Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/I52JmxS8ms2LXewaNvexpBIItdM.roa
File: I52JmxS8ms2LXewaNvexpBIItdM.roa (raw, json)
Hash identifier: wE72dqwKEdun5Ic36ck9eG0u4nkqju4VoFB4cJuV7v0=
Subject key identifier: 23:9D:89:9B:14:BC:9A:CD:8B:5D:EC:1A:36:F7:B1:A4:12:08:B5:D3
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019427B594D5AC416E99FC6C28D7DFB80B0E
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/I52JmxS8ms2LXewaNvexpBIItdM.roa
Signing time: Thu 02 Jan 2025 15:49:59 +0000
ROA not before: Thu 02 Jan 2025 15:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 2a0d:6300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:94:d5:ac:41:6e:99:fc:6c:28:d7:df:b8:0b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Jan 2 15:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239d899b14bc9acd8b5dec1a36f7b1a41208b5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c9:82:69:11:dc:d0:fb:3d:d2:8e:e3:16:21:
85:1b:4f:fc:8a:6f:c7:f6:1f:59:a3:c9:88:ac:0f:
38:67:0d:64:af:0e:b5:f7:0a:50:fd:40:06:a7:9b:
03:e2:37:a4:6f:47:ba:1c:62:df:79:59:5f:1e:12:
4f:9e:5d:ba:be:89:5a:e2:d3:f5:37:80:f4:99:06:
1b:1b:50:9c:ac:c1:67:01:d6:8d:1c:d7:c0:59:7e:
a0:76:81:47:c7:dc:5e:76:48:d6:b0:d7:e5:a7:1f:
9d:4d:f4:85:22:75:74:c2:0b:fd:ce:14:44:8b:69:
ab:0c:d4:e9:d0:15:25:f9:d2:9e:3c:9e:53:90:6f:
f6:a7:a2:49:3e:5b:d1:c3:6d:7e:b1:13:a0:89:7d:
23:d5:7a:ad:e5:21:07:af:c0:05:94:9b:42:f7:65:
df:6f:02:8b:aa:60:00:69:7c:69:e5:e1:19:a7:33:
40:c1:88:21:8d:a4:3c:bf:b9:ee:59:ca:5a:a2:0f:
11:c5:a1:7b:9b:8f:42:a9:ae:1d:68:3c:05:29:87:
a5:ff:7c:92:de:6a:12:6c:31:e1:77:d1:84:83:81:
3c:60:39:7e:80:1c:fb:6f:1e:e1:24:ba:04:29:76:
eb:5a:90:a2:3a:fe:1f:a4:3b:80:c0:d1:3a:f3:ea:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9D:89:9B:14:BC:9A:CD:8B:5D:EC:1A:36:F7:B1:A4:12:08:B5:D3
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/I52JmxS8ms2LXewaNvexpBIItdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6300::/29
Signature Algorithm: sha256WithRSAEncryption
15:7b:f6:fd:a0:36:51:52:1b:8c:2f:f2:8c:ad:66:ee:96:12:
37:4a:93:73:3c:c1:80:04:18:10:b2:24:72:c4:87:b2:74:1c:
b0:c0:30:45:19:3d:c7:73:ab:19:08:77:a9:42:eb:b0:61:52:
6a:69:e1:00:8b:86:f6:d1:19:fc:f1:40:88:66:d0:70:8f:6f:
2f:68:8a:b7:ef:80:1e:84:e4:91:87:21:7b:e4:4a:40:d8:d3:
87:a2:d9:5a:d7:76:53:2e:6c:c2:0f:63:de:f5:af:be:af:03:
d7:9a:a4:17:cc:b9:40:3e:43:6f:f9:1b:f4:27:9a:43:d6:a0:
fe:c5:c2:cd:ba:df:bc:70:7e:ec:c7:c6:8e:d1:cf:c3:ad:a5:
52:4c:30:94:3d:e9:8a:99:40:82:12:a6:82:58:10:0e:25:1c:
cb:e6:c2:7b:1c:06:75:b0:a9:1e:9b:74:60:53:ac:40:1d:d9:
cf:23:5b:ed:d8:40:23:41:89:c5:fa:6a:35:f9:3f:8b:89:84:
da:0c:82:9d:50:d3:39:9a:3c:da:45:e0:c0:26:95:a1:4f:51:
bd:e8:ab:3c:70:02:97:82:37:dd:84:45:48:1e:7f:c5:9d:fe:
d2:73:65:fc:81:62:fb:69:ba:5c:e9:0f:f9:63:c4:63:87:a9:
dd:44:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:51:54 2025 by rpki-client