Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uzJV4TNa7gJK-4MhMXY3L6H1ZXw.roa
File: uzJV4TNa7gJK-4MhMXY3L6H1ZXw.roa (raw, json)
Hash identifier: gtZSF13LKs42iFLqyYPqJAXXKJEtKZJgdcAQYveet/Q=
Subject key identifier: BB:32:55:E1:33:5A:EE:02:4A:FB:83:21:31:76:37:2F:A1:F5:65:7C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425226408B66732CDD6A2FFA353A2358A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uzJV4TNa7gJK-4MhMXY3L6H1ZXw.roa
Signing time: Thu 02 Jan 2025 03:49:58 +0000
ROA not before: Thu 02 Jan 2025 03:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212508
IP address blocks: 2a0e:b107:dd0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 19:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:64:08:b6:67:32:cd:d6:a2:ff:a3:53:a2:35:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb3255e1335aee024afb83213176372fa1f5657c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:5a:9a:f1:de:2c:0e:ac:e8:12:0e:bf:dd:
f2:09:83:c6:6d:8d:62:7d:8a:a6:e9:62:57:b0:60:
dd:9c:b0:7c:66:97:04:8c:e2:28:19:bd:a8:67:c2:
6d:3b:d4:85:f6:50:a8:82:13:78:a1:4e:d0:ad:9d:
9d:ad:47:70:e0:a3:ca:b4:3d:20:f6:de:65:cd:3d:
af:79:7d:e0:27:a2:78:11:75:1a:a3:e2:7a:c4:8e:
35:28:ca:31:2c:38:9a:eb:a2:fe:5b:47:88:79:51:
cb:c2:71:ce:fa:79:3a:1f:84:25:40:34:60:26:08:
ee:70:ad:fb:33:4c:f4:d5:b9:0e:42:de:b2:96:cc:
c6:2b:d0:42:44:4b:aa:89:48:e4:91:76:69:b5:af:
30:2d:c3:63:a3:a0:dd:e7:1f:60:bf:33:ee:ca:26:
27:04:74:14:b1:89:35:5f:4a:85:e0:24:61:c3:52:
78:ca:08:2d:4e:ee:fc:de:29:c9:4c:0e:c7:0b:53:
c0:eb:43:96:52:b1:2d:b3:3b:ba:18:34:78:d6:6e:
fc:3b:9a:13:a6:93:f6:8c:aa:97:fc:03:49:24:f4:
58:2c:3a:3c:7d:4e:40:88:12:9e:00:c6:6e:1e:34:
45:10:8b:cc:28:88:29:b9:83:7b:e4:59:ea:d4:7b:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:55:E1:33:5A:EE:02:4A:FB:83:21:31:76:37:2F:A1:F5:65:7C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uzJV4TNa7gJK-4MhMXY3L6H1ZXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:dd0::/44
Signature Algorithm: sha256WithRSAEncryption
b2:99:ac:9e:3b:8d:02:8e:4d:66:cf:60:29:fe:94:5e:60:e0:
25:b7:92:19:b5:58:45:60:91:fc:cc:49:c3:e1:6d:39:cb:23:
27:d9:91:79:78:88:5a:84:11:e9:ff:be:91:c9:c3:77:20:79:
21:df:31:4f:9b:46:e5:b9:38:97:a7:4a:0d:e0:82:ae:5e:9e:
cf:76:ed:b2:60:97:47:04:b6:66:3b:19:d6:20:a4:26:a3:ea:
da:4c:fb:16:c0:23:fc:c6:d9:e6:7d:b0:c7:55:d9:e1:ef:9c:
be:68:c1:ab:b7:95:fd:9f:79:8b:0c:a0:9d:c5:7c:31:68:d0:
65:54:91:34:47:ea:dc:b9:49:90:72:e5:80:c2:81:2f:12:06:
72:52:40:c7:b7:c0:af:7b:46:fe:b5:b2:a5:70:a3:2e:61:1e:
9d:aa:e0:c8:09:ca:f2:64:09:7c:f6:b0:61:67:aa:34:7b:5d:
da:f5:ab:eb:ae:c0:cc:ec:ff:78:c1:73:2b:80:da:f3:c2:71:
ce:56:12:80:c7:a7:53:30:8f:ea:6c:00:1b:5a:36:b5:81:27:
56:97:a4:87:79:9e:58:67:5f:27:46:32:20:b5:9a:d7:ae:b8:
d0:4e:2b:be:a2:3e:08:95:d4:20:c2:94:18:df:3d:97:2f:a0:
92:cb:dc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 05:42:03 2025 by rpki-client