Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/27uDgRnFOW0SM2NPyAkr4r8MQF0.roa
File: 27uDgRnFOW0SM2NPyAkr4r8MQF0.roa (raw, json)
Hash identifier: b3NT6Op73zSiISDfhq7yutWEP4jGxJ+LIdfJD3lEy54=
Subject key identifier: DB:BB:83:81:19:C5:39:6D:12:33:63:4F:C8:09:2B:E2:BF:0C:40:5D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBDF43A330FB33D355628319428A5C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/27uDgRnFOW0SM2NPyAkr4r8MQF0.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205102
IP address blocks: 2a0c:9a40:8420::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:df:43:a3:30:fb:33:d3:55:62:83:19:42:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbbb838119c5396d1233634fc8092be2bf0c405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:14:b2:76:bd:b5:29:6d:6c:59:2d:5e:bb:
7c:99:44:4a:8a:9b:3e:16:11:ff:27:b8:d1:c0:2c:
bf:60:5f:63:c8:a2:6c:48:6e:50:2d:6a:38:7f:75:
3e:0c:57:e1:ae:a0:ec:61:c9:a8:bc:f4:2a:c4:11:
ed:07:d0:b6:a8:37:4d:19:67:40:ef:81:7d:79:40:
a9:2a:cb:87:a3:69:d2:3a:89:2d:3f:18:6c:94:a4:
04:21:6e:8a:1e:c7:b7:1e:ed:14:99:31:9c:ec:85:
9f:3a:ea:74:bc:b9:42:72:73:ff:81:12:71:65:e8:
34:d9:38:b6:a7:7e:b4:2f:ff:1c:08:c5:10:e6:40:
d8:c7:71:6d:97:99:ad:b7:23:98:43:d6:e4:d4:a9:
26:a2:33:90:f6:d0:dc:99:ad:62:ee:26:e2:a7:65:
ca:50:c8:04:80:24:8f:0d:0c:ab:40:e8:9c:93:88:
b2:be:b4:25:b9:d8:e4:47:7e:60:b6:cc:9c:90:10:
b0:02:b9:90:c4:cc:cf:71:71:4c:24:df:bb:20:bf:
54:ed:02:42:4e:4b:c1:3a:3e:29:8d:bc:2c:61:ca:
6c:a4:22:09:fe:8d:ed:72:08:60:eb:05:d4:de:8f:
f7:ee:a3:ff:8a:25:f8:37:f3:00:77:55:20:23:db:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:83:81:19:C5:39:6D:12:33:63:4F:C8:09:2B:E2:BF:0C:40:5D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/27uDgRnFOW0SM2NPyAkr4r8MQF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8420::/44
Signature Algorithm: sha256WithRSAEncryption
78:44:32:3b:e9:54:9d:36:25:ea:1d:14:84:15:8c:81:fb:3a:
c9:11:a7:13:36:69:99:66:90:7a:a6:46:eb:eb:cb:31:b9:13:
95:1b:ec:72:32:c2:2a:da:14:e9:33:f4:ee:15:4c:ee:fc:e1:
77:78:ad:0b:0d:07:48:fa:c0:eb:d1:84:d8:09:a9:43:58:30:
bc:46:ca:29:13:b2:b3:1b:d7:2c:bd:e2:5d:44:43:fc:ce:b0:
36:c5:eb:9b:42:db:7a:57:28:ed:7f:c5:b4:15:21:65:24:a9:
34:ee:29:52:96:4e:79:af:ef:7c:ca:3f:2e:17:33:2f:fc:15:
ca:b2:0b:51:29:39:b2:a5:4a:49:78:7a:ff:32:eb:55:87:57:
36:74:63:39:ce:19:f9:16:6c:27:c1:19:58:31:6d:b5:14:b3:
d3:91:55:09:4c:da:5f:84:e3:01:8e:81:29:5f:de:47:59:e4:
a4:6a:8e:b6:8a:71:35:00:9f:5f:4c:d1:33:90:18:11:c1:d5:
e4:69:9a:59:cd:ff:9f:06:d1:9a:54:c1:6c:35:0e:33:ed:1e:
b2:6e:c1:58:b7:24:e7:d4:69:36:06:0a:af:61:4d:06:60:94:
ae:dd:81:54:7f:7b:7e:1c:ac:b0:95:49:31:da:a9:3d:f5:ac:
05:48:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:52 2025 by rpki-client