Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa
File: xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa (raw, json)
Hash identifier: Ym4zKNNqMflGb0dAEycHEmUQAQN+DoJITr/UvN/UU8U=
Subject key identifier: C4:11:32:EB:10:5F:43:AC:64:58:D9:CC:33:76:FE:F0:FB:35:15:1D
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 019435936319CD78383230BE2B79A34DEE48
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa
Signing time: Sun 05 Jan 2025 08:27:18 +0000
ROA not before: Sun 05 Jan 2025 08:27:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49433
IP address blocks: 2a14:1dc0::/48 maxlen: 48
2a14:1dc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:35:93:63:19:cd:78:38:32:30:be:2b:79:a3:4d:ee:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: Jan 5 08:27:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c41132eb105f43ac6458d9cc3376fef0fb35151d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:d6:71:c0:61:55:ca:fd:81:20:ba:5a:df:
f9:0a:eb:59:d7:74:ea:31:94:1d:d4:1f:02:b6:a8:
51:a5:75:78:fb:e9:c6:e4:d5:e7:a2:22:56:11:fa:
bd:6f:14:70:30:aa:b5:d9:a7:c8:4d:05:fc:b4:11:
6a:bd:61:1f:db:17:78:c8:a0:0c:72:ad:68:7b:8d:
9f:da:66:58:eb:5b:3e:97:74:e1:0d:76:da:ee:00:
98:2e:75:08:eb:08:20:fc:e3:55:65:24:f5:38:60:
ba:0b:b9:0a:f2:1d:4a:2b:6b:92:84:41:a2:7a:83:
a9:49:5a:f8:08:d7:d7:8a:e3:ee:2b:d3:a6:64:20:
21:e0:71:fc:d4:b7:d5:33:92:0d:82:f1:2e:9e:0d:
48:a5:7c:74:0a:49:2e:14:75:e1:32:6e:1d:6a:97:
0e:44:82:05:7b:93:30:9b:4f:4f:2c:4a:37:44:2c:
3f:4d:60:f5:fc:d9:25:7b:b6:f9:85:93:b5:32:76:
b2:3b:7e:ce:3f:aa:68:2f:1b:ec:00:7b:f4:3e:6a:
05:98:a3:84:c9:cf:07:66:e6:11:c2:0c:aa:cc:c3:
c7:a4:60:5b:ce:40:75:b4:90:d9:66:95:bc:e8:c5:
d0:dd:dc:a3:c9:2a:6e:e1:72:ec:f9:55:bc:58:d8:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:11:32:EB:10:5F:43:AC:64:58:D9:CC:33:76:FE:F0:FB:35:15:1D
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1dc0::/47
Signature Algorithm: sha256WithRSAEncryption
0a:30:54:a8:b1:bc:17:2d:8f:55:35:d2:09:47:ae:67:29:c0:
e7:a0:5b:60:2f:4e:2f:78:70:0c:ca:96:25:e8:65:b6:0b:97:
f0:7e:28:db:f2:15:28:fb:7c:ad:a2:ae:25:6a:bf:a9:ae:43:
2e:91:ad:a9:38:5c:a8:1c:6e:56:8c:4d:2b:71:eb:96:e7:fe:
73:1c:45:f8:93:03:dd:2b:c1:51:0a:75:1f:28:b4:9b:2f:65:
47:dd:f7:7f:e6:12:bc:ef:bd:47:35:03:73:c4:6e:25:89:61:
4e:b6:df:ca:4c:11:6e:a6:b9:e7:42:4b:15:4e:21:9d:3c:4c:
b5:3c:78:c2:ea:8f:75:15:ff:57:8b:b6:1d:d7:ad:16:c1:a5:
d3:ad:e0:6a:db:98:3b:67:d8:fd:af:46:ff:e0:a6:0e:47:a1:
f2:bb:82:fb:a9:e7:8f:b6:1a:b8:72:a6:05:51:86:c7:83:16:
8b:90:18:9e:40:dc:b3:ae:37:f5:e8:78:b2:2c:24:26:5c:aa:
46:86:45:8b:81:55:08:a2:7b:b0:86:ae:a0:29:f5:57:da:45:
d4:e6:86:d1:da:39:16:54:ca:f8:8b:23:06:17:15:4d:16:9a:
93:8b:55:44:38:f8:7c:f3:7e:fd:ff:89:f6:71:c9:9f:c5:7a:
24:d8:78:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:45:29 2025 by rpki-client