Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BMn2xNj2ozdMrkr7ErSZqqXRZI4.roa
File: BMn2xNj2ozdMrkr7ErSZqqXRZI4.roa (raw, json)
Hash identifier: rrOd7+7vFefF9SiUjpQUAFM93dt/MG3WpHGI2TDjJOA=
Subject key identifier: 04:C9:F6:C4:D8:F6:A3:37:4C:AE:4A:FB:12:B4:99:AA:A5:D1:64:8E
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE00992E19A0CA924670E46F653FE
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BMn2xNj2ozdMrkr7ErSZqqXRZI4.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209837
IP address blocks: 2a0e:aa07:e03e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e0:09:92:e1:9a:0c:a9:24:67:0e:46:f6:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04c9f6c4d8f6a3374cae4afb12b499aaa5d1648e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:1f:ca:1f:33:14:40:64:0f:c2:47:75:ff:
ad:6e:df:66:8d:b4:55:27:90:f1:82:ac:a2:d9:c2:
1a:ac:c4:7b:b4:d4:d3:dc:c2:21:a8:13:ce:a5:7a:
23:9c:b3:82:10:2b:e8:e3:44:27:2f:6f:f6:b2:7e:
73:a9:86:17:71:21:e7:03:2f:5d:08:0e:c2:64:fa:
74:ef:c7:41:d2:38:28:ef:b3:f1:f1:b1:8a:4c:75:
9f:f7:94:10:c8:a6:c8:48:a3:e9:63:f7:f3:99:ad:
2d:1a:e8:c9:ac:49:e0:fc:09:d7:d3:4a:00:7f:dc:
f5:6b:37:91:fb:ae:1a:ba:40:7f:05:24:85:59:78:
52:26:22:f1:5b:87:65:d1:ca:55:a3:bc:c7:03:f2:
6d:54:51:93:c9:eb:42:54:ea:45:51:d6:9c:27:0c:
79:c6:24:e6:25:9a:37:61:39:8a:a2:d2:5a:0e:61:
dd:24:59:45:58:3c:10:66:05:75:dd:67:d6:42:99:
00:ca:f7:1a:0d:c7:43:90:7d:44:04:23:cc:54:71:
50:26:4f:2c:aa:ef:7d:a7:1c:00:b6:2d:5d:ba:32:
f1:07:d2:35:f7:b0:90:9a:49:33:5a:9a:b8:45:4c:
db:bd:e0:36:72:49:28:8c:d8:90:66:dc:dc:5a:01:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C9:F6:C4:D8:F6:A3:37:4C:AE:4A:FB:12:B4:99:AA:A5:D1:64:8E
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BMn2xNj2ozdMrkr7ErSZqqXRZI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e03e::/48
Signature Algorithm: sha256WithRSAEncryption
7b:53:4a:b3:97:20:50:ea:f6:81:70:5c:68:9c:d8:c6:bb:3b:
18:b7:ba:60:ca:10:35:2a:62:6d:af:98:ef:2a:2f:23:ca:6d:
f2:32:f2:62:82:7f:e2:10:04:4f:b9:29:c2:5f:cd:7c:38:87:
9e:44:cf:f3:8a:6b:f1:f9:39:a5:3f:92:52:10:3b:b3:19:1d:
2e:11:9f:a5:ab:4a:76:d1:5e:e4:00:24:29:20:f6:7c:e9:7e:
15:68:73:5e:b8:2a:34:05:f2:0e:56:15:06:a0:3a:1f:f3:43:
df:d6:7f:82:64:85:eb:1d:9a:77:12:76:9b:82:a7:a2:68:5a:
89:dd:c5:e9:90:aa:5d:35:1f:da:64:35:5b:aa:14:e0:3d:7b:
09:e9:9a:56:83:43:90:ad:cc:ba:f2:96:7f:a5:53:7b:19:06:
a6:29:44:77:0a:70:ff:10:96:b9:24:e0:ce:fe:d6:10:56:47:
25:60:2d:dc:e7:e7:5c:92:89:cc:2a:e5:85:1f:5c:62:56:33:
dc:b2:36:07:55:cd:06:95:a9:c2:37:ec:f6:6f:5c:a1:28:e6:
d5:07:b3:03:19:ab:b3:48:0e:c7:a4:02:07:65:2c:e9:57:75:
b5:54:a6:1c:2c:97:20:45:d7:b8:8e:40:bb:f8:73:19:ef:aa:
36:e1:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:42 2025 by rpki-client