Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/ACKE5m4AhVASTJNcm4VTbtA6kdI.roa
File: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (raw, json)
Hash identifier: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=
Subject key identifier: 00:22:84:E6:6E:00:85:50:12:4C:93:5C:9B:85:53:6E:D0:3A:91:D2
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019422FC21D60B5BD790859BE6CBF2A1B185
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/ACKE5m4AhVASTJNcm4VTbtA6kdI.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:2e00::/36 maxlen: 48
2a13:2e01::/36 maxlen: 48
2a13:2e02::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:21:d6:0b:5b:d7:90:85:9b:e6:cb:f2:a1:b1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=002284e66e008550124c935c9b85536ed03a91d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:bd:19:24:42:1f:1a:66:83:9e:a3:47:fd:
69:0f:54:6b:4c:f5:3e:e7:32:ff:aa:e0:ee:c0:b8:
f6:90:0a:c4:5a:fd:1c:44:bb:c3:24:5e:9d:db:17:
dc:e2:bc:97:e7:17:65:2b:1c:4c:23:55:4e:34:a2:
6b:0d:59:e1:20:14:5d:16:49:3f:a3:da:30:ae:55:
f9:0c:a6:c2:78:f9:ce:52:55:bb:0d:52:eb:65:92:
54:65:ab:be:d1:49:ec:2c:b8:0d:b2:15:80:78:cb:
c3:8f:ec:67:e2:26:6f:03:8a:32:06:62:ab:3c:c7:
7d:21:05:aa:87:b9:c5:92:24:c1:18:a0:2a:0a:7d:
7e:7e:51:9c:df:c6:47:dd:e3:5b:78:d5:da:0c:17:
aa:a9:f1:b8:12:34:e1:89:e1:3d:a9:af:1d:e8:1a:
a5:53:fb:d0:58:fc:f0:f1:d2:30:b0:d4:72:61:8d:
f7:a8:9e:57:52:3c:72:b8:4b:38:ac:62:d1:c5:5e:
82:eb:de:67:ee:42:01:da:ba:f7:ce:5a:5b:07:8d:
73:a4:63:21:ec:33:4b:2d:00:06:81:47:c4:88:e2:
45:97:e2:ed:21:a9:aa:ca:1d:0e:6e:da:5d:81:ad:
9c:dd:54:e2:91:18:db:59:c7:7b:13:87:9c:ad:4a:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:22:84:E6:6E:00:85:50:12:4C:93:5C:9B:85:53:6E:D0:3A:91:D2
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/ACKE5m4AhVASTJNcm4VTbtA6kdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2e00::/36
2a13:2e01::/36
2a13:2e02::/36
Signature Algorithm: sha256WithRSAEncryption
9f:f4:3c:8d:9f:78:8d:60:3f:1b:5f:50:32:bf:9c:5d:87:89:
7e:67:d2:de:ae:f7:23:6c:3d:01:57:06:74:45:07:e6:b1:5e:
b8:65:24:f3:2f:a9:76:87:b2:c9:4b:72:e7:9f:d5:d7:63:a0:
b5:1f:37:34:67:e7:b6:e8:b3:e9:2e:70:bf:dd:ea:79:83:19:
29:48:60:4a:0a:b3:49:c0:a2:9b:32:48:98:d7:75:53:69:86:
78:ed:73:b6:34:0f:df:5f:71:7c:be:b6:10:46:24:25:25:8e:
4f:d9:ce:a0:99:bb:19:3d:01:a7:84:f1:b0:e8:f2:5c:3c:88:
8b:6e:7c:db:eb:14:2a:88:16:fb:ae:05:a6:a7:b5:3a:77:21:
0b:03:b4:d3:8e:78:59:01:6a:29:50:fe:63:88:2d:ca:6b:44:
50:d8:f0:b1:f9:de:5c:49:dc:3b:e7:f9:be:6d:1e:72:a5:79:
a3:6d:04:37:8d:03:e5:5a:58:a2:74:7e:08:e7:5f:96:bb:24:
24:d5:2d:56:d2:53:44:c6:9a:a1:8a:43:67:07:86:2b:fe:aa:
2c:4d:90:ad:e5:78:da:a6:9a:0c:6c:88:cd:e8:d1:1d:59:c8:
bf:fb:12:18:0e:cf:29:56:0b:ca:7b:37:ae:ff:b2:f8:62:9e:
fe:c2:6e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:46 2025 by rpki-client