Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tIWr-clqzDp6W5qbdhUs1SHrQBg.roa
File: tIWr-clqzDp6W5qbdhUs1SHrQBg.roa (raw, json)
Hash identifier: Sesvnps5RhSsJVd1B/aNZ4qVD1rE+/uFgV5GEEPeIbI=
Subject key identifier: B4:85:AB:F9:C9:6A:CC:3A:7A:5B:9A:9B:76:15:2C:D5:21:EB:40:18
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425221226473953916A60B8200B27CD3D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tIWr-clqzDp6W5qbdhUs1SHrQBg.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203493
IP address blocks: 2a0e:b107:2791::/48 maxlen: 48
2a0e:b107:2792::/48 maxlen: 48
2a0e:b107:2796::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:12:26:47:39:53:91:6a:60:b8:20:0b:27:cd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b485abf9c96acc3a7a5b9a9b76152cd521eb4018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:e7:07:83:21:ba:f7:1a:99:59:07:4c:6a:
23:eb:5d:7e:91:49:78:2c:0a:d1:52:5c:59:94:bc:
00:8f:bc:2a:91:84:28:63:23:15:dc:74:4f:9c:e1:
50:a7:c1:89:a9:26:df:49:3f:41:5a:3c:f2:05:d7:
13:eb:72:d1:44:6a:46:09:ae:fb:27:f6:66:66:86:
3a:38:35:d8:f2:61:df:2b:e1:c1:e6:ac:31:13:7d:
cd:a1:75:bf:5a:77:88:75:eb:2e:d6:c3:a4:23:b8:
69:18:75:67:4a:34:4a:61:15:64:bf:67:e1:0e:03:
6d:11:4b:c9:1a:27:b0:59:b5:c2:c9:86:01:79:84:
48:4e:41:45:ba:56:d2:39:47:95:77:c8:c3:fb:52:
7c:37:b4:e5:e7:84:4d:8e:94:35:d8:e1:6b:b6:f6:
3c:33:c9:08:d9:03:af:eb:83:37:43:f8:16:5e:27:
89:31:e2:16:9c:1b:c7:75:07:5b:07:b1:d7:87:b8:
4d:4f:8d:4a:8c:ec:98:e9:b5:d2:d7:5b:94:e0:39:
2a:18:80:0c:18:36:64:00:aa:12:4c:60:c2:3a:80:
59:3a:88:8e:54:60:00:34:27:ca:1f:50:cc:61:0a:
45:7e:15:14:5c:ec:ac:e3:ed:8e:54:a1:7a:55:0d:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:AB:F9:C9:6A:CC:3A:7A:5B:9A:9B:76:15:2C:D5:21:EB:40:18
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tIWr-clqzDp6W5qbdhUs1SHrQBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2791::-2a0e:b107:2792:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2796::/48
Signature Algorithm: sha256WithRSAEncryption
19:d1:c5:a3:a1:47:ac:3d:39:88:f9:39:f4:79:1f:ab:8a:ad:
5d:b0:b3:57:f8:e7:87:0f:b6:49:38:8d:ce:5d:a6:7b:46:d9:
25:85:8a:ce:e6:57:0e:f1:5e:90:09:f5:21:af:88:a8:70:be:
65:a0:40:4c:6b:9c:18:3c:e7:07:42:2a:cf:1d:78:a9:4f:32:
66:f5:49:7a:a3:b4:2d:71:f9:5e:81:84:fc:f1:44:2b:5f:fd:
58:45:fa:75:97:30:a6:46:92:5a:38:75:ff:a8:37:d8:fb:f6:
a2:8f:cf:12:20:5f:55:54:1d:ea:f9:7b:05:0d:23:2d:18:80:
f2:ce:7a:f7:b7:66:98:3c:4e:b3:a0:27:1f:fa:f3:86:5c:fc:
20:7c:30:7c:6d:c3:a9:33:39:eb:21:7d:60:7f:5b:a4:0a:32:
41:17:4d:7f:33:fc:50:23:71:b0:f2:28:55:b9:ad:e1:df:89:
da:1f:70:56:ee:0e:53:73:be:f7:06:4e:cc:3c:9d:59:98:fd:
8c:15:30:fc:dd:8a:7b:7c:b6:09:26:6f:9c:34:bd:3d:ad:75:
45:f3:65:d8:bb:20:3a:f4:0e:96:05:2c:1d:ba:3f:c9:39:ea:
bd:73:58:2f:aa:04:1c:ff:8b:81:8b:18:ea:93:00:b3:57:5b:
fd:c7:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:11 2025 by rpki-client