Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ce7E0QCfvmffc9esHCI6C-x7-8o.roa
File: Ce7E0QCfvmffc9esHCI6C-x7-8o.roa (raw, json)
Hash identifier: JDGeL6CF/tPxeq2Pj4hHScTm1Po3/Ho/4I5tLC8K6yk=
Subject key identifier: 09:EE:C4:D1:00:9F:BE:67:DF:73:D7:AC:1C:22:3A:0B:EC:7B:FB:CA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196B107A9F6FCAD2F9855BD2307C87D7E4B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ce7E0QCfvmffc9esHCI6C-x7-8o.roa
Signing time: Thu 08 May 2025 17:53:11 +0000
ROA not before: Thu 08 May 2025 17:53:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199580
IP address blocks: 2a10:ccc1:1333::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:07:a9:f6:fc:ad:2f:98:55:bd:23:07:c8:7d:7e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 8 17:53:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09eec4d1009fbe67df73d7ac1c223a0bec7bfbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:0d:02:3d:35:99:5e:ea:32:a9:80:a7:76:
31:6b:07:09:5b:71:bd:cd:93:5f:b2:be:1d:09:8c:
75:c3:39:fc:bc:e6:9d:16:02:a6:36:67:06:79:6a:
e2:8e:84:d9:7a:ee:bc:cd:93:fd:6d:c0:7e:97:3a:
30:49:d0:ba:7e:fc:5a:a4:8c:8e:ea:9e:4f:6a:0e:
b3:47:b4:81:22:f3:f7:98:78:98:b5:1d:03:7b:7b:
b6:4b:ea:92:95:1d:de:9a:64:4c:bb:19:b2:e9:cb:
4c:bc:79:50:aa:77:b6:d9:b3:fb:4d:12:e5:3b:57:
55:a8:f3:5e:6c:bf:fb:46:9e:ea:71:47:ee:d5:5b:
90:82:d6:d0:cc:f5:aa:c8:ec:e1:82:9a:8b:85:b6:
08:4a:28:a0:a9:0d:c2:af:41:9f:f3:91:50:8b:94:
f0:53:9d:90:71:80:ec:ef:30:1b:1c:98:f3:2e:c3:
df:91:c5:fd:fb:63:3b:d2:ae:41:d1:89:61:d9:bc:
55:a4:24:a0:dc:a0:2a:ee:e6:4d:53:79:7f:0b:d3:
79:24:48:9d:b1:f3:ab:fb:29:22:d0:74:54:d0:d9:
32:3f:a3:ea:f0:0d:23:61:d7:31:d1:b1:d0:48:08:
50:2d:24:3a:2d:d6:31:53:97:6e:7e:69:78:ae:9f:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:C4:D1:00:9F:BE:67:DF:73:D7:AC:1C:22:3A:0B:EC:7B:FB:CA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Ce7E0QCfvmffc9esHCI6C-x7-8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc1:1333::/48
Signature Algorithm: sha256WithRSAEncryption
69:f9:33:9d:7f:61:42:d9:28:3e:c6:bc:be:0f:e8:5e:6a:dc:
5b:16:bb:39:3c:1e:73:d5:31:05:12:98:46:e1:fd:bf:57:14:
04:24:69:81:b2:b2:ef:6b:cb:31:fb:e7:92:5a:0a:fb:6c:aa:
af:ea:d3:d0:7e:99:18:3d:59:32:d3:3e:5a:96:5b:1c:60:ab:
d6:a3:09:4d:e4:d0:d2:7c:6a:38:0d:01:cf:53:d4:2b:64:db:
06:4d:be:d5:be:ba:31:80:46:f3:a2:67:a1:a4:14:82:2a:c1:
28:f6:32:0e:27:c2:00:0b:50:f9:64:65:75:b8:8d:6c:bb:70:
e1:8f:82:31:40:ac:88:26:5b:ee:6e:f0:b4:b1:61:ff:53:0f:
70:ff:55:55:12:78:a8:d4:3d:81:9f:45:5b:70:f9:6d:6a:8a:
8f:44:b0:3c:5f:20:32:af:3c:df:a8:e9:ae:ec:7d:84:d4:9d:
7c:78:98:3d:5a:9d:2d:bd:2e:1b:bd:e1:92:19:b8:ae:66:f6:
95:f7:75:f9:c3:87:f4:82:2d:aa:93:44:b7:7f:c3:d8:28:cc:
cd:93:cb:fe:9c:d4:e4:aa:6a:20:c8:15:85:ee:7c:e9:2c:80:
81:87:a8:a3:d1:cc:f1:54:67:8c:1b:da:9d:d0:67:d9:79:b2:
f6:6e:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:47:16 2025 by rpki-client