Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/g7tURuUH3V3-cIb4_m5S3L6NgF0.roa
File: g7tURuUH3V3-cIb4_m5S3L6NgF0.roa (raw, json)
Hash identifier: BdP19LBcCTIkuafGLyFvqTdagspaIFMT4g3LWhFA5BM=
Subject key identifier: 83:BB:54:46:E5:07:DD:5D:FE:70:86:F8:FE:6E:52:DC:BE:8D:80:5D
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0194419D0D135BFC92803B6C30C0B012193A
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/g7tURuUH3V3-cIb4_m5S3L6NgF0.roa
Signing time: Tue 07 Jan 2025 16:33:19 +0000
ROA not before: Tue 07 Jan 2025 16:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213625
IP address blocks: 2a14:67c1:800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:9d:0d:13:5b:fc:92:80:3b:6c:30:c0:b0:12:19:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 7 16:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83bb5446e507dd5dfe7086f8fe6e52dcbe8d805d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:95:d1:4f:53:11:23:28:4a:58:9a:fd:94:
e2:a5:5f:19:a2:5b:b1:b1:71:38:1e:1d:86:58:ee:
38:8f:5d:5e:7c:f4:82:f6:65:c8:90:e3:5c:ff:e4:
0f:8b:43:b1:cc:ee:53:07:1e:c7:d1:ea:93:a4:cf:
22:52:89:1d:d6:92:bf:12:1e:69:bd:d9:3f:52:7f:
48:19:ac:0f:e0:f9:57:d8:ad:81:2b:54:08:e5:a8:
df:b8:95:0e:56:80:a9:dd:71:aa:be:d6:04:19:d7:
bf:5d:fb:99:b0:e1:d7:77:f4:97:01:0b:c8:42:6e:
be:a5:4b:12:29:be:63:65:37:30:2f:ba:00:2f:10:
c6:96:58:2f:fe:a5:9c:75:b9:1c:5d:c1:3a:a0:9d:
8f:ca:ac:30:cc:6b:a4:66:04:9a:fd:6c:fb:09:45:
5d:90:03:0f:2b:42:e4:38:72:43:92:29:8e:e7:03:
36:d9:31:05:5b:e5:a5:fc:fd:6d:16:85:9d:9e:c2:
35:66:87:de:fc:28:46:d7:79:36:47:b3:e8:bd:e8:
cd:b3:84:37:eb:4b:96:de:a9:38:30:3a:72:eb:1a:
af:bd:13:0f:98:ea:00:e7:d0:9a:72:58:3d:d5:af:
00:a1:a8:62:d2:14:3f:ea:01:26:6c:57:81:b3:5e:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BB:54:46:E5:07:DD:5D:FE:70:86:F8:FE:6E:52:DC:BE:8D:80:5D
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/g7tURuUH3V3-cIb4_m5S3L6NgF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:800::/40
Signature Algorithm: sha256WithRSAEncryption
c5:e6:3a:bd:13:e1:86:07:f0:3e:0c:16:5a:34:ef:c7:a7:70:
45:0a:a2:e0:3a:6b:00:f1:c9:9c:68:9a:e8:56:02:74:6d:93:
a4:ca:6f:d0:b6:91:04:ab:68:8f:eb:25:8f:a4:6a:f3:e3:6a:
ce:a5:1a:b6:5f:96:5c:fb:70:d9:55:68:d8:a5:d4:ec:80:40:
35:35:d0:13:9e:e1:ec:b5:1f:ea:84:1f:58:43:91:5a:f2:f8:
09:73:81:be:1d:0b:f5:78:e9:cb:2f:3c:3e:aa:99:ab:0b:01:
ed:03:24:4d:4b:be:61:c7:a4:17:64:ed:ce:41:1a:a8:43:b4:
ae:b4:35:ef:0a:fd:f9:4c:d6:a6:b2:72:47:ef:71:90:b8:22:
fa:0c:a9:7c:1c:ce:d6:71:82:ac:e3:1e:69:bc:63:7e:ba:89:
28:99:69:b6:2d:fd:bc:dc:ec:d3:68:09:2d:03:a2:ff:d8:32:
41:7c:b3:01:dd:e6:a4:3e:1a:e0:82:e6:e0:61:81:e3:70:37:
7e:24:54:07:98:e3:cd:d7:f2:92:ab:cd:72:69:c0:2e:c2:c8:
50:1f:70:c6:68:21:81:03:68:68:1c:d2:c7:98:75:8d:3a:aa:
f7:7b:0d:60:00:65:95:a3:df:91:31:5c:41:13:e2:6f:4e:74:
09:0f:23:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:21 2025 by rpki-client