Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/lk2DKx6tMZ4QVeIQ4n9LUxby2mQ.roa
File: lk2DKx6tMZ4QVeIQ4n9LUxby2mQ.roa (raw, json)
Hash identifier: g/j+F0OdRQ6yoH4DQlzMOgxK5K/3yYMtnzs95xrt8uU=
Subject key identifier: 96:4D:83:2B:1E:AD:31:9E:10:55:E2:10:E2:7F:4B:53:16:F2:DA:64
Certificate issuer: /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial: 019427B51348E52EDB60853E7FC42AFB009D
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/lk2DKx6tMZ4QVeIQ4n9LUxby2mQ.roa
Signing time: Thu 02 Jan 2025 15:49:25 +0000
ROA not before: Thu 02 Jan 2025 15:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39702
IP address blocks: 2001:678:a9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:13:48:e5:2e:db:60:85:3e:7f:c4:2a:fb:00:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Validity
Not Before: Jan 2 15:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=964d832b1ead319e1055e210e27f4b5316f2da64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:0b:e2:5e:c3:d8:75:c3:e2:09:f8:dd:9f:
48:aa:75:e0:c2:9d:0b:b5:d4:d0:cc:2a:13:75:ff:
57:2f:89:ab:7d:58:af:0c:3c:c6:09:e4:2a:4e:8b:
5c:5a:c5:6d:3c:0b:97:73:10:ba:86:e5:25:30:03:
9e:6b:3a:2e:d1:59:9e:db:d3:1e:5e:b8:6d:52:b9:
1f:2f:ec:ee:ec:28:30:00:c2:45:7e:dd:54:f5:a1:
51:a3:35:a6:9b:78:60:cf:67:98:81:36:c0:fb:e5:
75:28:5b:f1:12:1a:6d:49:24:74:c5:db:f6:e4:db:
90:ae:21:b1:69:f6:42:38:92:ec:ae:19:8a:a3:65:
6b:6c:92:ee:53:4f:a2:31:6f:3f:9c:7b:63:ea:e7:
8b:c0:96:d4:7d:b3:c9:14:d6:61:f2:b0:d2:e5:be:
94:bd:09:b4:1d:cd:47:e9:c6:cd:dc:7f:39:9c:6c:
e2:d8:6b:8e:4d:3a:6a:bb:61:cd:46:71:39:a0:38:
22:ef:e9:94:34:ae:4e:e5:7d:28:ca:de:8f:1e:c2:
6c:19:af:45:ce:0c:55:af:c3:50:97:65:30:80:79:
de:bf:7a:ce:69:e4:42:a0:bf:f6:c5:da:f9:21:8c:
6b:ee:96:86:e4:aa:09:e9:96:be:33:90:e4:2f:3a:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:83:2B:1E:AD:31:9E:10:55:E2:10:E2:7F:4B:53:16:F2:DA:64
X509v3 Authority Key Identifier:
keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/lk2DKx6tMZ4QVeIQ4n9LUxby2mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a9c::/48
Signature Algorithm: sha256WithRSAEncryption
9c:83:e4:c2:bf:fb:b4:1d:45:ab:d0:57:12:fa:96:18:09:20:
13:c9:b0:7a:a2:dd:18:c9:60:83:ed:b7:bc:80:fe:de:1e:c0:
91:77:9a:95:f9:d4:18:d4:5b:19:6a:f1:40:e1:56:6b:4e:39:
e9:ac:19:88:68:5c:a2:92:6c:bd:3d:fc:01:55:32:c3:9b:57:
8f:17:c1:e4:6f:90:de:6a:e5:6e:cd:04:a1:1a:f1:da:06:ef:
bb:ab:86:76:8c:49:da:64:8d:92:c7:e6:63:6a:37:96:00:28:
25:de:29:84:45:63:bd:c6:db:70:8a:69:34:9e:01:8a:76:49:
e3:47:d9:d2:5f:89:68:1c:82:c1:cf:df:73:e1:ae:e1:77:d5:
b0:34:5f:e1:2b:20:1d:6e:dc:b4:13:e1:39:d6:43:69:e4:24:
ca:71:ca:9f:03:ab:40:0a:1b:47:fc:73:65:1e:9f:d6:ea:5d:
31:58:cd:37:59:6a:0c:1e:ee:aa:9c:99:b9:44:a6:6f:c4:11:
90:96:e0:34:d4:0e:aa:ca:75:88:29:5b:58:a5:97:e9:13:b1:
95:ce:bf:d8:fb:c0:70:d8:55:ce:24:53:f4:0f:68:7f:f8:48:
a2:88:ff:b6:ec:5e:33:40:ca:a8:d1:77:7c:eb:1e:92:46:aa:
77:92:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:31 2025 by rpki-client