Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wfxQUJfhfnXUcQIVLzBjNOSQVM0.roa
File: wfxQUJfhfnXUcQIVLzBjNOSQVM0.roa (raw, json)
Hash identifier: e4qEBg0jd1xAKJyzfujEaNbTMugBzccv8+DgU3J/XDM=
Subject key identifier: C1:FC:50:50:97:E1:7E:75:D4:71:02:15:2F:30:63:34:E4:90:54:CD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521FA4CE75171919E5A9B04B6348DCD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wfxQUJfhfnXUcQIVLzBjNOSQVM0.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199304
IP address blocks: 2a0e:b107:16c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fa:4c:e7:51:71:91:9e:5a:9b:04:b6:34:8d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1fc505097e17e75d47102152f306334e49054cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:55:0a:93:e8:ef:b8:37:b3:1d:a8:c4:bc:
90:9c:fc:a5:0b:f7:a4:19:66:57:fc:d3:9e:c9:fd:
f0:7e:24:d7:9e:61:a8:bd:9a:b0:d6:fe:04:cd:c6:
f9:b0:ac:db:20:f1:71:1f:3e:f7:76:4a:7e:f9:e9:
71:6b:8e:f5:5d:ac:85:bb:81:e5:2e:49:17:a8:5f:
88:a4:ea:bd:a2:de:2d:51:75:7d:93:c7:c7:ea:d0:
b9:d2:91:54:ad:4c:ca:02:22:a9:f8:04:5b:05:eb:
b3:f2:c1:63:40:92:dd:b9:69:06:7f:dc:26:de:4a:
bf:d6:1b:25:f6:31:b4:6a:90:cf:77:c0:89:db:91:
a4:43:d1:ec:90:06:ff:3f:54:e1:07:63:17:83:73:
a3:65:d1:bf:87:96:ad:68:ce:1d:f9:7a:e5:fa:df:
bd:a8:ee:8f:9c:c9:f1:17:bf:71:c3:e2:a1:c9:4f:
13:41:5a:45:9c:1e:f7:0c:d9:16:0e:9c:4a:56:80:
62:00:d7:6c:64:f5:31:73:05:9c:af:8b:27:10:e2:
8c:d2:37:5e:a0:ff:be:ff:8f:96:43:01:77:28:6c:
4b:ea:fc:80:e3:cf:e4:4a:61:f4:85:ea:91:56:21:
4f:26:7d:27:82:cb:16:12:ae:45:40:72:eb:f7:f9:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FC:50:50:97:E1:7E:75:D4:71:02:15:2F:30:63:34:E4:90:54:CD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wfxQUJfhfnXUcQIVLzBjNOSQVM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:16c0::/44
Signature Algorithm: sha256WithRSAEncryption
5b:e3:e0:39:56:c0:76:25:6c:d6:49:05:7a:8a:7c:1e:fb:2f:
17:7d:2a:f1:eb:2f:3e:5f:44:02:6f:50:ce:8c:65:da:5f:a3:
0f:d6:a6:d7:ec:a4:df:c0:6b:58:2b:5e:25:d1:f9:b1:63:a8:
1d:8b:9d:5c:b5:1b:22:6a:aa:b5:4f:ba:a0:fa:39:e8:09:36:
e4:d1:4e:b8:04:c7:32:f7:88:17:3f:cd:90:ab:48:92:3d:37:
58:70:10:e3:0a:4b:fe:13:61:4e:77:d3:41:93:86:cb:34:4b:
ac:29:7a:a4:45:85:a5:12:4a:9c:04:89:02:ee:79:14:47:18:
b5:d6:72:49:cd:c9:9a:24:46:f8:68:89:26:d5:eb:af:f1:7d:
87:c0:e1:78:3d:ae:36:96:b7:83:9e:79:e3:59:6b:e3:28:b1:
f4:36:12:0f:3d:a0:62:e3:57:ec:da:8e:bf:15:2d:62:c4:83:
49:24:5b:0c:12:6f:09:4f:89:6a:82:ef:61:da:0b:55:60:7e:
2b:95:b2:cf:ac:e2:27:76:fb:f6:a1:87:ec:24:cb:66:8b:9f:
04:fc:3d:78:4f:6a:e8:0d:6f:60:03:0e:31:3b:eb:11:99:8a:
97:13:ac:57:12:e0:9e:d9:aa:76:fb:14:b1:85:01:04:c2:04:
28:90:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:24 2025 by rpki-client