Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TS9a7_Ap_dURaKblnGz16p-HSuI.roa
File: TS9a7_Ap_dURaKblnGz16p-HSuI.roa (raw, json)
Hash identifier: YfAu3q2qVxSNMirGnK7j/dMZH6WE1Yho7dGRhAe9Dfo=
Subject key identifier: 4D:2F:5A:EF:F0:29:FD:D5:11:68:A6:E5:9C:6C:F5:EA:9F:87:4A:E2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01965C7E6AD6DA872FFC951DC8E088B56805
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TS9a7_Ap_dURaKblnGz16p-HSuI.roa
Signing time: Tue 22 Apr 2025 07:55:10 +0000
ROA not before: Tue 22 Apr 2025 07:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58087
IP address blocks: 2a0e:97c0:3e3::/48 maxlen: 48
2a0e:97c0:710::/48 maxlen: 48
2a0e:97c0:711::/48 maxlen: 48
2a0e:97c0:712::/48 maxlen: 48
2a0e:97c0:713::/48 maxlen: 48
2a0e:97c0:714::/48 maxlen: 48
2a0e:97c0:715::/48 maxlen: 48
2a0e:97c0:716::/48 maxlen: 48
2a0e:97c0:717::/48 maxlen: 48
2a0e:97c0:718::/48 maxlen: 48
2a0e:97c0:719::/48 maxlen: 48
2a0e:97c0:71a::/48 maxlen: 48
2a0e:97c0:71b::/48 maxlen: 48
2a0e:97c0:71c::/48 maxlen: 48
2a0e:97c0:71d::/48 maxlen: 48
2a0e:97c0:71e::/48 maxlen: 48
2a0e:97c0:71f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:7e:6a:d6:da:87:2f:fc:95:1d:c8:e0:88:b5:68:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 22 07:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d2f5aeff029fdd51168a6e59c6cf5ea9f874ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:7a:10:23:ad:21:22:4e:09:16:94:1c:9a:
1b:74:62:e4:50:4c:42:47:68:95:cc:33:b0:da:6d:
08:ad:a8:54:fd:01:ad:1f:da:a4:91:36:ff:f8:1d:
09:39:a8:b8:56:86:68:02:f4:5d:ea:09:6a:eb:b5:
54:62:d2:51:47:7e:c7:95:a9:22:46:4f:16:a6:9f:
94:e7:29:0b:8b:7f:fe:78:c8:74:fc:88:29:29:44:
9d:7d:e8:5b:a8:c0:88:e4:aa:8b:ba:b9:0a:4e:27:
60:ca:e7:53:e6:20:e1:59:8f:88:3c:bc:2a:9c:46:
1a:13:08:bf:20:6f:14:67:35:6e:16:e0:29:5f:7b:
7d:6a:b3:b6:fc:2a:71:38:cc:5a:0c:cd:bf:f6:da:
18:0b:4b:9f:ea:cc:7b:28:c1:c4:a6:79:85:b4:f2:
38:11:27:13:fe:fc:5c:1e:a6:fe:f4:ef:81:78:38:
c2:59:2f:c1:2e:87:b1:af:46:2b:df:18:d7:5f:42:
e9:93:24:8b:7e:14:92:ed:5e:a6:b6:82:71:dd:33:
fd:aa:cf:5a:ec:5b:a1:62:a0:f4:4c:48:76:57:a4:
26:b7:bb:c8:3c:ee:b2:15:5c:ac:18:f0:4a:91:42:
8b:03:bb:29:7d:18:85:cb:3c:43:d4:6b:e2:03:fb:
40:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:5A:EF:F0:29:FD:D5:11:68:A6:E5:9C:6C:F5:EA:9F:87:4A:E2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TS9a7_Ap_dURaKblnGz16p-HSuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3e3::/48
2a0e:97c0:710::/44
Signature Algorithm: sha256WithRSAEncryption
5d:ed:a3:aa:89:cc:f4:db:5f:31:ee:4e:ea:92:a6:f4:b6:55:
87:43:84:4b:e1:69:9e:26:b5:b3:9e:d6:00:a0:b4:41:e2:e8:
26:d9:ab:38:c2:0a:bb:94:5c:e2:95:4c:64:25:c3:b1:31:e6:
00:0f:59:a2:9c:b6:f2:52:4f:88:69:c4:c6:a9:fa:e2:5a:fa:
4e:ee:0e:28:56:e2:21:17:47:a6:23:fa:5a:26:91:6d:93:30:
bb:7e:00:f1:b3:34:df:ce:be:38:82:07:93:61:62:b8:40:bd:
79:3c:bc:54:e9:97:bb:ae:eb:4f:ae:78:f4:b5:51:6d:87:8f:
59:4a:69:35:cc:28:96:9a:22:c2:fe:ac:6b:52:3c:e1:2e:20:
5b:95:b0:fc:0d:1e:25:c8:8c:d4:6c:6d:cc:d0:b6:bb:f0:33:
04:19:49:37:73:74:78:0b:87:d6:da:a2:2b:cc:ba:78:62:16:
4e:b1:6c:75:9c:76:fa:95:82:84:46:09:32:c2:55:cc:5f:9b:
53:e9:64:9a:54:76:17:27:7d:2a:ae:30:29:89:d4:92:77:0b:
13:a4:a4:4e:75:9a:1b:93:7a:54:cf:fb:87:34:3d:5d:0f:1e:
7a:62:45:f1:89:ee:e2:de:e2:66:6b:9c:2a:bd:7d:39:b4:8b:
6a:21:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:06:51 2025 by rpki-client