Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/feDQTjXXTqKLjuSrRNCLH7rS8As.roa
File: feDQTjXXTqKLjuSrRNCLH7rS8As.roa (raw, json)
Hash identifier: Y3ma2t2qqp4ao8da0GYVl7gMm4E6LcP9UZn4HwKbBQs=
Subject key identifier: 7D:E0:D0:4E:35:D7:4E:A2:8B:8E:E4:AB:44:D0:8B:1F:BA:D2:F0:0B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522264146C1AC8224ACD764D678C4CB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/feDQTjXXTqKLjuSrRNCLH7rS8As.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207401
IP address blocks: 2a0e:b107:4e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:26:41:46:c1:ac:82:24:ac:d7:64:d6:78:c4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7de0d04e35d74ea28b8ee4ab44d08b1fbad2f00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:e8:78:7d:ee:a9:dc:ff:dc:7d:40:5b:ee:
f4:67:45:95:6a:13:43:7e:b3:d1:bb:d2:99:60:fd:
0a:ee:ea:96:0d:4f:66:11:7b:bb:f7:3c:08:5a:85:
eb:54:ed:f2:d6:1a:04:0a:01:e6:70:54:7d:79:df:
8e:ef:df:1e:92:99:5c:68:cd:48:88:67:18:88:b4:
a4:7e:bb:5c:cc:2e:66:c1:75:6a:02:d1:9f:a3:5d:
ac:0a:19:83:8d:49:f9:a4:a3:b8:19:6b:20:e2:37:
79:6c:67:21:a0:50:6d:a5:4f:85:0c:ec:5b:54:c9:
23:62:c7:fa:e6:76:9d:e6:4e:48:01:44:2f:ac:58:
2a:52:a7:91:31:c9:be:82:8e:fe:d5:10:42:8b:b7:
a6:0f:17:2f:c1:f4:2e:49:f7:7b:69:b4:39:e4:a4:
26:43:d5:04:bd:2f:40:85:f3:5d:1c:38:da:43:69:
a6:db:5c:a2:4c:16:81:35:b8:f5:d6:9c:3a:bd:6e:
a3:02:4b:cf:0a:ee:27:99:24:7b:5f:4e:94:1c:53:
98:83:29:53:42:61:32:16:3b:28:a9:d9:1e:68:77:
d2:ca:e8:d1:42:4f:86:59:71:4f:f1:82:46:f1:3c:
3b:ec:08:b4:bc:87:28:c1:65:8f:89:d1:ea:5a:35:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E0:D0:4E:35:D7:4E:A2:8B:8E:E4:AB:44:D0:8B:1F:BA:D2:F0:0B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/feDQTjXXTqKLjuSrRNCLH7rS8As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:4e0::/48
Signature Algorithm: sha256WithRSAEncryption
4b:ae:2c:e8:45:d1:49:4b:24:08:dd:f5:83:e0:a4:33:38:62:
3b:d3:bf:02:a1:38:4d:98:cd:6f:f3:db:8b:cb:5f:7e:48:76:
52:cb:e7:b0:2d:95:4d:8d:4f:48:75:18:96:84:d2:b5:7e:ea:
2d:29:cc:21:3e:fa:aa:a9:85:d7:8d:40:cd:14:9d:16:a2:04:
a2:48:0c:4d:5d:44:73:17:21:ab:0e:1f:b6:84:08:c9:91:7c:
94:f2:d3:ce:5c:a0:60:ce:fc:3e:dd:92:ec:f9:5f:68:4d:9f:
ae:76:89:98:74:f9:0c:d3:ef:50:c4:7f:01:15:fc:07:0f:db:
09:34:0b:30:f3:d0:98:8b:5c:8a:ba:49:5e:ca:99:a6:a5:05:
42:d6:1a:b7:47:bc:b5:4f:e5:18:8a:bc:6f:4d:01:73:d5:ef:
c8:f8:97:1d:d5:0c:4e:94:7e:aa:e5:46:fb:79:b0:9a:24:d5:
4e:43:fc:e9:40:ce:8f:73:e4:e1:11:83:7a:52:b1:75:7a:7f:
14:44:cc:43:8a:27:47:a6:c1:ed:bd:e5:ea:47:81:9b:b3:c5:
d9:35:d7:6f:c8:3c:5a:78:f9:35:c0:ca:d4:18:0e:a1:ae:11:
a4:6b:1d:2c:6f:f1:23:a1:fb:4c:7f:0e:8c:79:43:42:0b:09:
8b:73:68:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:24 2025 by rpki-client