Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ShSdfubxuz6-GcW2RAgjy42N8kc.roa
File: ShSdfubxuz6-GcW2RAgjy42N8kc.roa (raw, json)
Hash identifier: DDi2CIbxxyXfvATVojFskwdAWPLvNAkbKCYRLm/Hh3g=
Subject key identifier: 4A:14:9D:7E:E6:F1:BB:3E:BE:19:C5:B6:44:08:23:CB:8D:8D:F2:47
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EDB08CBDA1573CC8E71CA96830DCE
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ShSdfubxuz6-GcW2RAgjy42N8kc.roa
Signing time: Thu 02 Jan 2025 05:48:26 +0000
ROA not before: Thu 02 Jan 2025 05:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208618
IP address blocks: 2a0e:aa06:470::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:db:08:cb:da:15:73:cc:8e:71:ca:96:83:0d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a149d7ee6f1bb3ebe19c5b6440823cb8d8df247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:6b:dc:73:7b:b1:74:7c:05:c4:93:ed:74:
c8:36:5d:59:e0:8f:7e:85:f5:1c:90:ce:ca:6e:7a:
67:58:12:44:c2:fe:4f:a2:43:5b:6d:5d:41:9b:87:
2f:04:fd:d1:ce:4a:ba:3e:c1:7d:ec:b6:16:57:0a:
4c:2a:6d:41:fe:40:5c:84:42:65:cb:29:18:15:e7:
e1:05:ee:59:47:33:f2:4e:2b:1e:4e:07:1d:8e:97:
df:de:60:8e:99:fb:d4:11:99:88:25:26:60:fa:4a:
33:cb:92:98:e0:ca:91:45:0c:1a:cf:0a:a0:e0:60:
cf:05:b8:85:25:2f:cb:aa:64:46:76:89:ed:22:fa:
68:e1:bb:c2:0a:5c:ec:1c:c1:ec:08:ff:3a:28:b4:
35:55:4d:af:f1:43:08:b1:25:e8:0f:d2:40:7f:5f:
78:3e:37:16:9c:50:29:f8:6a:87:6d:c3:9b:0c:86:
30:5b:22:ce:dc:1e:4f:ea:4d:59:f4:6d:89:8f:ca:
a0:dd:78:29:5b:32:6c:f2:e3:df:df:ad:5f:ea:89:
d8:11:0d:6e:ad:54:76:2a:74:53:df:35:ed:b6:09:
c8:a7:ab:e5:88:07:f9:6d:07:6c:49:30:e9:09:8f:
a5:d0:ca:01:79:ff:a9:f4:e3:18:bf:a1:22:64:c0:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:9D:7E:E6:F1:BB:3E:BE:19:C5:B6:44:08:23:CB:8D:8D:F2:47
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ShSdfubxuz6-GcW2RAgjy42N8kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:470::/44
Signature Algorithm: sha256WithRSAEncryption
3c:2e:82:8b:0b:2d:f8:ad:a5:87:26:fd:6a:61:b4:f5:b2:81:
3a:83:69:9a:b8:ef:fd:0b:58:bf:85:9f:e5:4e:6a:12:7a:5b:
4a:8f:2b:7b:11:e1:1d:2c:30:b9:1f:35:99:e0:78:2f:9c:e7:
43:4b:54:a6:91:71:83:36:7d:aa:f7:33:67:ec:9b:88:6c:97:
c7:71:bc:a5:24:a9:72:9c:a4:14:02:43:c1:ee:03:3c:d1:a2:
37:44:0c:f4:74:20:6e:01:81:11:b2:2e:ee:ad:6d:66:78:e7:
7b:4f:7e:f8:78:3d:b3:fb:62:3f:a6:3c:85:c4:3e:0b:02:6b:
49:79:f6:8d:f8:87:5a:f0:11:c0:37:28:db:44:88:17:57:c4:
e1:67:2f:5c:37:4a:59:33:e0:38:93:08:85:22:93:a4:4d:4a:
3b:6d:2f:0c:0f:b4:54:4a:71:64:d6:28:a0:2d:d3:4f:ae:8e:
1a:a0:95:a3:05:02:39:2a:19:86:2c:c6:76:9e:a4:cd:77:62:
f9:c1:1a:0c:c5:30:84:74:f3:14:2d:ea:74:d5:c4:4c:7e:37:
d3:51:ba:d0:76:5f:44:aa:64:7e:19:c8:5e:38:f3:ca:d7:09:
43:10:d0:1f:63:b9:e8:74:d0:e6:f4:f7:6b:f2:3d:61:28:71:
f1:3b:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:43:07 2025 by rpki-client