Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sI5AtJ-C-KpZYuAvc2LHnVSkf1c.roa
File: sI5AtJ-C-KpZYuAvc2LHnVSkf1c.roa (raw, json)
Hash identifier: xCsxALm+k3IRvJXWw9C7LrnFqJ00N3UkjST7UjkMxl8=
Subject key identifier: B0:8E:40:B4:9F:82:F8:AA:59:62:E0:2F:73:62:C7:9D:54:A4:7F:57
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE3A8519E3563E0BE2A488BD9C4AB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sI5AtJ-C-KpZYuAvc2LHnVSkf1c.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209022
IP address blocks: 2a0c:9a40:8c40::/48 maxlen: 48
2a0c:9a40:c000::/36 maxlen: 48
2a0c:9a40:c000::/48 maxlen: 48
2a0c:9a40:c001::/48 maxlen: 48
2a0c:9a40:c002::/48 maxlen: 48
2a0c:9a40:c003::/48 maxlen: 48
2a0c:9a40:c004::/48 maxlen: 48
2a0c:9a44:beef::/48 maxlen: 48
2a10:a500:b00b::/48 maxlen: 48
2a10:a501:b00b::/48 maxlen: 48
2a10:a502:b00b::/48 maxlen: 48
2a10:a503:b00b::/48 maxlen: 48
2a10:a504:b00b::/48 maxlen: 48
2a10:a505:b00b::/48 maxlen: 48
2a10:a506:b00b::/48 maxlen: 48
2a10:a507:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e3:a8:51:9e:35:63:e0:be:2a:48:8b:d9:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b08e40b49f82f8aa5962e02f7362c79d54a47f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:fc:47:03:2b:18:fd:55:96:70:70:c4:e3:
18:4d:75:ee:1c:af:81:df:31:33:d5:11:39:2e:95:
e9:4d:58:f6:a5:3b:56:6c:7d:13:38:dd:b8:b4:cd:
93:a3:c9:12:7b:bd:df:f3:56:f5:59:25:95:f1:98:
4c:1f:59:21:de:b5:e2:2c:e4:40:96:be:97:9c:5e:
f8:57:ba:3d:18:57:9d:70:8b:70:a4:85:c7:72:8d:
d2:cd:f1:1b:3b:fe:ce:8d:1d:3a:3d:1d:b1:79:5b:
e0:84:b1:26:ff:3f:c4:0a:b6:af:78:f0:27:95:a1:
96:7e:0e:2f:ac:be:54:42:1d:0d:d9:1a:b5:2b:da:
1c:c7:7f:f7:fa:d7:5c:73:be:d6:c4:30:7b:d1:ee:
b6:af:e0:64:36:cf:cb:a9:a7:f7:1d:f7:1d:be:70:
d3:80:70:f4:1b:03:65:9d:65:89:cf:1c:34:93:4e:
25:b6:cb:c1:da:4b:12:4a:29:5c:91:86:c0:63:d5:
1b:b2:a0:7b:ed:44:55:0e:d7:7a:0b:42:68:c1:3a:
6e:7c:65:df:91:45:c3:16:2b:91:44:8e:e5:2e:6f:
58:88:e6:4a:29:ab:36:5b:d9:ea:93:f0:ff:58:60:
b2:5a:b6:b7:5b:9b:59:4c:ab:25:b6:f5:9c:99:ff:
36:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8E:40:B4:9F:82:F8:AA:59:62:E0:2F:73:62:C7:9D:54:A4:7F:57
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sI5AtJ-C-KpZYuAvc2LHnVSkf1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c40::/48
2a0c:9a40:c000::/36
2a0c:9a44:beef::/48
2a10:a500:b00b::/48
2a10:a501:b00b::/48
2a10:a502:b00b::/48
2a10:a503:b00b::/48
2a10:a504:b00b::/48
2a10:a505:b00b::/48
2a10:a506:b00b::/48
2a10:a507:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
ce:1f:6a:a7:eb:e5:e6:e9:fd:04:5a:74:9a:f9:5f:d3:2e:65:
29:d1:43:16:5a:0a:2d:00:4a:09:f6:30:57:7a:07:77:55:c9:
a5:8b:96:31:01:b3:15:7a:a3:7a:b3:31:46:6b:2e:c7:39:e9:
9c:01:38:c1:68:fe:82:5d:a9:87:5b:19:a2:eb:14:f3:ac:5c:
2f:eb:4c:be:dd:b9:b6:7d:d8:44:0e:19:61:52:0b:09:93:9f:
99:7a:c7:2e:ca:87:ff:82:32:52:b8:11:88:be:32:e6:75:77:
44:42:77:ae:a3:24:07:17:41:f1:6c:fd:81:44:e0:15:a0:e9:
07:b2:96:b0:ed:81:de:a8:cf:28:99:8e:8e:72:e1:6c:50:82:
9c:46:22:7c:41:cc:ea:3e:d8:d5:ac:61:5b:91:5d:6b:53:da:
0b:cc:b1:36:f2:84:f4:46:48:63:9d:cc:f2:87:ee:76:8d:db:
79:4d:3a:da:1d:f6:ec:13:11:5c:f9:12:f7:fa:c1:cb:51:32:
6c:70:11:f4:c5:02:33:fc:ed:28:30:9e:c8:1d:4f:63:04:25:
64:ab:ac:f6:8f:67:d7:eb:b2:92:be:13:0f:6a:cf:57:41:55:
4d:ea:86:50:c8:84:99:ff:8b:0e:8c:06:c1:23:17:9a:4d:c6:
86:26:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:48:44 2025 by rpki-client