Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/SSf6jkDtZNnbxOBRunTsvPqgvfA.roa
File: SSf6jkDtZNnbxOBRunTsvPqgvfA.roa (raw, json)
Hash identifier: 5IZEhx43JWWVyUng521teCJJCgxsPSwTh1bUksl7+e8=
Subject key identifier: 49:27:FA:8E:40:ED:64:D9:DB:C4:E0:51:BA:74:EC:BC:FA:A0:BD:F0
Certificate issuer: /CN=2a4558e2656bf89733389594df144d21d1dc0313
Certificate serial: 019421443BE697BE8E092B72796DDA46723C
Authority key identifier: 2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/SSf6jkDtZNnbxOBRunTsvPqgvfA.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215582
IP address blocks: 2001:67c:dc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3b:e6:97:be:8e:09:2b:72:79:6d:da:46:72:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4558e2656bf89733389594df144d21d1dc0313
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4927fa8e40ed64d9dbc4e051ba74ecbcfaa0bdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:55:7d:c1:74:81:50:b2:90:d3:36:76:0e:
37:d7:6e:36:90:16:d3:51:c9:3c:13:d0:9e:fc:f6:
3b:a8:ab:24:7b:bd:b0:0a:c5:21:0e:71:da:47:13:
05:95:83:d4:43:aa:18:44:10:fd:5c:00:9e:8e:96:
0a:48:46:c5:ba:74:63:29:09:23:fd:77:45:72:99:
0f:24:e4:3f:9c:18:ab:ab:39:33:60:9d:d3:a5:1b:
dc:5c:28:de:55:cb:30:56:b5:98:e9:15:c3:85:3e:
a0:8a:84:23:01:74:33:00:60:06:12:4c:8e:5c:27:
e6:98:84:d9:12:61:9c:ee:88:e2:c4:29:62:34:ed:
6d:37:01:ac:51:6c:ab:ee:62:8b:89:b3:0c:89:90:
cc:e9:ad:14:28:ce:db:3a:09:a2:46:9e:30:95:a3:
5d:b7:86:4d:46:04:68:e8:7b:bc:6b:73:7e:e5:c8:
e9:f4:24:a9:81:be:13:d1:c4:f9:67:4d:23:3a:dd:
fe:03:11:44:08:64:5a:e7:1a:26:44:01:5d:21:c7:
09:d0:4b:10:9a:b3:3f:72:79:60:79:a4:29:57:6f:
32:da:5c:1e:3c:cd:9f:8b:cb:d4:88:e9:7b:25:75:
11:82:5c:9c:1e:58:c8:30:ce:33:b1:61:a5:ac:82:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:27:FA:8E:40:ED:64:D9:DB:C4:E0:51:BA:74:EC:BC:FA:A0:BD:F0
X509v3 Authority Key Identifier:
keyid:2A:45:58:E2:65:6B:F8:97:33:38:95:94:DF:14:4D:21:D1:DC:03:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkVY4mVr-JczOJWU3xRNIdHcAxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/SSf6jkDtZNnbxOBRunTsvPqgvfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d5c38f-4fc3-4283-9c39-9055283f0eae/1/KkVY4mVr-JczOJWU3xRNIdHcAxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:dc0::/48
Signature Algorithm: sha256WithRSAEncryption
60:30:a9:04:d6:8e:36:43:88:7d:52:0e:5f:17:20:fd:25:ba:
24:ab:06:bd:ee:a2:92:92:30:d7:79:3b:d3:3c:8e:b4:8e:00:
26:e7:dd:40:db:52:07:e9:4d:7a:b8:bc:6a:36:ac:ba:b5:f6:
e8:54:d3:ca:a3:53:fb:ce:5f:cf:cd:47:34:f9:1b:42:ec:31:
af:9a:c2:22:eb:27:b1:64:a9:b3:ab:c9:4d:75:ef:8c:1d:8d:
74:d1:83:a2:ff:09:0d:5f:3d:95:2b:c1:31:5a:f6:1c:f9:29:
e3:43:69:09:08:33:12:6d:f7:2a:f2:81:c3:49:2a:a0:16:b6:
a6:93:c3:ad:d7:69:f5:bd:bb:e9:dd:48:7f:46:e5:f1:0c:9e:
88:ad:d8:01:24:ee:d7:8e:eb:34:5c:cc:9f:44:76:92:70:86:
8d:b9:ef:cf:34:28:e0:aa:d4:d6:b5:f2:4a:f8:f6:23:80:38:
a6:e4:63:d7:40:a1:5e:75:0b:4a:3b:c4:b1:ea:c1:f0:cc:8c:
1a:34:d7:ac:20:f2:fb:23:c9:38:23:ca:b2:4e:60:0f:45:42:
30:4b:43:0f:ed:e3:41:08:b7:26:e4:5b:44:63:01:e2:8b:41:
a8:21:36:96:fb:f3:8c:87:bc:f4:d2:61:dd:ad:fa:db:4e:44:
e4:79:a1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:22:57 2025 by rpki-client