Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dvYDTbReWNAY7pPxpwcr1q9dG2U.roa
File: dvYDTbReWNAY7pPxpwcr1q9dG2U.roa (raw, json)
Hash identifier: 2AWtBjjm5XWinOS+uXDUVLKicx7MMWRUNP7dVb1aQkc=
Subject key identifier: 76:F6:03:4D:B4:5E:58:D0:18:EE:93:F1:A7:07:2B:D6:AF:5D:1B:65
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195CDC454FFC90B0A129E7A9CEE69B04037
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dvYDTbReWNAY7pPxpwcr1q9dG2U.roa
Signing time: Tue 25 Mar 2025 14:45:50 +0000
ROA not before: Tue 25 Mar 2025 14:45:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215108
IP address blocks: 2a06:de01:120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:c4:54:ff:c9:0b:0a:12:9e:7a:9c:ee:69:b0:40:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 25 14:45:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76f6034db45e58d018ee93f1a7072bd6af5d1b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:ba:80:c1:08:d0:ab:16:ea:08:82:84:49:
c9:a7:42:0d:2d:69:78:31:c8:3f:7f:6b:73:26:13:
a5:de:40:53:ec:d2:a2:da:bb:ee:4b:0f:e9:13:02:
94:a4:75:40:d2:22:61:82:f6:c4:ee:80:f5:42:c1:
9a:2f:d5:ef:a0:02:3e:dd:e1:2f:ad:dc:c4:0d:f9:
fa:e4:e4:d8:62:13:11:5a:9f:0b:1e:fd:6b:5a:b8:
5a:48:33:7f:b8:4b:e1:71:12:b1:17:5b:4c:b7:02:
cd:0e:4f:4a:e9:95:16:7f:f0:05:cc:e1:cd:e9:1b:
64:52:b5:33:92:2a:38:c4:62:1d:ff:f3:55:01:a5:
dc:84:67:22:50:dc:ee:63:01:26:7f:dc:20:8f:31:
06:46:f5:cd:e4:ea:8e:0f:be:dd:79:58:97:7d:79:
05:13:73:40:3e:de:38:01:77:ea:3a:e3:04:87:c6:
55:e6:12:f2:0d:43:ba:08:af:7a:4c:92:9a:b7:a0:
e7:3e:78:1c:c1:9f:34:11:2b:f7:38:ee:50:45:41:
89:0a:e2:de:81:6b:2b:58:93:4f:e0:86:a8:31:88:
0a:42:76:6b:f0:2f:f3:38:54:46:b5:1e:91:76:8e:
66:40:5d:90:8f:f4:11:d5:8c:f7:dc:4e:8a:a2:55:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F6:03:4D:B4:5E:58:D0:18:EE:93:F1:A7:07:2B:D6:AF:5D:1B:65
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dvYDTbReWNAY7pPxpwcr1q9dG2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:120::/44
Signature Algorithm: sha256WithRSAEncryption
a8:12:91:45:e1:1a:58:a5:b5:30:94:d7:a8:f6:af:89:5b:0f:
81:69:b2:0d:ed:0b:84:1a:d9:7a:22:b5:29:20:3e:5a:4d:60:
71:8f:5d:65:d5:f7:63:a6:f0:1e:f6:fa:b8:12:01:db:89:a6:
73:a1:57:3e:31:39:02:93:61:bd:77:b1:bf:b4:65:61:cb:ab:
6c:7a:d3:34:48:89:03:8b:e8:94:04:52:cb:b2:ab:04:32:66:
d6:a9:01:bc:8f:21:72:14:b3:92:21:d1:a0:63:3c:b5:7c:7b:
fe:d3:df:be:45:ce:ac:2e:fc:5f:80:6a:03:d7:3e:96:fa:5f:
7c:f9:15:03:3b:6d:b6:57:b1:dc:7c:da:13:1a:4a:1a:be:da:
31:4b:34:75:48:10:35:4d:38:d1:c3:80:7a:87:93:af:8b:35:
a2:6f:9e:eb:aa:2c:78:32:85:76:28:2d:a4:c9:0b:73:17:90:
26:9a:24:4a:b7:20:b2:61:11:92:a2:f1:a2:80:3a:cf:92:29:
10:8d:47:49:12:4e:5d:ce:31:40:81:3d:c4:4c:00:1c:77:7f:
04:10:af:fa:0c:27:f5:ad:a4:4d:a4:f5:86:ca:4a:ea:6e:7c:
ba:0c:c3:40:56:76:81:ae:86:00:10:d1:90:b2:62:4a:72:eb:
96:ca:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:24 2025 by rpki-client