Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rX9-LkGn4yfU20ilVsfhNSnXtqs.roa
File: rX9-LkGn4yfU20ilVsfhNSnXtqs.roa (raw, json)
Hash identifier: K7uK9n/zJ5L1ewGsIzhFvHU1NpDhODoNjbPk/bl3B1M=
Subject key identifier: AD:7F:7E:2E:41:A7:E3:27:D4:DB:48:A5:56:C7:E1:35:29:D7:B6:AB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019697393586223633078B8D32BE315974E1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rX9-LkGn4yfU20ilVsfhNSnXtqs.roa
Signing time: Sat 03 May 2025 17:37:10 +0000
ROA not before: Sat 03 May 2025 17:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213426
IP address blocks: 2a06:de00:1f00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:39:35:86:22:36:33:07:8b:8d:32:be:31:59:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 3 17:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad7f7e2e41a7e327d4db48a556c7e13529d7b6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:29:ce:11:85:39:2e:3a:5f:f7:f1:31:2f:
75:2f:29:84:13:22:57:2a:6c:ab:8f:35:6d:35:ef:
d4:1e:09:87:c4:26:03:98:fb:8d:e4:0e:f2:96:6f:
7e:64:82:40:12:59:69:42:d8:a8:3f:ff:a2:6a:d0:
17:37:73:78:ec:4e:64:09:2f:6c:3d:e8:15:bb:bd:
f2:2f:7e:c0:0f:57:5c:1f:ca:f3:59:29:5c:a3:18:
06:99:c4:70:a2:9f:8c:b7:ae:46:65:a7:24:24:7d:
a7:91:a8:d0:58:29:64:57:49:54:dc:62:66:86:58:
b8:eb:7d:cc:83:70:e4:62:8b:57:fc:7f:11:50:ea:
40:31:62:e8:4f:22:4a:49:a2:dd:71:4a:c4:a8:2e:
1a:8b:86:8a:10:47:9c:71:e4:e8:6c:6b:37:15:7c:
40:7b:01:ab:80:02:02:44:0f:d5:55:37:01:b6:4a:
1f:9f:a2:a0:3e:cb:1e:0a:4d:16:66:22:db:ce:25:
bf:01:12:a8:f8:3d:bb:4c:0e:b2:b6:e3:28:d1:fe:
22:35:fe:ae:75:e2:52:e5:72:f8:ae:ec:ef:ee:5c:
e4:e8:ff:f4:d1:1c:e3:77:a6:65:e7:64:da:a1:b6:
43:7d:ae:48:6d:fd:c7:3d:1f:db:d0:8e:bd:45:43:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7F:7E:2E:41:A7:E3:27:D4:DB:48:A5:56:C7:E1:35:29:D7:B6:AB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rX9-LkGn4yfU20ilVsfhNSnXtqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:1f00::/44
Signature Algorithm: sha256WithRSAEncryption
55:55:b9:9d:af:3a:34:36:2e:7f:a8:5b:ca:68:99:9d:5c:bf:
10:cc:6b:69:31:cc:5b:41:cc:1e:91:e2:65:60:1e:b2:47:2b:
be:9e:0c:71:71:e9:8b:37:b7:a2:49:ac:11:91:82:39:85:fb:
5c:01:a4:ef:58:3f:7b:90:a4:02:94:b8:78:25:92:93:6a:a3:
93:72:74:4b:29:16:ed:68:11:7a:ab:32:a2:e1:9a:be:54:c2:
df:52:58:81:63:26:9e:80:af:08:bd:35:88:6d:0a:20:7b:21:
6c:bc:06:84:17:71:83:2e:67:68:ec:73:2b:46:03:00:ce:ae:
79:df:76:42:9f:1f:bb:36:1e:b1:a1:01:b6:17:97:d0:d2:12:
df:38:c7:1e:0b:2f:8c:a2:3f:7b:2c:20:98:d6:8d:4e:8d:9c:
f8:9c:4c:1a:c9:b0:3d:8c:a8:12:20:ca:4e:22:64:51:c5:a4:
a6:67:28:83:c4:bb:0e:f1:ae:6a:1a:b4:c3:d4:b0:25:44:fb:
9e:d7:fd:7d:38:2c:c9:6e:c6:38:a8:96:4e:6c:20:c7:c5:46:
50:1c:4f:96:84:50:5c:ec:39:a1:65:29:84:51:10:ca:4f:05:
0c:19:7d:06:d2:6f:d5:6b:f9:45:f1:e8:86:61:02:2d:ad:3d:
b1:3f:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:50:05 2025 by rpki-client