Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/j3n-07vfKdngr7KWusBdYHtWkLA.roa
File: j3n-07vfKdngr7KWusBdYHtWkLA.roa (raw, json)
Hash identifier: I8Nyhvl9JRJ5QuyqTJAc18Z1FU3Ux5OLZnkQZ2v4dfQ=
Subject key identifier: 8F:79:FE:D3:BB:DF:29:D9:E0:AF:B2:96:BA:C0:5D:60:7B:56:90:B0
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01942746FE2B3DE55462548595172FF09347
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/j3n-07vfKdngr7KWusBdYHtWkLA.roa
Signing time: Thu 02 Jan 2025 13:49:11 +0000
ROA not before: Thu 02 Jan 2025 13:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 2a0b:4141::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:fe:2b:3d:e5:54:62:54:85:95:17:2f:f0:93:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jan 2 13:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f79fed3bbdf29d9e0afb296bac05d607b5690b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:ac:ec:92:f1:66:a6:f1:a3:d1:bc:cd:d2:
50:52:78:49:4f:c8:94:f5:2e:af:56:f0:c2:4c:8a:
b7:d4:f4:08:c5:53:3e:39:84:e4:8b:6c:5b:19:ad:
8f:58:74:d0:15:b3:33:e1:88:97:6c:95:e0:c6:c7:
03:bd:80:b1:2c:e8:27:92:8c:b8:e4:72:ef:64:e1:
23:53:54:25:3a:94:a1:77:c1:ec:02:92:49:f0:78:
11:61:8e:04:bf:1f:70:e4:15:8d:b4:b2:60:2a:c4:
db:b3:13:31:b3:38:b2:dd:f8:b1:d7:00:dc:b9:a9:
dd:70:34:df:5b:a7:36:f8:3c:9d:49:d3:26:2b:c7:
de:5a:73:2d:24:8f:8e:be:eb:59:38:32:46:6f:2b:
31:01:35:79:9e:23:ae:46:cf:7f:58:33:a4:91:63:
a9:b1:7c:5a:b5:0f:a8:2c:11:41:e0:69:2c:9a:c4:
48:fa:e1:66:8c:ae:1b:c3:a6:94:7f:ef:ce:41:9b:
6d:f8:db:7e:ea:89:48:14:b1:5c:06:10:57:6d:a4:
8a:d6:40:2c:4d:2d:71:62:e5:7a:14:a1:8f:50:8a:
e8:55:b5:f8:78:17:09:73:42:55:ff:f1:e4:e5:d1:
b7:63:9e:b9:50:90:36:11:7c:cd:be:6b:0c:9b:d8:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:79:FE:D3:BB:DF:29:D9:E0:AF:B2:96:BA:C0:5D:60:7B:56:90:B0
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/j3n-07vfKdngr7KWusBdYHtWkLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4141::/32
Signature Algorithm: sha256WithRSAEncryption
71:38:8a:1f:dc:7c:90:e0:a7:ab:9f:c2:65:fa:76:64:b6:bc:
7b:86:00:b3:0c:4d:56:cc:d1:e0:93:1d:0d:ce:b4:e1:59:37:
90:58:c1:5e:e9:e3:4e:f9:32:c4:42:4b:2f:88:86:0c:da:e2:
90:22:bb:e9:cb:c6:d0:2e:6b:d9:a8:29:50:01:c7:73:64:5f:
3e:e5:22:b6:59:cb:42:3b:65:5f:84:e6:59:7e:e7:55:49:54:
fd:1d:91:90:d4:f3:f1:bb:12:fd:00:b9:ba:e2:70:ff:62:6f:
4f:34:15:80:fa:fb:24:a5:73:1a:0e:8b:56:87:26:94:da:ba:
93:eb:9d:aa:4b:ce:69:bd:67:72:5a:19:94:0a:e4:af:5c:4f:
50:0e:fd:6c:c2:71:a8:59:ac:8a:b0:ae:b9:27:aa:ed:e8:98:
3b:6a:65:ef:f6:72:8b:e4:89:2e:91:97:fa:90:9d:bf:f8:8f:
a2:9a:08:47:c5:02:14:14:c2:68:b9:68:4d:42:0f:bb:56:f8:
d9:83:a8:b5:5d:c0:48:b7:fa:2d:09:65:f5:7b:4f:16:91:3f:
16:dd:aa:bb:8b:19:11:54:c5:2f:02:d2:4d:a2:1b:87:5e:75:
34:b5:51:96:0d:92:58:ed:9d:ae:82:b7:fa:cb:6a:2c:79:f4:
b7:0a:79:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:20:48 2025 by rpki-client