Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa
File: gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa (raw, json)
Hash identifier: z6+iBWzj4bvqP41UlSpacoaDGuJaxTNbgxZSqBGtsI4=
Subject key identifier: 80:DF:7D:B2:09:1D:C4:FF:F2:F4:77:3E:1C:91:B9:9D:6C:9A:FE:44
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0194A8A708961E96E69EE6F41E72EAC96F65
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa
Signing time: Mon 27 Jan 2025 16:45:06 +0000
ROA not before: Mon 27 Jan 2025 16:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213519
IP address blocks: 2a14:67c1:a030::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:a7:08:96:1e:96:e6:9e:e6:f4:1e:72:ea:c9:6f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 27 16:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80df7db2091dc4fff2f4773e1c91b99d6c9afe44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:08:04:1b:bc:d8:83:17:6f:bd:8c:34:cc:
03:77:47:12:c8:1b:bd:12:85:28:72:93:35:5f:0c:
ed:42:11:6c:6f:39:ac:72:2c:aa:41:37:cb:ed:4d:
35:12:d5:2f:19:d7:76:29:49:3f:40:15:21:65:dc:
bf:87:d2:3c:9e:a7:30:47:0c:2d:89:75:ef:53:24:
da:ba:8d:71:cc:61:0e:41:7f:9a:3e:c3:53:0b:c7:
7a:ab:22:a6:d7:f7:9e:ee:50:5f:b4:89:ed:88:91:
f0:ab:09:7c:eb:86:74:36:85:aa:83:47:30:bf:09:
98:9e:db:e7:d0:25:0d:b6:76:6f:f8:95:6a:c0:ba:
81:22:bc:ed:48:14:7d:cc:8a:0b:17:0e:64:13:35:
5a:75:85:99:87:49:61:34:fe:ad:54:17:f5:9d:fe:
b3:bb:a1:45:f2:34:e7:bf:f1:4e:5f:0a:ea:f8:1a:
39:4f:9d:64:bb:f2:d0:e6:0a:80:94:8b:2c:2d:a5:
e5:59:12:0a:9e:04:6c:7f:4a:ca:8e:f1:22:e3:94:
51:81:81:a4:1c:a7:e1:33:8c:ce:53:57:e8:a3:5c:
09:64:f7:99:09:dd:c1:f6:53:0d:60:39:60:b7:24:
aa:9f:3d:51:ea:c2:62:38:c2:20:87:a3:87:6a:38:
00:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DF:7D:B2:09:1D:C4:FF:F2:F4:77:3E:1C:91:B9:9D:6C:9A:FE:44
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a030::/44
Signature Algorithm: sha256WithRSAEncryption
a1:e1:31:5a:58:ec:5d:89:de:37:9d:ad:b2:2c:e7:d6:8b:24:
7f:dc:6d:81:08:1d:f1:e4:4a:9e:c5:d6:dd:31:dd:80:ec:1a:
7b:56:5a:0b:4d:a0:94:66:90:15:0c:64:b5:a9:46:c3:31:e7:
d1:8f:dd:db:08:b6:de:f5:dc:d3:86:2b:32:c3:f4:f8:a9:7e:
0e:6e:c7:e6:58:30:53:c0:5f:d0:2d:0e:48:32:ee:a6:21:dc:
23:cd:fe:ce:56:2a:fb:1e:38:a5:df:66:77:9e:e3:8e:d5:15:
7b:ff:db:5f:8c:45:c5:20:06:04:e7:e7:b3:f7:a0:2f:bc:b0:
51:26:cd:18:29:07:54:87:04:be:37:2a:d8:76:0a:c3:cc:7c:
2a:c4:6b:b0:d8:db:26:c0:a4:2a:9e:c1:5a:4d:4d:b6:1c:c0:
e1:5a:8e:24:d8:96:a8:97:d1:5b:58:49:9e:0f:4b:71:6b:97:
d2:36:21:81:03:96:53:5e:a2:77:8c:f2:65:9b:bb:1b:00:75:
cf:a1:20:7c:5f:1d:fa:53:c4:3b:9b:27:e8:cf:f0:b9:cc:e0:
01:85:a0:69:f5:77:10:97:15:ee:82:69:02:5d:c6:e4:66:bb:
6a:77:92:5e:73:a0:e4:b6:25:0f:4a:fb:85:6e:b0:78:72:52:
2f:f6:6e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:41 2025 by rpki-client