Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/5y1ushKBRUTrOJNUvJiYmUnqiXI.roa
File: 5y1ushKBRUTrOJNUvJiYmUnqiXI.roa (raw, json)
Hash identifier: Ci2ppd440+9qMZk/kpg4OojmAw8zTwyC7q8Nf/pbCIw=
Subject key identifier: E7:2D:6E:B2:12:81:45:44:EB:38:93:54:BC:98:98:99:49:EA:89:72
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019465210A42F3D18EB905BB071AA1905F26
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/5y1ushKBRUTrOJNUvJiYmUnqiXI.roa
Signing time: Tue 14 Jan 2025 14:04:11 +0000
ROA not before: Tue 14 Jan 2025 14:04:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199018
IP address blocks: 2a14:67c1:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:21:0a:42:f3:d1:8e:b9:05:bb:07:1a:a1:90:5f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 14 14:04:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e72d6eb212814544eb389354bc98989949ea8972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:44:91:a6:1c:54:14:67:51:1b:cf:ce:04:
f7:a0:98:25:ec:1f:a5:c6:ce:b6:63:b3:51:d8:48:
fa:a3:4f:77:80:c2:a2:f1:40:52:12:1f:b9:ea:62:
60:ef:94:c7:ab:48:f9:f8:9c:89:84:d0:dd:1c:e5:
75:f1:a5:06:99:09:bc:ae:97:df:9f:57:18:eb:d5:
18:d3:59:22:31:4f:e1:94:97:9f:b3:3a:b6:28:94:
44:97:9a:31:5f:0d:97:70:48:da:66:3b:d8:fb:0a:
db:8a:85:d4:64:2c:0c:47:bc:c6:f9:52:96:1a:32:
78:50:50:e8:cb:76:21:2a:4e:5e:33:bd:93:d8:08:
ef:ed:f2:39:93:72:37:4f:bf:ac:9d:dc:c5:a8:1b:
bd:30:36:7a:97:92:fd:07:b8:92:31:9f:0c:26:a1:
d2:d9:c9:27:07:99:79:05:7c:56:9b:a2:75:61:aa:
49:1a:f6:60:c8:6a:ac:11:47:2e:fb:85:76:f1:87:
c3:85:a4:d7:89:c2:57:1c:e3:49:b0:1e:97:05:36:
c0:29:74:2b:84:cd:86:79:84:e5:cf:23:17:ac:ae:
05:93:70:5c:05:4b:d0:27:82:d0:e3:d9:de:d9:a8:
db:b8:c3:8f:d4:c8:b9:e6:88:90:3b:ab:a4:2f:97:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2D:6E:B2:12:81:45:44:EB:38:93:54:BC:98:98:99:49:EA:89:72
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/5y1ushKBRUTrOJNUvJiYmUnqiXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:900::/40
Signature Algorithm: sha256WithRSAEncryption
d7:f0:f0:f5:84:bb:72:14:b0:bb:d7:ca:1d:75:9f:c3:ec:f8:
35:2b:08:dc:3d:37:02:42:38:d2:ab:65:88:0b:a0:a4:6d:e7:
44:54:85:f8:7b:7d:02:b9:6c:6b:3d:88:f5:ff:af:41:d4:25:
a7:1b:b8:90:de:40:52:bc:7a:f1:5e:37:e5:2b:a4:b7:d1:6a:
b4:4d:e2:74:22:49:17:8a:b8:5b:55:53:16:57:c8:3e:41:f0:
75:f2:f2:a8:b5:84:57:ae:23:c2:e3:1e:3a:69:3b:19:94:4b:
28:73:5f:2b:90:8b:1c:59:87:5d:fa:de:06:29:ea:ab:e8:fc:
a0:b7:e6:4e:dc:83:55:7c:5c:4b:72:2c:11:4c:8d:c4:96:61:
9f:bb:32:2d:98:d8:cb:d7:82:7d:e2:62:9e:91:19:ab:92:c3:
61:56:ee:21:a2:8f:d8:e9:b1:f3:bd:0b:81:52:e3:a5:23:a5:
21:0e:a1:8a:ef:19:89:53:17:45:ba:d3:22:7f:6e:78:2e:d9:
37:3c:b9:f3:17:94:8b:bd:7f:c1:f7:91:de:87:73:ae:13:58:
84:cb:04:7d:f8:64:f8:c6:6b:2d:59:b6:eb:98:a4:b4:c2:7e:
e1:04:bd:d8:e7:81:c4:5d:40:97:c0:34:84:39:4f:e4:5a:54:
3b:b9:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:30 2025 by rpki-client