Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/q13mGARa9r5QMtX1UkBNlLNiezo.roa
File: q13mGARa9r5QMtX1UkBNlLNiezo.roa (raw, json)
Hash identifier: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=
Subject key identifier: AB:5D:E6:18:04:5A:F6:BE:50:32:D5:F5:52:40:4D:94:B3:62:7B:3A
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0194244590B3BEA1FA76AFD68B1067EE8E71
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/q13mGARa9r5QMtX1UkBNlLNiezo.roa
Signing time: Wed 01 Jan 2025 23:48:46 +0000
ROA not before: Wed 01 Jan 2025 23:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44092
IP address blocks: 2a11:e104::/32 maxlen: 48
2a11:e104:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:90:b3:be:a1:fa:76:af:d6:8b:10:67:ee:8e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab5de618045af6be5032d5f552404d94b3627b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:83:94:90:b7:b9:55:83:5c:ae:2d:3c:f5:
65:74:cd:0a:26:d7:97:14:e1:f6:71:47:f0:ea:cf:
3d:36:ed:14:3b:6d:33:87:95:b5:bb:ad:22:68:ad:
68:da:ef:31:02:0a:26:16:0c:c8:e7:f2:70:5d:e3:
18:01:86:c0:0a:2b:60:64:0f:73:05:a5:24:9c:fb:
a3:bc:a2:74:6c:6d:28:cd:b1:d1:4f:55:61:fb:58:
6d:e7:f3:c4:24:f7:5d:4a:a5:a5:da:b5:22:3e:28:
34:24:ba:f0:a3:3a:21:d4:24:3f:71:21:7d:be:87:
42:91:f3:f7:e3:8a:2b:a6:ab:7f:05:e7:bc:c6:90:
3d:9c:63:f8:56:c9:f9:70:e6:98:a3:8f:01:1a:be:
a7:a7:3a:0f:f1:4e:d6:c2:1c:32:c0:1e:4e:79:6f:
08:73:c7:14:ab:28:3e:88:cd:e2:0a:08:02:2c:7c:
9a:5d:77:6d:83:25:82:53:9d:2e:39:0f:e4:37:31:
1b:1b:68:0e:c6:65:1a:95:4a:19:08:83:3f:6d:2c:
4d:84:8e:f6:f5:2e:02:32:dd:93:e4:6b:f2:7b:0a:
3f:93:46:0b:47:de:25:6d:87:32:b2:4c:a3:bb:52:
d5:77:e9:1f:47:58:7e:d5:f4:08:4f:1f:c3:30:88:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:E6:18:04:5A:F6:BE:50:32:D5:F5:52:40:4D:94:B3:62:7B:3A
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/q13mGARa9r5QMtX1UkBNlLNiezo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e104::/32
Signature Algorithm: sha256WithRSAEncryption
59:0e:43:d8:e2:b5:ca:05:f7:86:9d:9c:be:55:96:a5:4d:e1:
e5:64:3a:21:2e:ce:19:05:c7:f4:a4:bd:b8:70:0a:f6:32:ce:
48:4a:04:ba:9a:34:de:4b:f6:97:94:ed:49:b5:5c:b9:7f:f5:
30:a7:94:8b:2c:4b:cf:76:93:5c:e2:a2:4e:68:47:46:10:08:
83:e7:b2:38:c2:86:f1:c3:ec:03:75:3d:93:23:8e:73:c0:48:
6b:f7:29:7e:6e:a7:07:cd:26:84:67:f9:f9:5a:65:6c:e8:7b:
4c:6a:03:39:72:37:6a:4a:36:21:92:bf:97:93:61:e2:c7:92:
a2:9b:93:a8:ed:44:df:e5:85:f6:e6:37:85:ba:9a:dd:07:e5:
87:1a:39:e9:c7:52:91:2c:a9:82:f6:5d:04:08:30:a9:8b:03:
2a:dd:cb:62:fa:f7:ef:0a:9f:85:86:80:0b:31:fb:76:21:4a:
b5:38:74:6e:d9:9b:45:07:ab:77:89:4d:ac:47:e7:01:c0:d7:
6b:a6:04:34:d2:71:82:93:08:13:89:87:9e:51:b8:25:a1:19:
31:67:5a:4d:47:16:4b:9b:7a:63:2d:0a:04:cd:06:ab:fd:5f:
f6:cc:d1:da:a0:86:12:38:ea:86:c0:1f:61:c5:bb:e2:b7:57:
c4:8d:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:15:30 2025 by rpki-client