Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa
File: AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa (raw, json)
Hash identifier: Xaavj0qNWpbVbYI0PhwiiuL7IGyoywVJOdUO3BJEDgM=
Subject key identifier: 01:84:B0:FA:DE:85:65:0C:4E:7F:7B:B2:69:85:4E:C4:F4:FB:AE:4C
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 01942143EC25D5473E939CFECBB94511E2C7
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 2a14:1b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ec:25:d5:47:3e:93:9c:fe:cb:b9:45:11:e2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0184b0fade85650c4e7f7bb269854ec4f4fbae4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:96:8b:16:ac:95:82:4b:65:26:8e:72:d4:
a8:99:be:1e:df:6d:c6:68:53:d8:52:36:a8:a7:63:
4b:3e:3f:38:1b:38:01:ca:74:82:5b:16:5b:65:16:
1f:74:70:72:c9:ef:03:71:eb:b1:1e:db:a0:06:76:
97:f6:06:f8:80:62:ff:32:af:f9:d5:c1:01:27:be:
bb:da:95:49:ae:60:9b:fd:0c:fe:f0:25:98:7c:5a:
42:9f:59:72:0c:5c:74:d1:c6:ea:31:41:63:02:90:
49:06:ec:b5:67:15:bf:8b:40:02:11:66:7a:0a:29:
cb:f7:a0:4b:0d:42:22:5a:13:61:5a:a0:b3:f7:3d:
76:bf:6b:25:d2:66:66:e9:b5:7b:df:fc:e8:8a:dc:
03:7e:df:6b:4d:43:b9:a6:70:f4:66:12:85:c0:7b:
3d:23:d6:f6:59:11:b1:50:78:14:8b:34:31:a1:c8:
87:96:62:28:0f:14:4a:17:34:af:c1:1a:a6:07:41:
d3:0f:9a:70:4e:8a:3c:d3:92:c4:75:09:34:d5:60:
87:9d:95:6e:21:b6:96:f3:1f:ec:49:e2:c0:30:8e:
de:01:a5:d4:d9:e6:24:9f:81:be:09:fb:b2:e0:4d:
50:87:07:90:33:9b:05:7a:2e:ad:97:12:ca:10:9a:
50:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:84:B0:FA:DE:85:65:0C:4E:7F:7B:B2:69:85:4E:C4:F4:FB:AE:4C
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/AYSw-t6FZQxOf3uyaYVOxPT7rkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1b40::/29
Signature Algorithm: sha256WithRSAEncryption
33:39:55:0a:1c:23:0e:4f:79:70:d7:39:d5:dd:2c:c1:24:41:
c9:93:bf:57:35:e7:96:56:cc:45:96:03:e1:7f:ff:32:cf:57:
9f:f5:01:ae:ae:f4:b6:29:c4:85:8b:b8:fb:77:8c:44:78:40:
88:60:67:dc:0f:b1:c9:ef:64:2c:d6:ba:25:e2:9c:0f:ca:8d:
2d:13:d1:be:0d:45:92:d0:a6:0c:ca:8a:ce:21:18:d7:e7:0f:
8b:b7:df:6c:de:29:c3:af:19:6c:9d:e5:68:de:ab:5c:7a:4b:
26:33:2e:6e:ce:d4:9f:48:f1:3f:08:2e:d5:55:f0:95:2d:0e:
2e:58:6e:01:6c:29:10:4f:bb:5a:2b:11:ae:71:d4:f7:12:20:
6a:7b:37:fa:75:b1:3f:de:b5:99:f5:44:32:38:8a:6e:fd:a0:
ba:95:88:62:56:aa:32:3b:11:dc:1c:4e:d8:bc:6b:11:3e:60:
8f:89:58:fc:b5:da:c7:07:3b:bb:1e:f8:b0:a7:cd:da:5a:68:
24:1e:b5:17:e5:9b:37:60:9c:64:d0:4b:fa:d3:1b:56:aa:06:
28:bc:de:27:f8:ce:00:8f:e7:71:e8:27:3f:ea:77:a2:e7:05:
e1:50:98:ed:79:c4:86:a6:fd:7b:ef:ba:96:07:e0:ed:31:f3:
b6:64:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:45 2025 by rpki-client