Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/uAEY8yf0-OduNKClmzmQfAo_KIE.roa
File: uAEY8yf0-OduNKClmzmQfAo_KIE.roa (raw, json)
Hash identifier: qEIbThjEj3GBtZEd/ntxaTMGkdBP7P2YKculyoqC1h8=
Subject key identifier: B8:01:18:F3:27:F4:F8:E7:6E:34:A0:A5:9B:39:90:7C:0A:3F:28:81
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194258F0F8AB9B4539820FC82A4EAF1373F
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/uAEY8yf0-OduNKClmzmQfAo_KIE.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44812
IP address blocks: 2a0e:8083::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0f:8a:b9:b4:53:98:20:fc:82:a4:ea:f1:37:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b80118f327f4f8e76e34a0a59b39907c0a3f2881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:56:df:da:9c:36:b6:63:33:21:1a:98:f5:73:
cd:f4:35:6e:67:f7:39:2b:fe:e2:d4:5c:03:81:95:
31:48:ca:8e:0a:9d:b6:59:15:f7:ae:59:9a:4f:52:
1b:27:6b:dc:0a:50:cb:dd:5c:f3:73:bc:14:8c:e0:
2c:44:8a:3b:12:fc:aa:6e:cf:f8:53:76:c4:84:2f:
e7:51:2e:7d:98:43:89:af:38:37:ec:97:ee:dd:ee:
56:e3:eb:7e:1c:d8:19:81:50:a7:33:dd:cd:3b:49:
e4:aa:1b:c1:84:18:2e:ad:b5:f6:73:29:ef:1a:fa:
4b:57:5d:8d:21:50:46:27:2c:04:dc:74:44:c2:88:
8d:c8:40:aa:81:b8:62:ca:55:62:ea:7f:ef:b8:3d:
37:79:2a:83:88:08:71:71:15:7f:5d:c5:81:f1:de:
4c:be:4a:66:6e:84:f9:c8:5b:a7:bb:28:3a:ba:a7:
34:7d:1e:b2:4b:ae:f8:65:26:82:3a:ca:12:ff:ed:
ab:ea:b5:04:a1:22:b8:6b:57:96:b6:fd:53:c4:d0:
f4:ea:b7:3d:7a:11:17:18:0b:5b:47:74:10:b6:12:
dc:d6:81:b2:77:d5:6a:66:b2:bb:18:9d:ce:41:e1:
03:f1:99:3d:39:24:a4:2a:2e:1f:37:01:f1:e4:c9:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:18:F3:27:F4:F8:E7:6E:34:A0:A5:9B:39:90:7C:0A:3F:28:81
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/uAEY8yf0-OduNKClmzmQfAo_KIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8083::/32
Signature Algorithm: sha256WithRSAEncryption
78:9d:69:12:0e:7a:21:56:74:86:88:30:14:5c:ef:6e:c7:31:
1a:b9:71:95:b8:50:e6:3e:2f:3c:e9:51:3c:c0:45:07:ff:cf:
e1:9e:30:d9:4c:bf:79:fa:38:00:ec:b3:2d:dc:5d:8f:5a:31:
c7:b8:f1:f1:69:b6:09:38:a3:16:41:9e:a3:06:84:b3:d1:4e:
8f:4d:59:8b:7f:e4:f5:16:17:98:37:64:fc:1c:2c:1f:12:35:
77:06:15:9b:f4:06:bb:e9:70:fe:f3:9f:3c:5c:93:1f:11:cf:
80:34:fd:a6:1f:94:96:85:05:e9:24:ae:02:af:38:c1:28:bb:
79:b8:40:05:04:d7:a8:68:4e:c6:3f:c2:4c:8b:66:a3:f8:6b:
5d:5e:46:f0:52:73:e6:43:61:bf:c9:5d:22:ff:1f:42:c7:8e:
6a:e8:2f:59:bf:f8:06:e6:79:d8:8a:c2:41:79:ab:3b:fe:1b:
f1:b6:3f:47:a6:34:bb:08:9f:ad:bf:dd:1f:17:10:36:e0:08:
15:70:d9:32:72:bd:ed:33:ba:c1:db:03:e5:e9:1b:e1:e9:b5:
58:88:13:09:89:4a:ef:00:2e:6f:42:8d:2a:c6:56:2c:15:4c:
8a:22:e0:a1:71:37:44:0a:16:24:7e:15:83:88:0f:79:c2:a5:
2a:25:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:25 2025 by rpki-client