Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/aAifBze_JXbbUHJNy418NFONnUo.roa
File: aAifBze_JXbbUHJNy418NFONnUo.roa (raw, json)
Hash identifier: rLLARXHfwNDLekNJ80A4f1i0LwTr3pN9Pr1HKxuL2t0=
Subject key identifier: 68:08:9F:07:37:BF:25:76:DB:50:72:4D:CB:8D:7C:34:53:8D:9D:4A
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 01942825891A121B5AA3040671867F35E44F
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/aAifBze_JXbbUHJNy418NFONnUo.roa
Signing time: Thu 02 Jan 2025 17:52:16 +0000
ROA not before: Thu 02 Jan 2025 17:52:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a04:30c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:89:1a:12:1b:5a:a3:04:06:71:86:7f:35:e4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 17:52:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68089f0737bf2576db50724dcb8d7c34538d9d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:e6:c3:23:8a:a2:92:42:d0:ce:7a:61:09:
6c:6f:a5:dc:d6:28:57:70:ba:00:52:4b:90:71:84:
c8:b0:40:76:46:ec:5f:e5:db:28:5e:65:03:3b:b0:
8f:fc:e0:7e:df:5a:da:f5:1e:b3:e5:13:5f:32:21:
2c:35:14:d7:12:be:f3:bb:56:55:f1:99:6c:75:20:
fb:cf:45:41:e4:ef:bf:b0:00:c9:1f:b9:dd:c7:06:
ff:1a:09:8d:5b:ba:6d:37:46:0f:8b:e9:aa:e8:0f:
04:78:ee:1d:b5:05:37:9e:2a:8e:a3:1e:f7:96:5a:
12:50:41:33:93:18:e1:3e:87:cf:ab:d9:f8:14:01:
f9:b0:48:64:96:8c:78:e9:12:12:8b:ed:12:07:ac:
5b:2c:82:17:d7:47:71:54:df:e1:6b:47:04:5b:32:
e8:0b:2c:31:2d:20:f5:8a:8b:25:4a:b2:a6:a6:58:
1b:d5:2e:e8:86:0c:67:b6:d2:bb:96:40:b1:1a:a8:
a7:32:39:c8:4d:18:48:11:06:90:6f:6b:d2:f5:d1:
7f:77:c7:fd:3c:07:59:82:a9:27:11:ce:b4:39:b6:
95:cc:a3:2f:fd:77:bf:2f:a4:ef:5f:db:0c:d1:8f:
f0:c4:7b:ae:62:25:fe:4f:1f:ab:c3:98:aa:e1:82:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:08:9F:07:37:BF:25:76:DB:50:72:4D:CB:8D:7C:34:53:8D:9D:4A
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/aAifBze_JXbbUHJNy418NFONnUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:30c0::/32
Signature Algorithm: sha256WithRSAEncryption
69:65:83:92:0c:e6:ae:22:9f:a9:37:16:55:4b:be:cb:6b:d9:
42:47:ea:9a:ad:13:ca:2c:c5:7d:1b:51:94:a1:e9:85:9e:e3:
da:0c:64:fc:08:ce:a4:e8:2a:ec:57:7f:03:a3:87:96:8e:f4:
71:b1:ba:08:3b:af:ce:23:8b:16:c3:b4:3d:a7:2e:40:62:51:
71:b8:66:fe:7b:15:70:e8:61:3b:db:dd:cb:29:5a:5e:02:b0:
bc:4f:b0:54:00:16:e0:00:11:61:23:3a:1f:bb:e6:23:03:5a:
e8:f4:e6:86:38:53:c6:c5:6d:1b:67:8e:db:c4:5a:54:94:e8:
80:28:dc:26:73:a2:91:09:e5:57:46:f0:93:e6:15:00:7d:bd:
19:09:89:96:6e:39:14:aa:3a:43:39:69:9b:6d:a8:f2:32:57:
0b:61:61:e8:95:c1:11:b1:27:f9:17:6c:de:5d:de:34:05:52:
2f:60:f0:50:f3:34:ec:00:72:3c:23:0e:77:12:c1:1e:fa:27:
75:6f:bb:90:eb:51:4a:e2:11:a1:ec:3e:40:b1:e5:71:c3:45:
b4:dd:45:61:10:e5:d2:34:ad:cf:b3:d4:6a:93:c7:10:db:10:
3a:65:0e:65:22:f8:0a:c2:80:f5:7a:fd:13:37:ae:27:1d:a3:
02:6b:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:29 2025 by rpki-client