Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v5G-CROjrqtvnLtFeCjXMWUsZIo.roa
File: v5G-CROjrqtvnLtFeCjXMWUsZIo.roa (raw, json)
Hash identifier: jqhvcPz5nmzW3BedQdSZv8eUoLFqiC4ExxcEHDu2T0w=
Subject key identifier: BF:91:BE:09:13:A3:AE:AB:6F:9C:BB:45:78:28:D7:31:65:2C:64:8A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521FC39C91BA83EFFEA61B63F6475D1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v5G-CROjrqtvnLtFeCjXMWUsZIo.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199829
IP address blocks: 2a0e:b107:1ef0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fc:39:c9:1b:a8:3e:ff:ea:61:b6:3f:64:75:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf91be0913a3aeab6f9cbb457828d731652c648a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:2f:f1:16:3b:b5:47:27:18:04:37:7b:a5:
99:1e:bd:8d:f0:63:f8:a5:41:a9:26:16:44:67:82:
41:fa:03:d7:b0:31:25:f2:c2:b5:75:ef:11:78:13:
4a:17:86:7a:44:df:21:2b:1d:3a:88:8c:0e:5e:94:
50:f5:53:b3:5b:4c:92:40:5a:ab:87:0b:36:df:e7:
a6:d1:18:99:ca:91:19:18:81:38:53:b6:96:a2:5c:
ed:b4:68:86:b8:cb:2e:3d:ad:af:3b:c6:a2:70:68:
5b:88:6d:df:f2:95:de:ca:5c:f2:fb:f6:f0:61:a8:
ac:bb:cf:d2:7b:5e:c4:74:d0:5b:43:83:26:9a:d1:
dc:f7:ae:75:05:b1:0b:3b:26:96:d5:77:14:66:02:
85:40:77:50:4d:fb:f8:34:3b:90:e1:af:b4:cb:ff:
43:28:b9:a9:d6:93:99:af:c3:1e:9f:66:a6:c6:33:
3a:4a:87:68:e0:7c:f8:da:3e:69:34:8c:7b:93:1e:
3e:e3:04:fb:af:55:b5:1e:8b:3a:9f:53:6c:3b:52:
b8:f5:48:cc:56:95:f3:02:ba:fc:55:1c:e3:02:5f:
65:e5:1d:91:db:14:cd:39:e1:3b:d7:77:7c:1d:1e:
ea:1b:27:25:2d:5a:ee:f9:d4:55:fd:9d:bb:52:41:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:91:BE:09:13:A3:AE:AB:6F:9C:BB:45:78:28:D7:31:65:2C:64:8A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/v5G-CROjrqtvnLtFeCjXMWUsZIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ef0::/44
Signature Algorithm: sha256WithRSAEncryption
4d:94:6e:d5:b9:59:85:42:6a:74:f7:52:40:a0:d1:02:f8:11:
e9:51:68:d1:f4:fa:f9:39:4a:fc:6c:bb:69:6d:c9:c8:cb:aa:
75:8a:5f:93:a4:de:9f:28:8e:8e:b3:13:b5:5f:7e:1c:92:ed:
33:06:5c:7a:ba:be:96:cf:21:2c:a5:19:e4:72:7c:92:65:b6:
b1:86:e8:95:31:3a:8f:63:a3:be:f4:b5:43:16:d6:04:2a:f2:
70:ed:22:3b:94:f0:aa:60:b6:05:7f:28:1c:8d:13:0f:0c:52:
b2:38:10:fc:00:d3:60:88:a6:2e:6b:76:b5:3f:78:8a:98:b9:
b1:41:40:3f:0c:09:0b:3f:9f:e0:93:98:a4:2c:9a:4a:60:07:
23:9f:16:6a:4e:1e:08:43:5b:81:63:f3:62:76:ee:28:0c:9e:
7a:80:af:e6:8d:e4:e4:39:47:a7:cd:17:b8:1e:5c:84:b3:65:
41:16:36:b7:57:44:87:25:6e:3c:a7:3a:6e:aa:82:31:47:8b:
3d:3f:26:fe:df:12:aa:a9:b7:88:b0:c2:b3:12:04:07:58:65:
1b:15:6d:29:fc:f9:3f:6a:0e:8a:fd:2c:68:72:ce:b3:52:9f:
fd:06:3a:64:82:fb:ed:89:a3:3c:75:4f:31:74:7e:40:69:89:
cf:10:4f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:21 2025 by rpki-client