Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1YV5VfxUGWkKhGMUwHFiiGnpa6M.roa
File: 1YV5VfxUGWkKhGMUwHFiiGnpa6M.roa (raw, json)
Hash identifier: 3u33OfCINsh2hhrmc+oGebxvKtJNpEhGusZ6MUn58Lk=
Subject key identifier: D5:85:79:55:FC:54:19:69:0A:84:63:14:C0:71:62:88:69:E9:6B:A3
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ED1AC11D0EF4195321FC87E168B2A
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1YV5VfxUGWkKhGMUwHFiiGnpa6M.roa
Signing time: Thu 02 Jan 2025 05:48:24 +0000
ROA not before: Thu 02 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203664
IP address blocks: 2a0e:aa07:e044::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d1:ac:11:d0:ef:41:95:32:1f:c8:7e:16:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5857955fc5419690a846314c071628869e96ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:38:af:8c:c5:cc:21:72:74:fe:9c:1d:31:
0e:4f:5c:ec:76:76:32:4c:c6:df:af:dc:81:b7:b4:
f8:93:4b:2d:98:c5:30:6b:a9:24:76:31:5b:df:17:
50:06:a5:ff:7a:60:b1:e2:67:3f:8c:f7:75:b7:5f:
f0:9e:0b:30:88:5a:ec:1c:ab:c8:81:43:9c:0a:30:
16:44:0b:d3:d6:78:25:8a:ca:14:a3:93:24:ce:79:
d9:24:cf:0c:84:75:7b:7f:3c:af:24:f8:15:a0:14:
fc:ef:a3:a8:d1:0f:2e:57:2c:ad:69:c9:2e:21:fb:
99:42:4e:fa:58:f0:e8:eb:23:15:64:29:ba:22:00:
59:68:9d:79:8f:74:03:46:70:d6:58:d5:dd:d6:dc:
4b:71:7a:98:33:2b:04:53:6a:fe:fe:90:b4:62:a8:
d8:5b:26:72:0c:ff:5a:5a:92:1b:74:be:de:cb:a8:
b5:5b:ab:5d:c6:76:81:a5:31:b2:41:15:e5:06:15:
07:67:b5:c9:10:4c:e5:f5:13:17:f4:d3:95:52:e5:
c9:df:1d:eb:61:39:da:4c:95:b9:34:9b:34:5a:43:
21:6d:cb:6d:91:fc:ef:87:3c:14:b6:97:ad:99:fe:
75:3e:33:a1:7a:24:9e:75:44:80:39:ed:05:01:22:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:79:55:FC:54:19:69:0A:84:63:14:C0:71:62:88:69:E9:6B:A3
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1YV5VfxUGWkKhGMUwHFiiGnpa6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e044::/48
Signature Algorithm: sha256WithRSAEncryption
84:d5:78:7a:08:73:a3:a1:be:04:02:f2:e3:3e:28:7a:35:86:
d4:d9:03:cf:d5:13:4d:56:02:d5:d7:71:88:1e:32:c0:46:db:
a9:34:db:1c:a3:d3:7c:6f:88:38:c2:b9:2d:69:89:e8:55:c2:
26:f4:d9:5d:70:f1:77:9d:ad:f0:4d:fc:fb:8f:4e:1c:c5:42:
a3:e2:7e:51:ab:37:c6:53:bb:ec:fa:0c:70:3e:b7:cf:0e:3b:
69:ec:af:25:c0:de:20:03:06:32:b6:d1:61:b4:c2:1e:63:3c:
51:f0:23:9c:a9:5b:c2:e5:96:e2:96:a3:16:12:d5:c0:0b:d7:
e6:a0:5a:60:8a:10:23:5e:e8:71:51:82:7d:a4:cb:4b:5e:99:
62:17:d1:c0:5c:2c:94:b8:2c:6a:ec:58:26:bd:bf:66:ad:86:
bd:e1:fd:fc:d1:9b:d2:9a:9d:e5:50:95:e2:3d:2c:ec:27:4a:
1f:3a:b8:73:d4:c7:2d:2b:ae:4b:0c:0e:8c:b8:11:9c:5d:02:
82:39:ce:56:64:da:2a:5e:f1:4b:24:e9:e1:42:53:71:2b:2d:
94:ab:49:a6:1e:6e:5b:8b:f4:29:54:9e:26:a8:6f:76:51:13:
d1:46:5c:ce:e5:c7:71:59:5e:e0:e6:8c:fc:9c:7d:87:ed:7d:
88:90:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:08:19 2025 by rpki-client