Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cmTCVIniBG_ab8ETEsmhXoVqAsE.roa
File: cmTCVIniBG_ab8ETEsmhXoVqAsE.roa (raw, json)
Hash identifier: jpOWrzu3jma0sel/cI3gCBclTubo+sEGpn+B6Tumi4s=
Subject key identifier: 72:64:C2:54:89:E2:04:6F:DA:6F:C1:13:12:C9:A1:5E:85:6A:02:C1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01952AB9A0B161924C0BAC7F450A29EB68B2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cmTCVIniBG_ab8ETEsmhXoVqAsE.roa
Signing time: Fri 21 Feb 2025 22:56:03 +0000
ROA not before: Fri 21 Feb 2025 22:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13852
IP address blocks: 2a06:de03:369d::/48 maxlen: 48
2a06:de03:369e::/48 maxlen: 48
2a06:de03:369f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2a:b9:a0:b1:61:92:4c:0b:ac:7f:45:0a:29:eb:68:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 21 22:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7264c25489e2046fda6fc11312c9a15e856a02c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:84:8e:b5:1c:1c:e2:6a:58:17:48:0f:33:
5e:f8:59:58:33:fd:ff:16:00:33:a6:3d:37:56:ce:
0e:d7:04:1a:c8:48:2e:72:52:0e:5a:92:c9:9f:d0:
af:ce:6d:3a:0b:b7:5f:7a:64:63:54:c8:f4:be:0e:
98:06:83:e4:4f:f5:26:5c:4d:a2:10:1e:e2:f9:24:
42:90:af:d1:3b:db:33:9e:73:7b:69:63:0b:52:1a:
12:33:80:a9:6c:ae:cd:63:c2:14:fb:5e:55:8b:44:
c7:4b:87:4e:01:30:64:98:d8:15:a1:3e:ab:21:cc:
f8:b4:21:fd:68:87:f0:2d:af:67:4f:9a:e5:b8:18:
c2:1d:4d:81:bf:bd:95:65:47:c9:06:a5:7c:ac:3a:
09:55:ec:29:23:62:0f:c0:3e:cb:1b:5c:8b:37:fe:
8a:8e:ed:d7:2b:7e:b2:d8:85:ec:24:b5:a4:af:dd:
ff:b9:98:8c:70:54:31:9e:c8:fb:0b:58:3a:d1:08:
91:41:71:22:1f:f1:b9:9b:3a:68:34:0a:50:8f:ed:
6c:1e:fa:fc:dc:f4:aa:16:97:d9:8f:08:5d:bf:00:
4a:f6:18:6f:7d:a6:8a:51:29:68:eb:20:93:e0:26:
68:0c:c4:47:d5:a3:fb:66:ce:6f:23:72:8f:5d:47:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:64:C2:54:89:E2:04:6F:DA:6F:C1:13:12:C9:A1:5E:85:6A:02:C1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cmTCVIniBG_ab8ETEsmhXoVqAsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de03:369d::-2a06:de03:369f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:19:2e:10:a7:0e:6c:d2:55:c3:0d:d7:9e:27:44:49:31:c5:
c2:3e:ff:d8:b9:37:a2:9d:4b:ff:fd:8e:f7:94:fc:89:01:17:
83:9f:9f:09:51:fc:39:e7:07:1b:4c:ca:83:47:7e:20:82:2b:
4d:77:f9:65:75:f8:92:04:fb:25:0f:95:73:85:c0:37:13:1a:
94:9e:25:55:69:c2:53:ac:ed:81:d3:68:b6:4d:65:a4:76:d0:
94:52:26:1e:da:71:2c:10:be:9b:6d:ca:9d:c9:09:83:06:9b:
8b:96:07:8e:4e:7c:37:fb:db:9a:90:5f:cf:b7:a8:5b:92:02:
14:ee:75:6f:be:ae:17:4b:80:25:d4:ca:a5:25:73:7a:5d:30:
9d:c2:51:9c:e2:59:ac:73:88:6c:81:e3:6a:00:94:55:d8:63:
80:67:e4:91:3e:ea:40:71:61:8a:bd:ed:c8:98:e1:5b:40:a2:
ac:3f:cd:2e:da:31:19:47:ea:2e:d8:c2:d3:41:cd:5f:82:69:
4e:7a:96:a0:f0:a9:53:f0:64:8f:aa:24:e0:32:e7:cb:19:45:
34:96:df:53:5b:79:91:d4:05:ba:29:64:cd:df:38:2a:4f:98:
91:6f:5a:e4:b5:d5:db:df:df:ab:ee:5b:64:ce:7b:97:98:0c:
bd:1b:f4:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:24:32 2025 by rpki-client