Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oERdcnvNOVpbVaypGDsColtLUbM.roa
File: oERdcnvNOVpbVaypGDsColtLUbM.roa (raw, json)
Hash identifier: wo2FjTsDtT/rPrOQ2Ex4jICI6ZqKpSfX5gBWneK2mvw=
Subject key identifier: A0:44:5D:72:7B:CD:39:5A:5B:55:AC:A9:18:3B:02:A2:5B:4B:51:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195077A30B8584CF51A059E9535F3598FA1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oERdcnvNOVpbVaypGDsColtLUbM.roa
Signing time: Sat 15 Feb 2025 02:40:03 +0000
ROA not before: Sat 15 Feb 2025 02:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211337
IP address blocks: 2a0e:97c0:860::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:07:7a:30:b8:58:4c:f5:1a:05:9e:95:35:f3:59:8f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 15 02:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0445d727bcd395a5b55aca9183b02a25b4b51b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:e2:e9:92:a2:36:93:b4:1c:93:a2:da:b6:
9c:57:20:c3:30:29:f8:86:14:b8:1f:ea:f6:d7:07:
a1:9a:5b:3d:39:08:48:c9:eb:93:d6:7f:3e:9d:4d:
5c:85:39:10:6a:90:31:c7:5b:11:ac:89:1f:29:d0:
9a:a2:b8:e3:f3:46:c3:97:b0:90:71:fe:eb:d2:33:
5b:8e:27:a0:e4:49:8e:dd:25:cf:6f:6b:0b:e8:3b:
73:7d:13:4d:72:2b:32:8a:61:b3:aa:be:d9:79:d4:
33:33:94:e7:d5:58:a9:0f:68:69:89:36:4b:7e:77:
63:9d:4d:74:b1:c5:62:4e:31:89:eb:5b:47:0b:94:
59:9a:22:1f:9b:af:19:9b:6b:33:00:d6:99:94:11:
8a:de:53:2a:60:a4:1a:90:14:85:46:ea:2e:62:76:
47:cc:d0:5e:50:c7:44:54:84:0e:d4:86:03:1b:c4:
6d:1a:57:b9:81:9a:20:da:1d:5d:82:d8:12:9b:4b:
b7:bf:d5:d9:fd:f3:fa:f7:31:8c:61:05:c9:ca:74:
45:e7:a8:e3:50:2a:bf:11:f2:34:b4:ed:7d:d5:cb:
69:c4:cf:4a:47:df:19:ab:39:d8:47:5e:a5:23:d8:
41:1e:d9:d6:2e:dd:21:a3:5c:ef:b4:35:36:ac:38:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:5D:72:7B:CD:39:5A:5B:55:AC:A9:18:3B:02:A2:5B:4B:51:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/oERdcnvNOVpbVaypGDsColtLUbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:860::/48
Signature Algorithm: sha256WithRSAEncryption
20:35:81:02:54:03:eb:d3:9f:1e:df:28:e3:f7:06:75:5b:47:
27:1b:dc:e8:af:65:52:8d:4a:29:95:2f:2f:23:4b:0b:0e:f1:
ca:a2:f2:6f:2f:b8:fc:64:f7:83:aa:b1:f8:db:62:db:3e:6b:
33:55:9e:38:63:df:43:9c:37:64:c3:5f:61:d6:0d:71:07:06:
4c:0e:97:f1:89:62:d8:91:36:43:94:18:ed:d8:e0:b3:44:1d:
3d:7f:47:32:eb:00:46:59:f6:52:40:31:52:27:f8:88:43:c7:
a5:93:d0:8a:5c:13:13:45:fc:44:db:86:72:c5:79:26:1f:71:
e0:53:e2:65:97:3b:4c:53:36:66:e8:0d:3f:f3:4f:91:70:ce:
81:9b:f4:9f:e2:62:a8:46:95:7e:9f:4a:09:c0:51:9d:cb:0b:
c2:a9:88:d2:30:67:74:2e:33:3b:11:71:fe:ef:04:de:ee:86:
e3:74:f0:91:c5:44:30:03:6a:e3:eb:5c:82:36:5c:87:75:63:
41:48:dc:cd:5a:86:53:ec:c7:28:79:97:24:8b:41:bc:30:94:
03:54:e2:36:f8:25:25:2d:85:29:61:98:65:1e:35:85:40:20:
07:5a:78:e1:47:c5:ff:29:46:a1:81:cd:fd:62:52:b2:1b:e4:
37:38:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:53 2025 by rpki-client