Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/lDjerkS_llhu8Wg2uY7heYi64Ck.roa
File: lDjerkS_llhu8Wg2uY7heYi64Ck.roa (raw, json)
Hash identifier: npY8aDzhl9sgzGpsRNjl+FTmhEcgoZKIL7sZ/CYM6AU=
Subject key identifier: 94:38:DE:AE:44:BF:96:58:6E:F1:68:36:B9:8E:E1:79:88:BA:E0:29
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ED1330458F907C8E068ED37D4794E
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/lDjerkS_llhu8Wg2uY7heYi64Ck.roa
Signing time: Thu 02 Jan 2025 05:48:24 +0000
ROA not before: Thu 02 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203023
IP address blocks: 2a0e:aa07:e150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d1:33:04:58:f9:07:c8:e0:68:ed:37:d4:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9438deae44bf96586ef16836b98ee17988bae029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:db:2f:d4:6a:e2:c6:35:e4:fe:d4:b0:00:
e3:4a:dd:4e:8f:e5:ea:54:3a:6d:a6:94:2f:ed:8d:
f4:cf:b8:0c:2b:ac:30:f6:9a:38:06:bc:90:c1:10:
1f:c6:1c:3b:17:30:7e:c9:71:1e:a2:f3:c7:ea:63:
1f:0a:a1:9c:4f:2b:58:cd:1f:30:fe:90:01:04:eb:
0b:84:5c:cc:7c:93:df:d4:b7:72:91:8c:3b:4d:ae:
3e:39:af:09:f5:21:5e:ad:45:3c:15:cd:9a:25:38:
30:bc:15:d7:97:c8:55:ba:6e:a7:ac:02:ea:48:b6:
2a:50:f8:4a:44:35:9e:b8:8d:79:27:23:9d:e1:a8:
4d:b3:09:ae:82:9e:98:56:5c:fa:3a:3d:4e:77:3f:
e6:ef:64:2d:59:4e:a8:01:e5:36:24:82:6c:d7:43:
b9:fe:da:a8:fa:e1:14:0d:81:0a:96:fd:6c:8f:eb:
26:56:da:17:8b:56:30:2f:8d:37:23:dd:33:6b:41:
85:90:60:a4:0a:fe:b3:6d:2d:2a:97:df:60:d3:00:
8c:c6:3c:ae:4a:a4:07:3b:e4:76:3a:74:ff:56:04:
47:0f:db:ce:aa:0d:c3:39:b0:7b:97:81:50:c2:8e:
75:8b:6d:dc:6c:98:cf:39:4d:3a:c8:a7:67:89:fb:
08:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:38:DE:AE:44:BF:96:58:6E:F1:68:36:B9:8E:E1:79:88:BA:E0:29
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/lDjerkS_llhu8Wg2uY7heYi64Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e150::/44
Signature Algorithm: sha256WithRSAEncryption
88:6d:4c:87:b0:7e:bf:5a:d3:5c:96:3a:b2:75:d1:c1:1e:ff:
af:66:8c:ac:6e:8c:e7:b3:76:0f:a3:44:49:f6:14:cf:c9:c6:
28:90:f8:9c:b8:8f:10:8a:c9:54:1d:56:27:20:c3:e9:82:0e:
18:91:04:2e:cb:6f:4a:56:5b:9a:16:7c:ed:a6:50:2b:49:37:
f9:43:b9:da:f3:45:9f:c5:01:99:b0:06:a7:e5:63:d2:61:d1:
95:bb:6f:a0:71:00:76:a7:11:d8:59:5e:2f:65:fa:53:32:0c:
3b:80:08:0b:93:bc:9c:62:24:57:b6:78:27:e0:81:f8:30:f9:
ac:78:97:e7:48:96:9a:c9:99:43:fd:93:96:7b:0f:75:3b:96:
88:f5:7c:34:90:dd:58:1b:c0:7b:45:5a:41:29:18:6e:06:8c:
45:ce:c7:cb:cc:b1:0b:7b:d1:16:32:54:0d:a9:38:d0:93:db:
c0:ed:fc:1d:8b:22:8f:04:d0:3b:e7:c8:c4:a6:1a:22:a7:7e:
c7:ee:f5:af:04:2f:01:12:d0:d6:a4:42:df:ee:31:8c:2c:e2:
21:01:95:13:8c:16:af:b2:fe:59:7b:eb:23:16:50:f2:5d:90:
62:de:53:66:77:27:5b:4a:bc:c9:8b:ee:56:42:10:f1:e3:59:
66:ae:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:43 2025 by rpki-client