Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z48INocvPyqVrSpceyH7cWknoZU.roa
File: z48INocvPyqVrSpceyH7cWknoZU.roa (raw, json)
Hash identifier: Us0zct0ZtIoavJT+KZjgdiEi+1nei4Z5wxvg47Ig6Lo=
Subject key identifier: CF:8F:08:36:87:2F:3F:2A:95:AD:2A:5C:7B:21:FB:71:69:27:A1:95
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194C738F7B1FB04B003D0464F89A4BC4664
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z48INocvPyqVrSpceyH7cWknoZU.roa
Signing time: Sun 02 Feb 2025 15:13:06 +0000
ROA not before: Sun 02 Feb 2025 15:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214223
IP address blocks: 2a06:de01:90::/44 maxlen: 48
2a10:ccc0:160::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c7:38:f7:b1:fb:04:b0:03:d0:46:4f:89:a4:bc:46:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 2 15:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8f0836872f3f2a95ad2a5c7b21fb716927a195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:e8:0d:a0:a5:db:a4:a2:5e:1e:98:16:87:
05:51:5b:ca:14:ed:0b:1b:1f:9c:a7:72:07:86:e5:
95:d1:02:0a:40:bd:e1:66:94:0c:1a:e3:0c:3e:c6:
42:61:44:48:f9:63:a3:35:f4:63:29:b0:c7:f0:12:
33:2c:fc:81:53:69:39:26:10:59:e4:31:98:aa:2f:
d3:55:8f:e2:ae:bc:00:28:b1:f0:e6:9f:a0:b4:23:
8f:b2:c4:15:b2:b2:17:3c:7f:68:41:09:22:33:bc:
89:7f:0f:47:4b:77:96:af:4a:f4:27:e2:d7:ab:39:
2b:fd:7f:a3:1c:99:dd:9d:d3:8e:41:cb:14:7a:a6:
95:52:36:6d:13:7e:86:02:be:52:42:80:fc:28:15:
d8:51:1e:8e:58:95:01:a0:b3:96:7d:cb:bf:9c:2f:
d8:3e:29:ae:42:b1:e5:dc:49:b2:ff:86:98:1f:b6:
13:1f:cb:66:aa:49:08:2a:b7:bd:8f:d9:69:73:cb:
8f:1c:ae:7a:39:47:c3:8e:8a:93:9f:dd:57:29:db:
de:e4:52:bf:1a:c6:e0:64:cb:7d:47:f3:2f:16:05:
d4:e3:b1:02:56:bf:00:77:6c:7d:3d:41:48:f5:24:
03:fd:3e:d1:8b:d2:34:96:e1:b3:a9:0c:bb:8f:2f:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8F:08:36:87:2F:3F:2A:95:AD:2A:5C:7B:21:FB:71:69:27:A1:95
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/z48INocvPyqVrSpceyH7cWknoZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:90::/44
2a10:ccc0:160::/44
Signature Algorithm: sha256WithRSAEncryption
14:32:27:2e:38:99:e6:54:82:ed:a9:be:65:ac:bd:a9:32:26:
92:cc:13:09:2d:6c:57:80:f9:7b:29:1b:62:dd:6c:3e:46:07:
43:b2:a4:ca:d0:61:b1:d1:19:d6:cc:26:2a:87:b3:5a:82:95:
b1:76:8a:52:63:8c:e5:e1:76:e0:90:fe:43:59:d4:62:82:e3:
3e:5f:9e:f3:66:f9:22:fa:a4:da:e0:22:f2:aa:38:44:63:02:
02:5f:5b:b8:aa:4b:fe:3e:7a:7c:11:12:c1:91:ec:6b:5a:4a:
f4:63:ae:b0:78:ee:5e:b2:f9:3a:3c:cd:66:23:5b:9f:bc:89:
f2:54:23:72:3f:f1:ca:6c:a1:46:f9:9c:e1:d7:09:03:80:6b:
03:c6:f2:90:fe:b0:43:78:b7:e4:f5:4f:90:26:0c:6e:78:9d:
91:c5:f2:d2:c1:1a:87:87:87:c2:32:de:57:3f:4f:64:a0:cf:
90:c7:f0:4a:10:ef:b8:af:5d:83:d7:b1:6a:79:e5:14:29:33:
26:21:e6:e9:c0:90:3b:ee:26:53:67:41:72:64:63:ac:1c:06:
ff:9f:f0:55:eb:d0:91:6d:5f:ab:cf:fd:c4:58:16:77:2c:0c:
fe:ea:45:d9:02:bf:d6:91:b5:e8:c7:f7:c9:3e:99:9b:05:80:
71:c5:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:49 2025 by rpki-client