Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ppet5YuTMmBGL-Amqg0O3YLqb7M.roa
File: ppet5YuTMmBGL-Amqg0O3YLqb7M.roa (raw, json)
Hash identifier: 3KQLNkVJ+PFTZ8Jb+BHN52UbNqKlvMYtczEDPJ+57yI=
Subject key identifier: A6:97:AD:E5:8B:93:32:60:46:2F:E0:26:AA:0D:0E:DD:82:EA:6F:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521C7AD993E892FE774404E08DF50AE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ppet5YuTMmBGL-Amqg0O3YLqb7M.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24381
IP address blocks: 2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c7:ad:99:3e:89:2f:e7:74:40:4e:08:df:50:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a697ade58b933260462fe026aa0d0edd82ea6fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:f6:c4:0f:fd:66:be:c1:7b:c9:3e:fa:0c:
37:9f:17:2a:76:f4:ad:65:8e:11:98:e7:dc:28:be:
82:f1:d8:02:c8:1b:cd:68:cc:82:f0:1c:bd:a7:1a:
99:4a:57:02:89:41:c5:18:1d:df:c2:a6:e0:57:88:
36:86:1e:6b:34:8a:a2:62:6a:04:d2:0e:cf:6f:26:
a8:6e:fe:5c:0d:f2:aa:bb:a2:3e:f8:ef:8c:d1:b0:
21:95:10:aa:54:d2:6e:ca:a8:f9:97:a7:7d:cd:cd:
15:2e:bc:b2:78:21:76:75:f8:de:ff:1d:08:fe:f6:
61:86:6a:cb:7b:9c:7f:c3:33:54:89:b3:92:e3:d0:
18:cc:5c:fa:b9:ec:e9:35:de:79:e2:cc:ef:5c:4b:
d6:bb:59:38:23:89:55:14:b9:09:39:6d:c0:0c:92:
f9:7b:74:67:ed:3e:cc:9e:93:e4:c2:0a:2d:7e:30:
48:df:17:0a:22:d4:b9:d8:47:ef:3f:42:e8:ae:2a:
a2:0d:fa:80:95:60:0f:66:c5:a5:71:2d:5f:bf:97:
69:42:e8:82:a8:4b:4d:3e:75:93:25:a4:4e:07:1d:
df:7c:94:54:58:b3:7a:dc:e6:4c:f1:29:64:2e:06:
0f:78:60:ef:a7:9d:b9:a3:41:1b:06:56:6f:e9:b1:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:AD:E5:8B:93:32:60:46:2F:E0:26:AA:0D:0E:DD:82:EA:6F:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ppet5YuTMmBGL-Amqg0O3YLqb7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2220::/44
Signature Algorithm: sha256WithRSAEncryption
a0:b7:84:0a:4a:ef:d7:0a:6b:3b:53:24:b5:42:9e:cf:d6:db:
51:69:f1:2f:a4:1e:e1:dd:93:f4:61:f4:2c:6e:3d:19:86:a4:
94:f6:6a:a1:01:7b:17:19:65:74:f3:a4:fb:cd:9d:2c:fc:df:
8b:e0:66:d9:c2:63:aa:25:9f:3f:d5:39:16:61:8f:de:f4:47:
4e:f7:75:4a:b0:dc:9d:78:e6:af:3c:ea:b4:41:38:06:b5:92:
b0:11:f5:37:74:15:7d:b0:a9:ca:c1:f3:a8:a8:73:9a:76:ba:
d7:2a:4e:b7:7e:48:4c:99:be:ad:ec:8d:ec:b7:76:73:c9:d1:
2f:1f:fd:61:6a:b4:39:11:7a:e3:be:52:bf:1c:67:85:79:ab:
b5:37:d5:bc:43:31:bc:e1:3d:f6:68:da:3b:bf:e6:28:f2:00:
76:1d:f0:71:f3:58:f5:a5:55:33:18:ae:fc:20:1e:ad:7a:a3:
02:22:5c:a9:be:2c:fb:a1:40:20:fd:ba:72:08:c6:bb:3a:e5:
f3:fb:89:f2:07:89:65:37:79:b1:50:6b:cf:8c:03:e9:a9:f6:
1d:84:3f:2b:83:95:2a:7c:13:92:bc:61:59:6e:31:3f:f3:26:
b0:51:57:74:e1:8c:76:f1:ea:87:6b:fc:27:97:d2:2e:83:3e:
2a:65:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:26:05 2025 by rpki-client