Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/il7ydjdzbs7mBN0To8qfiKeDve4.roa
File: il7ydjdzbs7mBN0To8qfiKeDve4.roa (raw, json)
Hash identifier: xJ80Rv0x6nYdH/etMR5rXv3NmiMSuMSoAo5XKGpqX9w=
Subject key identifier: 8A:5E:F2:76:37:73:6E:CE:E6:04:DD:13:A3:CA:9F:88:A7:83:BD:EE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522804388511EC4054E8F8E106E6351
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/il7ydjdzbs7mBN0To8qfiKeDve4.roa
Signing time: Thu 02 Jan 2025 03:50:05 +0000
ROA not before: Thu 02 Jan 2025 03:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214701
IP address blocks: 2a0e:97c0:1d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:80:43:88:51:1e:c4:05:4e:8f:8e:10:6e:63:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a5ef27637736ecee604dd13a3ca9f88a783bdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:4a:c3:26:18:94:0c:39:55:d7:be:1e:4d:
c5:e4:01:da:b5:41:89:93:eb:c7:51:61:25:41:4b:
db:64:80:2c:99:6f:50:2e:a7:28:be:20:f7:61:42:
d8:bc:3f:47:a7:57:8f:fd:8d:77:7d:16:cd:35:8c:
09:33:24:25:c8:ed:5c:cc:24:16:06:6b:b1:f9:68:
4e:55:b4:72:cf:dd:5e:ff:30:98:ae:9b:ec:6c:95:
4a:50:6b:d0:89:b0:0f:94:20:b3:f6:20:50:64:54:
ec:a3:1b:a7:a0:22:c2:08:27:c4:79:08:1a:5f:5e:
2c:9c:8c:0f:f6:7b:fd:85:f8:93:da:66:7e:a8:21:
c9:08:7f:70:50:86:d9:24:7b:11:2f:a6:c1:aa:7d:
d2:8c:15:7c:3c:8d:21:80:6a:f3:a1:d6:04:84:5c:
c2:d8:a6:7a:99:16:7b:3f:e1:48:70:e9:d7:ea:4c:
56:ba:e2:2d:03:39:7e:b9:58:d3:d9:32:23:26:fa:
ee:08:45:64:56:3e:95:19:2c:f6:2d:ed:40:9b:9d:
8f:47:1d:4e:a4:90:63:aa:de:c5:7a:92:a0:01:4b:
5a:88:45:a0:40:33:a3:f7:7e:8d:3d:09:51:4f:a7:
bd:61:23:e7:b3:ac:74:9b:00:8b:6a:0b:ef:dc:a0:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:F2:76:37:73:6E:CE:E6:04:DD:13:A3:CA:9F:88:A7:83:BD:EE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/il7ydjdzbs7mBN0To8qfiKeDve4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:1d0::/44
Signature Algorithm: sha256WithRSAEncryption
8b:87:d7:83:8a:82:7c:d8:68:5d:12:2b:cc:48:89:41:84:15:
9b:27:29:fb:9d:6f:2b:7d:a2:ad:f0:7a:4f:b6:7b:0e:34:2e:
7f:84:ef:d4:8b:a6:d0:b4:71:2f:81:e1:a6:11:55:b4:fb:5b:
04:dd:ba:7b:36:5f:e2:dc:f2:86:d5:d5:e0:03:3e:39:15:8d:
9b:d5:dc:b8:91:85:ac:15:04:78:e3:b2:90:c1:b7:fc:f6:68:
a2:ab:10:d3:97:0c:b9:39:9c:b4:60:de:05:d0:91:b6:0c:98:
9c:ea:e2:c1:0c:6c:8f:de:58:03:84:0e:90:87:a9:2c:8a:28:
67:9c:60:02:c4:13:da:be:6d:d9:6f:cc:25:31:c7:04:93:25:
af:94:a5:d7:56:b6:e7:93:b2:bf:48:84:ba:b2:83:96:c0:55:
b0:4b:0a:d5:32:23:2c:e0:43:96:d9:64:65:6a:20:e7:f9:8c:
b8:c0:c8:9c:0a:47:69:05:23:3c:ce:e8:66:5d:60:a2:85:63:
6a:8e:56:fe:32:1b:50:2d:39:0c:82:a0:2d:6b:ed:1d:e1:07:
ab:bb:40:52:ac:0a:ef:09:5c:fb:3f:0f:46:bb:a3:a7:45:ee:
0f:c3:68:39:f0:54:f7:c1:c5:bf:f3:16:49:56:85:72:f0:91:
4b:4c:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:27:10 2025 by rpki-client