Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uyVrw5tyHpdX1038XEQXjM-hiow.roa
File: uyVrw5tyHpdX1038XEQXjM-hiow.roa (raw, json)
Hash identifier: 0yZgMra2Y4KH7gtc4lB2AdLFZl7qVJFedPAT/60zX28=
Subject key identifier: BB:25:6B:C3:9B:72:1E:97:57:D7:4D:FC:5C:44:17:8C:CF:A1:8A:8C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425220815E87783FEB8A81536B441C6E0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uyVrw5tyHpdX1038XEQXjM-hiow.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202222
IP address blocks: 2a0e:b107:1ea0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:08:15:e8:77:83:fe:b8:a8:15:36:b4:41:c6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb256bc39b721e9757d74dfc5c44178ccfa18a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:a4:c5:19:c5:50:b3:d3:3c:15:b7:84:eb:
f4:bb:48:f0:dd:40:26:13:58:b6:81:27:4f:a9:28:
c3:97:58:32:7d:b7:b7:36:95:f2:46:cc:e7:6b:04:
93:b1:19:1e:94:c2:b8:f6:c5:03:c2:7d:54:39:7c:
d1:d2:3f:05:c9:f2:ee:f3:7c:b5:ea:f0:ea:e8:a9:
a2:4c:01:ac:e8:91:f7:cd:69:37:33:41:f4:1d:ea:
a0:64:a9:d8:18:22:7c:19:b4:2b:bd:7d:93:ba:ea:
17:e1:e8:68:c5:c6:a9:57:b1:28:e6:f7:91:18:17:
e4:37:75:1f:22:60:69:30:bc:0b:df:c7:d3:45:36:
9d:ef:26:0c:93:5f:cf:d1:35:a2:cb:53:a7:7c:04:
ef:3d:f6:91:c5:1c:96:41:05:5d:34:7e:3c:5a:f1:
68:6d:33:9f:92:8e:b3:5c:2e:1d:d6:4e:a0:36:8a:
c4:33:a1:9d:5d:97:53:dd:d3:63:1a:d3:54:c1:a1:
a3:ea:eb:48:a1:f7:79:33:5b:6a:13:e0:83:21:ac:
0c:85:2c:c4:3e:3d:bb:a0:4e:e6:f4:8c:b3:d5:44:
38:ec:23:e6:cd:d0:07:67:2f:a4:66:8f:50:2f:29:
ff:21:11:8b:49:95:d9:ee:b5:b1:e5:da:69:fa:17:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:25:6B:C3:9B:72:1E:97:57:D7:4D:FC:5C:44:17:8C:CF:A1:8A:8C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uyVrw5tyHpdX1038XEQXjM-hiow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ea0::/44
Signature Algorithm: sha256WithRSAEncryption
06:bc:df:24:93:a1:51:f3:fd:c2:f4:9d:e6:de:f8:68:8b:30:
b6:30:4a:ff:dc:a8:f5:fb:00:b3:ec:fd:bb:99:7e:02:52:31:
73:81:06:80:a6:8c:32:81:90:e5:cb:71:0f:72:d0:c0:a3:5d:
cb:0c:4c:c3:42:2c:56:d0:58:01:26:5c:1d:65:48:81:21:0f:
f0:cd:85:56:f1:a9:8b:ff:af:2d:d7:25:9b:3e:36:f4:42:fb:
c8:48:85:e6:8b:06:b0:e7:4e:df:5c:8a:9e:c0:3e:c9:1e:37:
48:de:ab:35:33:c3:64:2a:4c:62:8f:d2:e6:10:2c:4d:97:65:
9f:3f:45:f7:8c:cb:cd:5d:85:d3:e8:bd:ec:12:fb:de:aa:b3:
f6:99:c7:52:64:39:1c:85:a2:40:8f:b6:de:ea:70:40:fb:e2:
9d:b7:7b:85:ac:0f:62:b4:d9:af:69:ec:d3:42:91:fb:b0:e7:
0b:ac:72:29:83:f3:6d:ae:03:7e:90:56:a9:8b:28:09:a3:2d:
32:8f:2c:65:52:a8:a3:aa:3c:32:1a:3d:f8:81:9b:67:8b:cf:
f5:5b:42:65:55:00:12:a4:13:94:b8:cd:7d:e3:60:46:53:d2:
24:c2:f7:35:97:9a:cc:a5:72:e5:d5:fb:a5:28:a2:e6:00:48:
d2:b8:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:51 2025 by rpki-client