Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e5WU8txddK3rFZ42lS-_ucZaPNQ.roa
File: e5WU8txddK3rFZ42lS-_ucZaPNQ.roa (raw, json)
Hash identifier: xykA8qym6UKE8rG2qAa+TnSSS9vr4i3VSO7TuR6/Kg0=
Subject key identifier: 7B:95:94:F2:DC:5D:74:AD:EB:15:9E:36:95:2F:BF:B9:C6:5A:3C:D4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252263226D545D99C6E9886106B2A785
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e5WU8txddK3rFZ42lS-_ucZaPNQ.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212483
IP address blocks: 2a0e:b107:1be0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:63:22:6d:54:5d:99:c6:e9:88:61:06:b2:a7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b9594f2dc5d74adeb159e36952fbfb9c65a3cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:47:e1:a2:e6:b8:a2:8a:10:7a:ad:5a:c0:
ec:af:68:e5:c2:0d:5a:15:60:78:6f:9d:5e:53:c5:
c8:5d:75:02:79:4d:8f:bd:a1:02:8a:75:83:e3:14:
0a:c3:bc:e6:45:45:1e:c8:2f:e4:f9:c9:a6:3f:5a:
06:db:bf:a9:47:72:1f:65:6a:32:45:3e:51:d8:bd:
ba:c2:c4:a4:33:f4:68:eb:fd:73:9e:23:02:10:45:
c0:19:83:a6:cc:0a:2d:62:44:bb:19:43:ee:86:a7:
f4:4a:19:fb:3a:c5:d8:2a:3a:d3:9e:75:a9:42:81:
2b:32:0e:3e:90:4f:f4:9f:2b:5f:b4:1d:b1:cb:2f:
45:7c:03:e9:73:1a:b8:ec:f9:3a:a5:44:7f:d6:f4:
52:1b:9a:7e:97:03:bc:fa:e5:cd:84:fc:bd:bc:60:
d9:54:18:6f:ae:29:ee:df:b7:e3:4e:bc:e8:05:f4:
be:eb:89:a0:fd:30:fd:72:d9:3f:5f:6a:b4:fd:aa:
2d:40:72:3d:a9:68:90:c2:44:a4:83:08:d1:59:fe:
dc:97:4e:ee:04:0e:11:c6:98:01:15:86:8f:2d:48:
cb:92:86:37:10:62:8f:02:37:a2:49:1a:59:87:ff:
56:a7:42:97:12:04:ec:92:dd:eb:89:23:eb:19:41:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:95:94:F2:DC:5D:74:AD:EB:15:9E:36:95:2F:BF:B9:C6:5A:3C:D4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e5WU8txddK3rFZ42lS-_ucZaPNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1be0::/44
Signature Algorithm: sha256WithRSAEncryption
cb:87:00:4b:85:ff:97:38:54:0e:37:ed:b3:95:43:1e:49:5e:
48:d1:63:c0:99:e4:e4:bd:f1:19:5c:7c:81:98:94:9d:96:c8:
1d:43:2f:a2:75:f0:5a:80:5e:c5:c3:5d:29:3f:8b:4e:b9:59:
70:02:46:79:d1:71:94:e7:2b:e2:d0:39:d5:18:5f:ed:59:7d:
a4:fb:da:8f:6c:05:12:d6:08:af:4e:7f:28:cd:15:62:4c:4a:
1c:70:d6:55:cd:57:8f:87:d5:c2:c3:de:2e:51:60:db:1a:2c:
a0:3b:a3:2f:2d:9c:98:0d:2e:08:eb:d0:7a:10:de:78:09:37:
f3:a8:54:24:d7:fa:94:17:fb:6d:66:7c:b1:2c:de:04:ad:e8:
23:eb:f3:44:4b:61:fc:3a:8f:36:cd:73:9a:68:4c:f3:91:14:
30:4d:63:d7:d8:57:88:3b:f8:af:00:60:9b:ab:b9:dd:e6:43:
8d:10:24:71:57:d6:ec:cd:5f:b2:b9:21:ac:7b:c4:80:dc:3c:
09:c8:52:2d:45:46:dd:1a:f1:b6:ef:9b:14:55:68:75:56:1e:
e8:fc:56:20:fe:a4:8e:e7:36:40:aa:64:57:5b:0f:b6:38:51:
ce:f2:5f:3c:c4:3d:14:b5:e8:5d:0e:3d:3d:ba:55:68:fd:48:
10:0f:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:17 2025 by rpki-client