Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xzZkhmluyI6YJd5Ozk5VkJWckC0.roa
File: xzZkhmluyI6YJd5Ozk5VkJWckC0.roa (raw, json)
Hash identifier: hlz7k2G/QQIIngOy5X63fpMbadzWZepNKs4doFCuwKM=
Subject key identifier: C7:36:64:86:69:6E:C8:8E:98:25:DE:4E:CE:4E:55:90:95:9C:90:2D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019671F9FDFAB9A718852F4181C62CA339C6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xzZkhmluyI6YJd5Ozk5VkJWckC0.roa
Signing time: Sat 26 Apr 2025 12:02:10 +0000
ROA not before: Sat 26 Apr 2025 12:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209935
IP address blocks: 2a0e:97c0:8c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f9:fd:fa:b9:a7:18:85:2f:41:81:c6:2c:a3:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 26 12:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7366486696ec88e9825de4ece4e5590959c902d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:7d:15:04:85:d5:c5:7f:05:ed:32:2e:aa:
05:0f:b6:91:1f:11:22:b9:d3:fc:4c:9f:d6:68:9a:
d2:16:11:21:df:c7:55:42:99:d3:26:a5:9c:a2:9d:
73:f9:7b:b1:14:e1:77:b4:df:02:29:e8:e1:db:af:
fe:db:a5:1e:ba:40:ef:92:b1:45:da:30:96:ef:d8:
73:be:b6:07:a5:7e:9e:0d:49:76:40:9e:a7:9e:fc:
a4:64:59:be:0d:1c:27:ca:db:cb:7b:7b:b8:86:15:
a2:32:18:b8:61:50:8c:7c:18:f3:74:5b:5c:5f:d6:
1b:38:96:75:c3:5a:85:c1:7c:b6:b7:bf:35:f3:71:
b5:9b:cd:ee:6c:64:20:17:e7:b8:64:af:61:3d:26:
09:1a:41:7d:06:9a:fd:ad:56:6d:9f:22:90:06:25:
27:d5:6f:6a:b5:9a:78:48:0f:17:a2:b1:29:ce:ec:
6d:43:ab:b9:49:ec:62:ee:70:6b:e2:dd:ab:24:1b:
e7:a0:76:ac:54:1f:2c:5a:a4:9e:5b:8c:38:94:40:
7b:f6:81:d0:c5:a4:30:d3:42:6d:e3:44:93:80:ca:
35:22:23:0d:a2:72:8e:a8:3b:0b:e0:5c:1b:42:04:
7b:82:22:68:4f:a2:13:bb:a1:d7:ef:a1:ce:54:b2:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:36:64:86:69:6E:C8:8E:98:25:DE:4E:CE:4E:55:90:95:9C:90:2D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xzZkhmluyI6YJd5Ozk5VkJWckC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:8c0::/44
Signature Algorithm: sha256WithRSAEncryption
7d:4b:88:f8:ad:bb:ca:68:ca:11:d1:34:cc:76:c5:f4:30:1a:
23:fe:9c:c1:6d:25:0f:4d:2c:23:0f:c4:4f:7c:17:40:4f:b8:
30:1a:f4:ea:19:37:f2:2b:c9:fd:74:d5:9e:92:14:2f:9b:bf:
04:25:09:66:2a:48:f2:0d:e4:88:d7:0a:f5:dd:47:c0:a1:f4:
23:ff:5c:85:b2:62:e7:01:9b:0b:df:49:55:f8:68:e6:ad:d9:
90:0d:ad:98:82:f2:c7:bf:5f:45:45:65:3c:aa:92:c0:23:70:
18:a6:e0:95:21:af:68:50:96:3c:5e:23:4f:dc:58:bc:9e:e8:
5c:59:b5:f0:b8:de:19:9d:29:58:35:bd:1c:39:bd:02:ec:1e:
0c:d6:27:6f:29:3a:08:64:8e:fb:4d:49:2d:73:fb:55:c7:69:
09:3a:f5:ba:1c:7e:40:a1:b5:90:61:70:85:d0:a6:20:01:98:
78:e1:43:6f:53:84:80:e7:94:77:77:5b:0c:96:24:6e:ff:0f:
62:57:fe:ad:78:b8:80:04:8c:bc:9e:fd:92:4d:b4:ba:03:6d:
2c:a0:be:75:35:29:08:22:4f:f2:c9:63:b7:1c:31:8b:0b:45:
45:cb:08:3c:00:8d:30:b7:35:d3:1a:d1:a7:1f:f3:16:69:6f:
11:0b:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:56:24 2025 by rpki-client