Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fVXlWvqGBaUOBS9s9C7YcPUOGqQ.roa
File: fVXlWvqGBaUOBS9s9C7YcPUOGqQ.roa (raw, json)
Hash identifier: swHzMA2LBGQ1I0M641uGnNvO3jxGqglE1ZRXQtb2X7M=
Subject key identifier: 7D:55:E5:5A:FA:86:05:A5:0E:05:2F:6C:F4:2E:D8:70:F5:0E:1A:A4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521F5DD1B5C6703196AB59EFA541806
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fVXlWvqGBaUOBS9s9C7YcPUOGqQ.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198276
IP address blocks: 2a0e:b107:2030::/44 maxlen: 48
2a0e:b107:2030::/48 maxlen: 48
2a0e:b107:2031::/48 maxlen: 48
2a0e:b107:2032::/48 maxlen: 48
2a0e:b107:2033::/48 maxlen: 48
2a0e:b107:2034::/48 maxlen: 48
2a0e:b107:2035::/48 maxlen: 48
2a0e:b107:2036::/48 maxlen: 48
2a0e:b107:2037::/48 maxlen: 48
2a0e:b107:2038::/48 maxlen: 48
2a0e:b107:2039::/48 maxlen: 48
2a0e:b107:203a::/48 maxlen: 48
2a0e:b107:203b::/48 maxlen: 48
2a0e:b107:203c::/48 maxlen: 48
2a0e:b107:203d::/48 maxlen: 48
2a0e:b107:203e::/48 maxlen: 48
2a0e:b107:203f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f5:dd:1b:5c:67:03:19:6a:b5:9e:fa:54:18:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d55e55afa8605a50e052f6cf42ed870f50e1aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:90:32:46:b1:11:c0:39:55:43:9e:5b:f6:
fc:31:e7:f7:0f:8e:b3:18:01:19:f0:b5:09:8a:3f:
7f:af:ae:7f:b7:f6:9c:8b:43:24:95:4d:b0:ca:b1:
94:01:09:43:e6:5b:be:12:67:b3:e3:56:1f:96:ec:
e9:7c:ff:27:1d:aa:94:c1:95:23:e2:0c:82:b0:9d:
9c:d4:3e:5a:54:20:60:48:ba:3d:26:a1:fc:0b:f1:
6a:82:ab:59:cc:71:09:7a:0d:7a:24:59:37:4b:3e:
cb:05:38:9d:57:c1:20:b8:ac:f5:aa:d2:63:e4:08:
24:6f:58:8f:61:02:77:40:7b:42:ec:48:3d:f5:ac:
f7:18:a8:76:3b:25:92:c8:a8:ac:a9:2d:04:47:a0:
86:09:69:4c:49:96:45:69:8f:17:9f:28:06:16:70:
b3:10:f4:01:21:7d:9b:ce:0f:9c:bc:9e:28:45:89:
48:cb:c9:b9:83:e0:21:1c:07:d6:70:2d:49:3e:50:
8d:32:c3:85:3d:6b:0b:4c:4f:f7:6d:1c:20:d8:84:
12:ff:a3:13:d9:d4:e1:3e:03:a7:e3:30:23:50:ab:
70:15:08:43:43:aa:79:57:ce:13:62:b4:af:96:e2:
46:0b:2e:ac:03:d6:d5:2a:0e:7d:fd:65:a1:74:b6:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:55:E5:5A:FA:86:05:A5:0E:05:2F:6C:F4:2E:D8:70:F5:0E:1A:A4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fVXlWvqGBaUOBS9s9C7YcPUOGqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2030::/44
Signature Algorithm: sha256WithRSAEncryption
6f:21:16:16:0b:f2:cc:ba:b5:38:f8:5e:4d:b8:22:d9:74:31:
41:5f:a9:8b:ae:ba:f0:4e:b7:39:de:f2:c9:50:5a:bf:07:02:
06:a8:49:7f:34:2a:b0:18:7d:49:7e:d1:75:07:62:fc:9e:cc:
75:e3:2c:cb:02:ef:b4:3d:b8:b1:b7:71:40:8c:44:46:d5:8f:
bc:c4:53:54:25:ef:ea:31:88:53:d8:aa:e0:50:73:b1:ce:81:
19:7c:f8:95:b1:ff:49:c1:b4:73:64:18:d6:8d:0a:0f:28:ad:
a8:e0:d6:93:4e:8e:9b:f9:0f:96:1f:98:ce:93:b6:31:31:4a:
60:61:75:63:bd:ab:a9:d5:03:bd:d7:fa:08:0e:62:c7:fa:63:
20:c9:8c:e7:86:1d:b8:10:9a:c4:8d:89:8c:1a:d5:34:44:83:
fe:e6:76:a0:b1:74:ff:43:db:cd:d9:1c:3c:a6:c3:dd:75:9a:
7d:30:a5:d3:11:cc:73:27:6d:72:72:70:ae:83:d9:b7:cf:9b:
8c:3f:5d:7c:72:0d:10:c4:82:90:7b:ea:19:e1:f7:8e:a9:62:
fc:74:d2:9d:7e:68:52:00:7d:a8:bf:b9:84:87:8f:99:69:6d:
2e:9e:98:5c:4a:d9:6a:7d:41:c7:59:e5:a6:58:0a:83:73:0d:
d6:ea:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:46 2025 by rpki-client