Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ASFB-dCcM6udrB7eOokhjDxiqPA.roa
File: ASFB-dCcM6udrB7eOokhjDxiqPA.roa (raw, json)
Hash identifier: IyWLMdSDpKr1lCYc2xFykyWxVDSTzNuazF9ohxAxa98=
Subject key identifier: 01:21:41:F9:D0:9C:33:AB:9D:AC:1E:DE:3A:89:21:8C:3C:62:A8:F0
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF336CC6DB58142E46CCAD0730F96
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ASFB-dCcM6udrB7eOokhjDxiqPA.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215080
IP address blocks: 2a0c:9a40:8590::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f3:36:cc:6d:b5:81:42:e4:6c:ca:d0:73:0f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=012141f9d09c33ab9dac1ede3a89218c3c62a8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:df:49:4d:89:d1:d4:ab:8b:1c:ee:1a:f8:
fa:31:1e:aa:04:79:7d:06:51:3e:e4:08:67:63:4a:
79:e0:b1:fa:b1:74:f1:3c:a4:ea:79:2b:9d:0c:a6:
bc:10:86:14:19:5f:15:e4:25:69:2c:c1:83:06:0a:
7b:e4:1a:8c:ba:ed:a3:60:63:42:6a:1e:82:0f:ae:
88:67:04:c9:3b:a0:31:8b:f8:bb:e1:cc:11:48:52:
cc:6b:38:79:f4:54:29:bf:e6:4e:7f:4c:8f:88:36:
be:0e:c7:71:a1:f8:0b:46:ac:e6:ba:9d:f8:3f:4c:
0a:17:e6:03:51:2a:fe:69:bf:cb:64:fe:f2:a1:6b:
58:25:28:15:76:c5:5b:bf:15:a5:9d:ef:bd:ac:4a:
46:87:34:33:91:fd:20:3c:b9:36:2d:1c:d1:9d:f4:
51:8d:d0:17:40:1b:4b:1d:7d:95:74:6e:b0:f5:32:
a0:be:50:2a:13:53:5f:b4:e3:87:7a:fd:74:f6:25:
ca:c5:f5:81:19:2e:87:85:8c:a8:6d:ba:fe:bb:42:
b8:b1:89:d9:a5:4c:c6:c7:a9:ee:a4:b0:61:b3:46:
7e:4c:6c:fd:9c:0f:a5:32:26:36:91:71:b4:77:75:
b7:44:62:85:fb:9b:c5:97:cd:ab:88:52:8f:52:10:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:21:41:F9:D0:9C:33:AB:9D:AC:1E:DE:3A:89:21:8C:3C:62:A8:F0
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ASFB-dCcM6udrB7eOokhjDxiqPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8590::/48
Signature Algorithm: sha256WithRSAEncryption
06:3b:e3:09:04:d0:65:66:46:cb:f3:61:87:d9:e6:ee:6b:08:
8b:c3:08:e4:1c:fc:1b:4a:c0:89:fe:93:01:d2:e4:cc:4a:f6:
0a:25:58:1e:64:67:e2:fb:50:df:57:d4:a1:c2:86:7b:6f:fd:
d9:fc:4b:4e:c0:5c:b7:bd:af:43:5c:66:7b:13:e4:ff:48:5f:
4f:44:73:49:26:c3:73:a9:ff:d0:c1:a0:c0:d0:ad:61:4d:8f:
c1:5b:b9:1c:b0:50:21:a4:37:be:23:33:77:20:e6:0f:0a:04:
1d:30:db:ce:25:f8:94:0d:21:f8:2b:07:5d:64:10:da:13:ab:
ed:91:d7:4c:d8:7b:27:94:fc:39:50:bb:8f:d2:60:fc:2c:62:
aa:71:2b:78:75:90:87:b5:47:2b:b7:61:4b:08:a0:6b:29:e7:
e6:46:c4:36:4c:79:00:31:55:74:dd:09:1b:cb:90:a3:41:2d:
d6:f4:b4:e6:86:e5:32:37:ae:10:c3:45:38:2a:1c:22:ce:41:
3e:60:0f:a4:5e:e3:4e:b1:af:cc:37:b5:d7:e2:10:d9:40:07:
21:0d:f9:68:89:ef:13:cd:68:c6:6d:0b:4c:82:8a:7c:1c:d2:
3e:43:68:84:58:ba:ec:eb:81:22:54:0e:cf:00:14:45:1c:c3:
80:bc:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:02 2025 by rpki-client