Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k54sR3LTTTY8zBYibWWqiU3JZkI.roa
File: k54sR3LTTTY8zBYibWWqiU3JZkI.roa (raw, json)
Hash identifier: v5iewcBolE10sE0vtshyZJZgsucsQI2zDKhFZDmSBz4=
Subject key identifier: 93:9E:2C:47:72:D3:4D:36:3C:CC:16:22:6D:65:AA:89:4D:C9:66:42
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D0478FC38839BAA2C41472637757
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k54sR3LTTTY8zBYibWWqiU3JZkI.roa
Signing time: Thu 02 Jan 2025 03:49:20 +0000
ROA not before: Thu 02 Jan 2025 03:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44024
IP address blocks: 2a06:de00:7000::/44 maxlen: 48
2a06:de00:7000::/48 maxlen: 48
2a06:de00:7001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d0:47:8f:c3:88:39:ba:a2:c4:14:72:63:77:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=939e2c4772d34d363ccc16226d65aa894dc96642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:fb:96:c6:51:24:72:df:af:e2:15:58:b8:
15:8b:f6:9d:a0:4f:0a:b9:64:81:6a:9d:f2:4e:fd:
9b:fb:dd:2b:63:d9:3d:4e:5d:46:fe:8f:49:21:ee:
d8:65:84:79:46:66:60:80:32:14:8b:9f:94:f2:6a:
70:cc:de:25:6d:e2:33:aa:1c:31:eb:b4:3b:20:7e:
41:cd:69:b5:1c:4a:7d:6e:97:27:9a:f9:b3:31:15:
04:d5:23:4c:c4:b8:88:b6:fe:2e:87:53:e2:d5:aa:
ae:1e:65:41:de:39:c5:5b:5d:7a:17:23:2c:51:de:
04:46:50:0f:11:09:38:6d:3d:88:98:4a:b8:48:20:
f2:7e:d5:76:e8:31:b1:ad:bf:e5:44:4a:2b:87:18:
7e:8e:1d:8f:f7:5e:10:9d:48:f1:72:4f:48:8d:1b:
fe:2b:fb:e6:b8:7b:19:27:81:3c:83:d4:d6:70:86:
83:41:d0:40:70:93:ee:43:b7:44:36:5f:9f:45:a5:
e5:f1:65:d8:36:bc:4f:a4:7f:16:30:2b:ea:03:7f:
37:e4:2e:9f:7d:aa:a7:d8:66:8d:6a:ad:62:7d:54:
29:ce:3b:d7:ae:32:14:07:4e:3b:13:84:c1:a1:bd:
89:39:f0:47:75:f9:44:45:c3:b8:0d:1f:f2:44:49:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9E:2C:47:72:D3:4D:36:3C:CC:16:22:6D:65:AA:89:4D:C9:66:42
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/k54sR3LTTTY8zBYibWWqiU3JZkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:7000::/44
Signature Algorithm: sha256WithRSAEncryption
4e:38:be:23:24:b2:17:06:d8:18:2f:9a:21:3d:b5:45:37:a8:
bc:65:8e:c9:36:1c:2f:57:4c:75:d3:57:38:03:8e:92:32:85:
38:d8:4d:11:88:2a:01:7b:ac:f9:14:c0:4d:7c:00:02:c3:fc:
32:65:e3:3f:ae:30:42:44:3a:55:01:f5:9f:96:46:92:1a:88:
04:6a:5b:71:62:37:5e:17:09:1f:71:d2:7e:41:f8:86:8a:0a:
db:83:b7:d3:c2:79:37:26:42:fa:4f:5c:18:06:90:5a:e7:84:
52:bd:f6:23:d3:12:5b:d1:00:72:92:94:60:b3:aa:4a:8f:3d:
15:7c:f2:0b:8a:da:15:82:b0:1f:50:fd:eb:85:a1:bc:2e:c2:
6a:8d:43:d9:c6:5d:d5:0a:c6:eb:a3:96:c5:72:ca:6d:c3:e4:
21:2e:87:71:14:35:fd:b0:0f:0c:45:97:27:93:97:4e:92:72:
7a:0e:27:12:a0:93:f1:8a:4b:42:d0:23:1d:6a:c3:20:0d:cb:
cd:e4:29:ce:13:6b:b2:ee:aa:3e:84:de:0c:e7:e5:7e:60:d9:
4d:9e:26:19:d6:33:1d:b9:db:9b:79:4a:ed:96:ea:f1:fa:a3:
95:eb:93:36:bb:37:50:cf:90:35:04:8f:f1:cb:9a:4f:23:d4:
9b:c0:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:36:17 2025 by rpki-client