Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tbjYr9BDSRdbiHpx5dA0kzM6wnE.roa
File: tbjYr9BDSRdbiHpx5dA0kzM6wnE.roa (raw, json)
Hash identifier: +4iAlhYGvSvsbgXbeORSMz9OANiHiHvayDwFJbU/n4g=
Subject key identifier: B5:B8:D8:AF:D0:43:49:17:5B:88:7A:71:E5:D0:34:93:33:3A:C2:71
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942522648AEB0464C1ED0A8154C019DC8E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tbjYr9BDSRdbiHpx5dA0kzM6wnE.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212514
IP address blocks: 2a0e:b107:f0::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:64:8a:eb:04:64:c1:ed:0a:81:54:c0:19:dc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5b8d8afd04349175b887a71e5d03493333ac271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:95:bc:4a:c3:5e:d4:1b:ee:a4:de:44:2e:
05:9d:6c:45:08:21:33:05:f8:50:45:95:2a:19:ab:
05:d2:16:af:77:99:86:b3:4a:14:7a:77:4a:ec:ac:
86:58:c7:0c:9d:ea:d3:86:ad:09:4c:c4:a3:87:68:
38:41:51:ea:12:48:14:e7:23:ca:fb:2a:49:8b:45:
cc:2e:85:51:eb:45:00:d3:df:f0:4a:21:e3:e8:5a:
37:be:17:a0:96:0e:5b:b7:f2:63:15:12:b0:c9:99:
bb:09:65:6d:29:ba:51:04:9b:18:7c:15:fc:f3:a9:
6b:0d:df:a3:b0:60:0c:ce:f3:04:7e:5c:19:7b:cb:
d5:93:f6:cf:40:3a:24:f2:e8:62:87:b4:f0:80:43:
30:bf:65:a5:5d:a4:60:42:7a:6a:d7:b5:dd:77:6c:
60:43:6a:6a:4b:27:a5:3d:7d:9b:ee:d0:18:90:88:
8c:20:48:f2:68:cd:c3:75:c7:31:9c:de:a2:04:ac:
40:78:91:90:c2:5f:bb:39:23:df:f5:92:09:4a:f6:
d4:de:8c:e8:89:19:63:56:10:da:3a:de:83:6a:81:
c7:14:97:98:24:b1:ec:d6:90:9e:11:5f:87:93:8f:
1b:d9:53:09:6f:d4:33:d9:ff:ec:bc:c7:79:42:8f:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B8:D8:AF:D0:43:49:17:5B:88:7A:71:E5:D0:34:93:33:3A:C2:71
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tbjYr9BDSRdbiHpx5dA0kzM6wnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f0::/47
Signature Algorithm: sha256WithRSAEncryption
32:e4:06:8a:e0:c4:ac:6f:13:a5:15:1e:c0:95:8b:ff:a0:46:
2b:cb:6f:f7:ab:92:3c:ff:3f:24:51:f6:f9:b1:c7:bf:7c:68:
35:a7:20:9b:fe:45:79:3d:32:1c:e7:8f:68:c7:48:fc:7d:8b:
e0:7d:eb:1b:44:f5:64:e9:8a:74:1b:fd:e4:90:c9:80:0b:2c:
bc:05:e9:48:27:09:16:e1:a8:80:1f:f5:33:9d:20:61:56:d6:
93:aa:99:de:64:29:b5:fd:fd:85:83:c6:05:e0:fc:fb:b7:6c:
ed:6c:f7:56:d4:99:62:70:9f:f4:e0:5a:65:5b:6a:54:49:cc:
96:42:63:b0:7d:65:e9:7e:ea:fa:2d:e7:1e:3e:07:36:ac:11:
be:a9:19:64:ef:c9:a1:37:a9:a8:a1:49:66:2d:90:57:21:40:
72:db:54:e0:48:e4:b3:be:ab:05:73:be:1b:05:10:d6:14:61:
c4:a6:87:25:87:4a:f1:4f:71:9a:96:fd:62:6f:2d:c7:fc:ab:
92:e7:51:4b:94:6a:51:52:92:6f:0e:36:a2:62:36:53:f3:70:
b7:01:79:6f:52:84:fd:86:1c:87:ff:b2:c8:67:c1:87:b0:08:
1a:eb:d9:f6:41:e6:03:7c:8c:f4:3a:12:60:44:5d:19:52:77:
e2:8c:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:55:53 2025 by rpki-client