Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eJ9Yt3OaiTSadL9TN8OhXzHg5EE.roa
File: eJ9Yt3OaiTSadL9TN8OhXzHg5EE.roa (raw, json)
Hash identifier: fAlLDwADMmRswGONqeZ/DGf6nyeTesBjf6U5vlAc1t0=
Subject key identifier: 78:9F:58:B7:73:9A:89:34:9A:74:BF:53:37:C3:A1:5F:31:E0:E4:41
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01968AC90260D31B94C534D9C80A3A7975A3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eJ9Yt3OaiTSadL9TN8OhXzHg5EE.roa
Signing time: Thu 01 May 2025 07:39:11 +0000
ROA not before: Thu 01 May 2025 07:39:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214344
IP address blocks: 2a10:ccc6:6661::/48 maxlen: 48
2a10:ccc6:6662::/48 maxlen: 48
2a10:ccc6:6666::/48 maxlen: 48
2a10:ccc6:666d::/48 maxlen: 48
2a10:ccc6:666e::/48 maxlen: 48
2a10:ccc6:666f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 12:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:c9:02:60:d3:1b:94:c5:34:d9:c8:0a:3a:79:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 1 07:39:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=789f58b7739a89349a74bf5337c3a15f31e0e441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:d1:d7:95:5a:40:cb:ed:22:0e:58:76:f3:
34:8e:ff:43:47:4c:93:90:0f:c0:25:1d:81:83:5e:
80:d3:c4:0e:16:41:ce:49:73:05:e0:56:37:b7:c2:
26:5d:a2:1a:13:82:09:49:7b:6c:15:da:1a:07:b4:
8d:f3:15:5a:cc:0e:31:62:5d:9c:c8:5c:52:a6:e8:
93:2b:a8:cc:e1:ec:08:24:97:90:38:9d:1b:11:a1:
d0:5c:de:da:c3:3f:dc:56:bd:13:27:ec:00:6f:bf:
61:f3:db:f2:39:9e:22:4a:20:4b:2f:ed:d4:9c:c2:
2c:6b:40:d1:39:f5:73:77:09:9d:86:4d:ac:0b:72:
69:41:c2:70:56:b5:e6:05:f2:bf:3c:84:c1:fd:b9:
5c:56:3a:1f:73:76:d0:1a:9c:2f:d2:0b:41:c2:67:
76:fd:b0:1b:8d:be:e4:ba:11:d1:cb:cb:a4:b5:62:
4c:32:17:37:1b:20:15:c1:37:c4:63:6a:6d:e3:f3:
28:06:90:a3:49:a3:f3:12:8f:9f:6e:8b:e4:02:99:
6c:e2:7b:b5:10:d3:45:14:23:85:35:86:d1:3d:58:
6f:ae:2f:4e:60:ec:a1:28:a5:f6:a4:7b:a6:28:f1:
4c:c9:df:8f:99:5c:e3:85:a1:77:ce:43:7a:b9:41:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:58:B7:73:9A:89:34:9A:74:BF:53:37:C3:A1:5F:31:E0:E4:41
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eJ9Yt3OaiTSadL9TN8OhXzHg5EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc6:6661::-2a10:ccc6:6662:ffff:ffff:ffff:ffff:ffff
2a10:ccc6:6666::/48
2a10:ccc6:666d::-2a10:ccc6:666f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8c:43:41:69:9d:51:49:c7:fc:a9:ce:aa:c7:5b:6d:fb:7b:19:
c5:dc:b4:c7:86:f1:63:26:d9:46:3a:91:24:06:42:81:1c:aa:
be:b9:f1:a2:c2:e9:80:81:33:56:6c:f4:29:5d:c3:44:f4:cc:
78:b2:04:3e:27:eb:a3:ac:7c:27:04:22:97:ee:bc:73:47:ad:
cf:7a:ac:b4:2f:64:05:4c:0e:73:c1:5c:63:9f:0e:14:8a:0b:
82:bf:45:88:70:c8:8c:17:d2:0d:7d:d5:3f:ee:9c:8e:36:73:
63:79:30:3f:db:f1:67:9b:bd:d1:6f:fa:0e:e5:87:2b:60:b6:
02:75:7b:f9:fa:07:2b:77:9f:fb:5c:09:6b:17:f2:2a:f6:d6:
ac:84:f0:83:86:4d:77:8c:d6:e2:cd:31:22:1a:69:39:09:8b:
39:3d:65:3e:8d:72:f7:46:bd:5c:01:17:37:03:8c:05:00:58:
70:e8:81:64:56:bf:68:8a:11:b2:cf:bc:02:0b:01:c5:05:7c:
9a:f6:da:30:05:2f:cb:79:45:27:01:3b:6f:19:85:04:4b:9d:
e6:74:0e:ff:df:b9:9a:88:1e:5c:66:9a:e7:20:9c:ec:e0:fb:
c0:c2:bf:e0:97:c0:b8:7f:a6:e2:51:b9:2b:23:62:1c:a6:0d:
de:f1:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:25:09 2025 by rpki-client