Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/A1P9GreGj6t3nDPuJk7-Gd_Wwr4.roa
File: A1P9GreGj6t3nDPuJk7-Gd_Wwr4.roa (raw, json)
Hash identifier: zyCUo0iwXkxZApDs+EQSZXTcnw+g4qXlH/LrhXecroA=
Subject key identifier: 03:53:FD:1A:B7:86:8F:AB:77:9C:33:EE:26:4E:FE:19:DF:D6:C2:BE
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EDBBC36636699520B26EAB1555BED
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/A1P9GreGj6t3nDPuJk7-Gd_Wwr4.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208679
IP address blocks: 2a0e:aa07:e035::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:db:bc:36:63:66:99:52:0b:26:ea:b1:55:5b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0353fd1ab7868fab779c33ee264efe19dfd6c2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:24:00:bf:9d:d6:3a:11:f5:9e:2b:90:0b:
a8:02:23:45:cc:22:cc:fd:12:8c:1b:77:58:88:4a:
33:7b:aa:54:ec:a5:70:7e:5c:2a:51:04:8e:f0:1c:
ec:fc:4a:27:03:e3:ff:57:51:a3:08:39:31:ed:63:
56:35:5e:a1:ca:49:58:90:e3:47:b6:fa:df:60:4d:
07:cf:fa:58:8d:83:38:a2:80:d7:99:54:c9:a6:40:
bd:f0:62:3c:56:98:06:fb:9c:6f:cc:98:01:81:9e:
11:b0:65:ea:94:79:bd:bf:b5:62:9b:d9:50:5b:53:
38:6e:88:59:e8:81:1f:4b:ee:d3:f3:13:f8:2b:11:
09:e5:26:b8:80:a6:2b:bc:81:1a:3c:07:5d:b4:44:
b4:83:0a:1d:9f:3b:7f:b3:62:72:35:0c:64:e5:d3:
6d:16:b4:ad:30:4f:91:3e:39:8a:1f:34:67:90:7d:
87:7c:8c:ff:a9:c9:96:fd:d3:35:31:62:c2:e8:03:
94:c2:6a:bf:6f:d5:9f:33:8b:63:5d:ce:40:95:24:
b3:22:24:52:22:da:4b:a8:66:63:e7:a7:d1:de:18:
88:f6:36:40:4a:ef:e0:65:b8:f8:98:5c:72:0a:f8:
2e:6b:ea:b7:4a:18:2b:2f:df:92:4a:26:20:0f:68:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:53:FD:1A:B7:86:8F:AB:77:9C:33:EE:26:4E:FE:19:DF:D6:C2:BE
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/A1P9GreGj6t3nDPuJk7-Gd_Wwr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e035::/48
Signature Algorithm: sha256WithRSAEncryption
00:7a:03:82:1c:5c:26:89:b9:34:ba:7f:64:8f:a7:6b:d9:0c:
2b:50:25:90:f0:a0:66:12:27:70:14:8f:9a:21:74:51:02:91:
5a:b8:15:7d:5e:e9:8f:54:b4:f9:43:a7:28:cd:24:50:6d:12:
4e:b6:ee:a0:09:b4:32:c4:f8:20:71:75:4d:1a:12:34:a2:a6:
39:fb:4f:88:30:c2:c7:ea:7f:e2:f9:4f:a1:0f:7b:e6:1e:d5:
bd:b1:1f:c7:d1:8e:b2:65:4d:ec:93:66:35:ae:f2:7c:14:69:
b8:1c:6a:96:62:0f:7d:62:9b:98:ce:6e:75:4c:60:57:f4:db:
5c:f2:7a:e5:6f:2b:ab:e1:51:c9:f0:c6:59:43:d7:67:9b:9d:
41:d6:ac:23:43:89:2f:7a:d3:fc:41:23:df:22:06:fa:76:13:
c9:75:a3:cb:11:56:e8:c3:e6:1a:bd:03:b3:2b:f6:dc:6b:86:
62:99:d9:00:5e:c7:98:8c:ff:8c:97:ef:45:1c:72:23:9f:57:
26:ec:af:00:17:30:7c:dd:8f:0d:70:da:be:ac:0f:de:b4:fd:
15:46:e3:86:9c:d6:56:0f:6a:f1:8a:91:10:fa:ce:8b:95:45:
2b:b4:c0:c7:b2:79:13:ce:20:ef:85:44:8e:15:ad:fb:64:c2:
c7:27:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:12 2025 by rpki-client