Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/csEf9syoFNTGaMlU5MhYUuOIBiQ.roa
File: csEf9syoFNTGaMlU5MhYUuOIBiQ.roa (raw, json)
Hash identifier: SLfRD5P3fO1tXNQj8q98v89NmGiqv9196LApLqBPnXA=
Subject key identifier: 72:C1:1F:F6:CC:A8:14:D4:C6:68:C9:54:E4:C8:58:52:E3:88:06:24
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 019423D6FAA9996333ED226AEFE228DF3B5B
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/csEf9syoFNTGaMlU5MhYUuOIBiQ.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215158
IP address blocks: 2a12:3040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fa:a9:99:63:33:ed:22:6a:ef:e2:28:df:3b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72c11ff6cca814d4c668c954e4c85852e3880624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:0f:ad:8c:41:09:7a:86:48:72:22:af:04:
60:dc:5f:2e:fc:c5:19:1a:4d:2e:2a:99:1a:9f:8d:
a0:6d:74:01:c8:2e:16:f5:a0:cc:3f:bb:22:ef:a9:
a5:bc:02:23:fd:09:e5:c9:51:65:c2:61:53:c3:48:
49:c9:09:14:e2:36:e5:12:01:bd:9b:96:05:8b:be:
26:70:45:5f:76:f0:71:dd:24:ca:f0:e6:fc:31:7a:
49:05:e6:de:a1:f5:c5:8c:25:56:70:69:cc:aa:43:
6b:ac:ef:2c:be:43:de:d5:f3:7e:6e:27:f9:45:3e:
52:6d:97:2a:e5:5a:20:0a:27:91:e1:41:77:8e:f4:
6b:cc:e9:95:6a:fb:b5:d0:86:9e:4f:91:af:6e:48:
11:67:96:84:01:b9:74:c3:e6:18:02:1f:e7:21:fe:
e1:89:86:41:24:93:2f:eb:ba:9d:06:a4:59:ac:97:
b2:8d:64:43:bf:c6:ef:75:6b:e0:0e:35:1a:fb:0c:
ab:21:fd:ee:02:f7:3d:ed:df:ab:79:e7:ed:68:50:
9d:5f:0c:10:16:5e:1c:b4:85:b2:87:1b:6a:9c:ad:
6e:bb:37:a9:d6:be:8d:8b:4d:35:0c:56:75:7f:3a:
6a:b3:75:4b:f4:fa:18:ce:66:c7:64:34:65:57:95:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:1F:F6:CC:A8:14:D4:C6:68:C9:54:E4:C8:58:52:E3:88:06:24
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/csEf9syoFNTGaMlU5MhYUuOIBiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3040::/29
Signature Algorithm: sha256WithRSAEncryption
b4:b5:f4:61:a0:61:f1:ce:88:57:05:d6:6d:5d:fb:cd:ff:f7:
ac:fe:d0:b9:68:cb:5d:cb:aa:60:39:60:20:60:e0:8b:0c:42:
90:52:4e:52:28:7b:25:3d:7d:a7:b5:08:76:cc:36:96:2c:24:
96:b5:72:2d:c7:13:25:f1:ed:45:b5:07:3a:28:08:cf:e0:22:
83:dd:00:a7:3f:a4:da:10:0e:9f:2c:af:da:f5:2c:90:42:f5:
23:24:1c:e8:d6:61:9a:f4:81:48:ff:10:b1:1d:15:d7:a6:33:
2a:81:db:6a:23:29:73:ac:ff:2a:7c:fe:24:3c:84:5b:7a:8b:
9d:d3:08:99:9e:bb:1e:17:9a:0f:90:d3:60:1b:32:f0:8d:2c:
4e:18:7b:4b:97:7d:e8:06:86:28:fa:ed:5c:d7:5e:5e:4c:77:
fb:00:2f:7e:fd:ec:7f:ca:2e:88:12:4e:ff:a8:3e:56:29:b9:
db:6c:3e:2a:01:d1:dc:3f:67:f8:41:b7:6d:2e:03:3b:64:c5:
d4:78:ba:12:02:98:0e:cb:2b:27:9e:fa:3d:6a:67:90:3d:e6:
b1:3b:40:46:38:5b:e9:b8:4c:70:33:10:d6:35:55:72:7c:4d:
11:d5:c5:de:fb:33:8c:9d:c3:1d:89:89:64:70:d7:82:39:b2:
35:09:81:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:05:44 2025 by rpki-client