Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dh2H6YgEv50KmjIX3bz3owikEEo.roa
File: dh2H6YgEv50KmjIX3bz3owikEEo.roa (raw, json)
Hash identifier: I1Z7JGYSTimJMujxiR4OixBLTHwv62qtI6slJaZfJjc=
Subject key identifier: 76:1D:87:E9:88:04:BF:9D:0A:9A:32:17:DD:BC:F7:A3:08:A4:10:4A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522145FEBEC070B1503549F3C775321
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dh2H6YgEv50KmjIX3bz3owikEEo.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203943
IP address blocks: 2a0e:b107:5a1::/48 maxlen: 48
2a0e:b107:5a2::/48 maxlen: 48
2a0e:b107:5a3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:14:5f:eb:ec:07:0b:15:03:54:9f:3c:77:53:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=761d87e98804bf9d0a9a3217ddbcf7a308a4104a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:e3:ab:3d:36:75:af:26:e7:84:49:74:c3:
6d:d2:93:0e:b9:20:5f:ac:13:a6:a3:5c:73:76:b9:
90:89:48:71:30:72:49:6b:8d:6a:7e:7f:59:69:a0:
ee:fa:90:b4:7d:80:5f:b9:f0:8b:35:46:81:31:75:
60:d4:b9:b7:96:d2:38:6b:94:75:c3:ba:9c:e8:27:
77:6e:c9:df:12:35:49:b4:a2:fd:18:cc:24:20:2e:
60:6e:21:41:e6:2f:25:57:5e:7a:f6:04:ee:8c:25:
63:67:96:14:22:c9:80:c8:86:f8:c7:f3:c7:d2:d0:
db:3a:fe:61:d0:7c:2f:e2:f8:d1:e1:9e:50:52:c8:
7c:4a:ba:d3:1f:06:d7:be:3e:ae:75:bc:97:62:89:
79:3c:8e:f5:83:ca:49:29:8f:30:9c:c2:62:ee:c7:
5b:d7:77:09:0b:dd:5e:66:eb:cd:61:53:34:cd:4e:
69:a4:20:d8:ae:63:d9:2b:40:d1:d1:24:08:f1:8a:
6c:9d:ea:6f:84:e9:9c:61:e8:a1:e4:65:10:d7:6b:
c2:6f:61:90:15:38:00:c2:41:35:ce:fd:c2:c4:ce:
c8:98:4e:3f:d6:e0:2b:04:6d:80:e0:ad:ef:a8:cf:
fa:e8:e1:48:13:72:7c:6d:6a:ad:57:57:cc:78:2b:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1D:87:E9:88:04:BF:9D:0A:9A:32:17:DD:BC:F7:A3:08:A4:10:4A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dh2H6YgEv50KmjIX3bz3owikEEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:5a1::-2a0e:b107:5a3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ab:78:0c:0c:a8:69:1f:41:49:23:2a:1f:d1:4e:6c:58:d1:af:
e4:4b:71:ce:90:42:3b:23:60:d5:f5:6b:e4:9d:60:80:93:b5:
93:7a:94:13:1a:0c:40:e2:79:97:e1:cb:6f:ae:56:d8:e3:4e:
47:b1:ca:8f:fa:7c:fd:07:b0:08:63:84:38:34:69:f8:77:e2:
fe:64:05:08:52:bc:6b:9b:01:dd:d1:1b:8b:85:86:03:12:b0:
9d:be:ac:b6:17:36:c1:14:80:67:f0:03:43:be:cd:d0:49:87:
11:b5:0f:df:c1:49:fc:21:9b:57:5f:73:eb:4f:05:8c:6c:44:
59:31:86:60:61:f9:82:14:6b:e3:7d:5a:65:04:35:df:f5:fa:
05:d6:e9:e5:87:86:bd:96:84:1a:bf:32:88:05:2e:ac:89:ec:
b6:1f:a4:83:af:a4:7b:11:7a:22:07:79:9d:4f:e3:2f:61:dd:
b2:7a:5e:c0:cf:03:d9:61:86:42:a4:36:f8:17:97:c5:a5:0a:
2c:56:7b:c8:7b:bb:d2:d2:2a:67:7b:d7:4a:d2:e1:0d:c6:62:
e3:d3:59:10:23:77:c3:b0:08:68:f0:1e:3f:57:6f:8b:c1:f3:
a9:38:90:b9:12:8c:88:52:48:21:44:2c:67:cd:d8:02:ca:04:
91:a3:e1:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:06 2025 by rpki-client