Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/css84RUGT5IEanZPN97tHysoL6E.roa
File: css84RUGT5IEanZPN97tHysoL6E.roa (raw, json)
Hash identifier: BaI2qLZANXpodeSZDrmShn2aDMDTDrHSmqsfdzXHiio=
Subject key identifier: 72:CB:3C:E1:15:06:4F:92:04:6A:76:4F:37:DE:ED:1F:2B:28:2F:A1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223CA853919E51244F4006540D30D2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/css84RUGT5IEanZPN97tHysoL6E.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210076
IP address blocks: 2a0e:97c0:6b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3c:a8:53:91:9e:51:24:4f:40:06:54:0d:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72cb3ce115064f92046a764f37deed1f2b282fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:47:5c:90:59:ab:88:f0:21:1c:6d:8e:7b:
c8:be:be:8c:95:dd:12:13:69:5f:cc:55:4d:e2:65:
1e:10:3b:17:fc:69:7f:4e:64:44:02:86:b4:b9:da:
14:bf:21:f3:1a:cd:66:97:9a:3d:62:da:2e:24:c6:
7d:f6:8c:b3:a6:9b:3e:a9:bd:44:ef:e7:06:ff:47:
07:fc:e9:56:73:9b:b1:5c:98:81:e1:50:ca:68:0b:
5f:5b:5a:80:d1:24:7d:44:05:da:6a:ce:7f:9c:3e:
d4:5b:51:69:83:17:1a:a8:d5:c0:6e:6c:8b:6f:f5:
95:24:5b:0f:05:b5:9e:93:97:0e:5a:c2:ba:3a:64:
7f:b7:be:b9:48:23:f8:cd:50:ef:a5:e6:a0:71:1c:
7e:ca:4a:d4:d6:ea:0c:2d:a9:7a:9c:32:ef:39:e9:
ad:00:cb:36:b8:ca:82:e5:8f:fe:38:14:5e:77:56:
dc:e4:01:db:53:d8:c8:8d:a9:14:72:40:5f:90:08:
0a:97:b1:3f:17:71:64:10:2c:91:d7:46:b1:c3:1c:
8d:f5:b9:1c:7d:a4:89:24:4e:89:af:6d:06:4b:36:
ad:55:25:d4:15:76:c8:99:77:1d:4e:66:0d:e1:37:
06:c5:f8:6b:8d:a5:bd:96:82:21:df:7b:23:d4:60:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CB:3C:E1:15:06:4F:92:04:6A:76:4F:37:DE:ED:1F:2B:28:2F:A1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/css84RUGT5IEanZPN97tHysoL6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:6b0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:ec:5e:e2:a5:3e:d8:e0:7c:3e:4e:86:71:e6:27:7b:7d:aa:
e3:f1:df:5b:ec:0e:4c:0a:31:99:c7:06:44:f6:87:ca:24:86:
54:1b:66:13:a9:c2:78:5e:9e:bb:0a:31:84:12:1a:90:6b:8a:
52:7c:d5:1b:a1:94:c9:40:ea:64:d5:23:01:67:2f:d3:2f:9a:
34:14:c3:ff:30:3d:9f:5d:84:36:33:1b:e7:23:c2:36:05:65:
be:f9:f1:bf:03:0b:98:d1:54:bd:cd:71:42:d5:23:96:c5:36:
e6:46:5a:e7:3d:46:d0:06:fd:98:3c:a4:ff:cb:88:eb:d5:57:
30:1b:42:d0:eb:ad:3f:da:f4:66:fb:5e:a2:35:ff:dd:eb:3b:
74:4e:af:5b:e7:20:33:fe:43:32:81:ce:f3:59:98:67:cf:e7:
55:33:0b:3b:50:b5:44:2d:a0:69:e9:a7:03:09:6a:76:f8:33:
20:71:49:82:40:23:fa:5d:8e:79:06:33:0d:a9:d8:3d:c2:5a:
e2:c0:e2:8c:19:a9:8f:2a:2f:6c:e4:47:47:58:dd:98:8b:42:
d5:33:b5:70:cc:4d:35:8e:ed:1d:ad:8c:c0:7f:c7:88:13:5b:
30:59:2e:e0:a1:fc:72:af:a4:18:ae:64:1c:5c:4f:9e:74:b4:
46:22:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:23:48 2025 by rpki-client