:88:0f:
cb:66:82:33:08:db:b3:70:36:88:69:5d:9c:50:d3:
85:da:21:c0:23:b0:8c:ff:36:18:e0:79:70:63:8b:
77:1f:8a:ee:e0:08:50:bc:5d:fd:fd:cc:64:b7:b9:
f6:93:56:1c:aa:b9:1c:ce:5d:29:3a:46:3d:60:23:
c0:bb:5d:0b:0b:65:36:64:47:3c:e9:da:2c:97:95:
97:8f:cd:45:ff:0d:4a:3f:c9:e6:22:72:15:8b:1c:
26:78:69:de:90:b5:59:ab:95:98:ea:b0:8d:f6:43:
4d:52:54:24:e1:92:b0:aa:bb:bc:5e:b3:cc:42:a5:
54:ad:cd:0f:9c:39:e0:f1:5b:79:de:8c:54:21:26:
45:c3:56:af:4f:0a:ea:fd:3d:80:ce:94:7b:9a:02:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D1:FE:FB:57:75:4E:62:31:F5:ED:F7:98:D0:F3:88:80:88:60:70
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c9H--1d1TmIx9e33mNDziICIYHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:430::/44
Signature Algorithm: sha256WithRSAEncryption
16:0a:7d:07:d8:b5:e9:b0:50:cf:1e:ea:90:6a:c3:a7:e8:e3:
52:48:a6:10:ed:18:7d:6d:cf:40:3c:59:2e:6f:d9:d4:ed:b4:
b2:2b:40:57:23:f0:cb:5f:8c:1e:2a:a5:0d:c1:27:00:97:82:
17:4c:82:71:86:61:b7:06:1f:ad:62:e4:cd:f8:c9:3d:10:99:
4c:e7:8f:85:70:5a:85:e6:a4:0d:d5:af:5a:de:da:10:d2:34:
7e:ad:e0:94:4d:31:4f:47:83:0c:e0:ae:d4:e2:09:73:2e:50:
54:27:aa:28:23:50:fe:e5:60:a5:42:93:5f:44:cb:1c:0f:4c:
c7:2c:70:8e:f2:c1:54:05:b5:0b:9c:d9:13:7c:af:f1:ce:b0:
4a:07:23:62:8e:c6:ce:c2:84:3e:a2:84:6f:f3:fe:d0:28:aa:
ea:ba:78:48:04:33:73:05:41:29:a9:47:53:97:51:e6:04:31:
01:21:0c:53:b7:56:f9:82:ad:b8:3c:45:a8:27:51:9d:9c:d8:
8c:23:87:ff:47:8b:65:bd:1d:e7:ac:ef:3e:fa:31:25:58:26:
74:3c:cf:bd:9e:c5:13:bf:0a:40:2e:9c:a1:0a:fa:4c:18:cc:
83:a7:d7:cc:a5:62:c0:b1:9e:4b:cc:d9:7d:9f:7e:dc:02:ca:
9a:25:1f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:51 2025 by rpki-client