Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/t1AoUY8tCbbcj74AokZcid5ea6M.roa
File: t1AoUY8tCbbcj74AokZcid5ea6M.roa (raw, json)
Hash identifier: xRX8A6nvtUNhC32Z17uwai7b3d6EeuJyR7hfbcXB11g=
Subject key identifier: B7:50:28:51:8F:2D:09:B6:DC:8F:BE:00:A2:46:5C:89:DE:5E:6B:A3
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ED773DA40F6E36E09718317540873
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/t1AoUY8tCbbcj74AokZcid5ea6M.roa
Signing time: Thu 02 Jan 2025 05:48:25 +0000
ROA not before: Thu 02 Jan 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206843
IP address blocks: 2a0e:aa07:e00e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d7:73:da:40:f6:e3:6e:09:71:83:17:54:08:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b75028518f2d09b6dc8fbe00a2465c89de5e6ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:07:d8:3e:87:84:fe:df:ad:6b:22:0c:6f:
cc:7e:c5:98:c9:90:c6:24:25:ec:2b:9f:f3:0a:10:
93:f1:6c:13:f9:10:32:1d:e7:f1:16:48:5d:bb:c7:
c6:44:0d:fb:e5:ea:67:5c:01:c3:d4:7f:a6:2e:96:
6d:3f:9d:5a:eb:0b:0a:fb:58:28:f3:a3:d3:3d:05:
7e:6f:78:53:4b:d5:bf:63:ea:56:72:a0:33:55:7c:
f9:d4:a7:97:10:04:4f:d8:4e:6a:34:fb:93:3d:73:
c5:f4:13:9e:5f:05:43:3f:4c:7a:10:a4:f0:8f:76:
8f:78:99:13:6b:ae:a2:cf:67:1d:73:6a:ab:d6:5b:
14:4c:c0:78:45:4e:dd:4e:5d:19:b8:d9:9e:46:f3:
1f:16:01:8f:7e:97:77:b9:fa:ad:5e:88:1b:05:27:
9b:a7:5f:e3:3e:c6:34:77:5a:da:a0:9a:13:c3:4b:
ee:1f:a7:10:1a:aa:f2:7f:6f:ce:d0:10:5b:44:b5:
13:4c:2c:f2:4f:25:7c:00:f6:cb:23:10:12:02:63:
f5:25:63:ae:e2:75:36:04:e9:d8:09:6f:b0:31:6a:
d6:2c:5a:18:ad:24:05:c5:f2:d8:1b:7b:01:05:94:
03:c0:31:78:ba:44:a6:de:dc:45:03:90:7e:f2:b2:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:28:51:8F:2D:09:B6:DC:8F:BE:00:A2:46:5C:89:DE:5E:6B:A3
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/t1AoUY8tCbbcj74AokZcid5ea6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e00e::/48
Signature Algorithm: sha256WithRSAEncryption
04:39:74:57:ae:2a:1e:63:5c:e4:92:74:54:b3:55:1d:79:8e:
6c:fa:2a:4c:c3:89:1b:5b:32:df:c3:7c:81:60:93:9f:2d:1a:
73:e6:a5:cc:c4:32:01:6d:05:76:66:72:09:41:78:c4:c4:03:
7b:81:ed:60:9f:9c:86:0e:51:12:37:d3:1b:a0:33:57:3c:7a:
7c:dc:e8:75:81:61:80:c3:cc:6a:95:c3:54:a5:61:03:04:12:
9b:a7:24:69:e0:f5:69:fc:1f:74:94:19:ec:78:10:2b:16:d9:
63:21:57:04:6e:30:db:b2:3e:d9:07:45:9b:96:93:34:b8:11:
50:eb:21:2d:4c:79:66:e1:9b:dc:44:e2:c2:28:37:f9:c5:50:
39:2d:bd:1c:5f:ef:18:06:61:6a:a7:e7:02:f9:3d:8a:37:bd:
85:c6:ad:72:52:21:b1:2a:74:38:c2:a9:21:7e:5b:d0:24:70:
e2:00:4f:7f:52:b1:27:b2:38:f8:60:84:5e:e1:8f:87:e8:70:
aa:ae:a7:2c:e3:83:2f:bb:ab:87:b1:dc:a3:28:58:a3:30:43:
77:c0:bf:88:8a:9e:9f:84:62:5e:0d:3a:ea:4f:e9:c8:c8:6f:
b1:d9:b2:f3:bd:83:a8:80:41:bf:7b:9a:16:fa:7e:89:bd:3c:
7e:b7:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:08:24 2025 by rpki-client