Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/sOvOe8ZRXLltGWBqOHYyZncuIf8.roa
File: sOvOe8ZRXLltGWBqOHYyZncuIf8.roa (raw, json)
Hash identifier: qzs7nYsX72qKzuBKf47Se9bgEPE5z0L5+AQZ5DwiAaw=
Subject key identifier: B0:EB:CE:7B:C6:51:5C:B9:6D:19:60:6A:38:76:32:66:77:2E:21:FF
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EDE3FF723E31A1A792417ED6E5198
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/sOvOe8ZRXLltGWBqOHYyZncuIf8.roa
Signing time: Thu 02 Jan 2025 05:48:27 +0000
ROA not before: Thu 02 Jan 2025 05:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209391
IP address blocks: 2a0e:aa07:e031::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:de:3f:f7:23:e3:1a:1a:79:24:17:ed:6e:51:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0ebce7bc6515cb96d19606a38763266772e21ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d9:21:56:63:27:16:30:1e:da:71:d2:81:0f:
c8:8d:2c:1b:ef:79:78:6a:86:3a:9f:1d:5c:b4:a7:
3b:01:60:3a:39:dd:64:d4:52:b6:51:a1:62:85:86:
e8:5e:db:a5:e8:6d:50:01:64:60:e7:cc:d0:ea:a7:
96:e6:71:2d:f1:9d:73:d9:7d:8b:76:a7:93:69:82:
fc:63:48:3d:60:59:79:a1:10:67:2c:1c:10:fb:d2:
76:93:8a:7d:2b:89:ba:b8:2a:87:4a:61:0f:f0:13:
c1:34:2d:05:c3:80:8c:30:b1:91:06:6a:ae:81:e1:
15:d2:1d:70:a0:db:f4:36:ae:48:cb:08:79:e9:d1:
f9:e2:c8:b7:a5:2c:30:25:05:f3:ff:65:db:4e:e4:
9e:df:28:77:2c:b4:34:f8:19:25:9e:d6:93:6b:d2:
57:b4:c4:48:9a:52:c7:a5:5c:76:9f:a5:38:2f:e6:
be:d0:d0:3c:c7:f8:15:e9:c8:f5:f8:84:49:d3:9b:
32:5f:91:98:6c:d3:f9:c4:93:e1:f0:f8:8d:7e:1a:
8a:59:e7:6e:0b:a5:84:95:87:35:71:7a:dc:12:0f:
1a:13:33:7f:e2:6e:5e:2e:44:61:5c:25:47:c3:23:
df:8f:d8:b1:16:a3:4a:6f:fa:4e:bd:9a:e3:c8:3e:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EB:CE:7B:C6:51:5C:B9:6D:19:60:6A:38:76:32:66:77:2E:21:FF
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/sOvOe8ZRXLltGWBqOHYyZncuIf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e031::/48
Signature Algorithm: sha256WithRSAEncryption
bc:78:d9:2b:32:a4:80:fe:63:0d:da:66:8a:fa:76:61:76:89:
4d:d1:18:15:b8:48:04:1f:c4:01:bc:f2:df:3c:4e:5d:fc:12:
78:17:68:1f:98:1a:03:f6:b3:28:56:b3:61:8d:c4:87:cc:59:
60:bd:19:50:c8:80:6a:b2:d6:8b:a5:af:cc:71:19:9e:e2:d0:
07:ac:2d:71:ad:55:88:8b:61:a3:1a:94:19:c0:2b:6d:a9:41:
42:b6:4b:05:b0:0e:2a:86:57:f2:70:4e:6d:00:5c:6d:a0:f1:
e3:df:b0:21:76:cb:4b:40:94:4b:f0:a9:26:53:d0:f5:85:08:
52:0a:cc:77:8b:ff:5e:3c:8c:bd:52:91:13:23:1e:31:0b:ac:
1a:aa:2b:fa:ab:96:85:22:e8:3e:1e:bc:8b:f6:3b:d4:64:67:
e6:1d:5f:91:f0:09:c9:1c:d6:37:a3:f4:b4:9a:1a:c8:9e:8d:
0c:29:6b:17:ff:00:40:f9:99:bd:ca:7a:2c:34:d6:47:6d:a4:
a1:d0:99:9c:85:5b:9c:89:23:6f:09:f7:49:4c:ca:42:4e:1d:
2b:1c:83:ae:3f:b6:a2:2a:d6:85:0f:67:40:65:58:3f:8c:0f:
b4:4b:1c:3b:7f:32:e5:d1:09:7c:03:8c:2c:89:42:1f:c0:e8:
dc:99:0a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:06:30 2025 by rpki-client