Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/DNBsRV7t2HVO8env59jVAjOxkhU.roa
File: DNBsRV7t2HVO8env59jVAjOxkhU.roa (raw, json)
Hash identifier: u04P8i3SwISYkJ0oEkWX35FdtSG4l2gXii7MGpdcKHE=
Subject key identifier: 0C:D0:6C:45:5E:ED:D8:75:4E:F1:E9:EF:E7:D8:D5:02:33:B1:92:15
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01942068094105D384C7B983FD1E703FF24C
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/DNBsRV7t2HVO8env59jVAjOxkhU.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201732
IP address blocks: 2a0b:3c40:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:09:41:05:d3:84:c7:b9:83:fd:1e:70:3f:f2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cd06c455eedd8754ef1e9efe7d8d50233b19215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:39:e2:77:40:5b:93:83:93:20:b5:09:ff:
b3:f0:db:61:c6:a0:33:90:e2:e0:58:c4:33:f6:20:
0a:34:fb:95:98:d5:65:42:1f:a6:c4:23:af:c7:23:
42:bf:84:05:fc:82:81:f0:b2:09:0a:8b:8d:14:d8:
43:53:c4:ec:7e:10:ca:07:bd:cf:70:8d:b1:b5:d2:
d6:87:00:7d:71:f9:b5:3f:24:2d:42:4c:ab:d7:a5:
9d:61:41:29:3b:48:e2:78:3e:6b:85:8d:d2:11:f4:
15:a7:24:5f:ee:c8:1a:e9:da:e8:75:8e:89:12:8e:
35:51:2f:10:66:62:ec:f5:51:8e:4d:8f:11:cc:b7:
dc:33:4e:f8:96:54:b0:24:44:88:73:fb:13:fd:d6:
04:10:86:0a:db:31:9e:04:89:a0:84:9d:18:44:b4:
26:64:ba:3a:6a:aa:ef:a6:48:4b:c4:f7:58:36:33:
e3:c8:58:3b:dc:97:8c:83:3b:fb:0c:be:03:99:c6:
ae:26:b8:48:bb:a1:01:90:61:18:de:83:19:46:94:
15:26:40:2f:60:5d:7f:26:7f:0c:a0:a0:ae:07:34:
78:f1:7b:49:b7:d5:36:34:fe:2e:9b:49:83:98:d4:
68:09:29:f1:7b:de:93:47:63:08:55:69:c4:47:1e:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:6C:45:5E:ED:D8:75:4E:F1:E9:EF:E7:D8:D5:02:33:B1:92:15
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/DNBsRV7t2HVO8env59jVAjOxkhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3c40:18::/48
Signature Algorithm: sha256WithRSAEncryption
39:75:08:70:35:5e:6f:9f:53:b4:cb:c9:55:9c:84:ea:35:93:
39:82:16:37:78:e1:3c:b0:9b:0d:ed:eb:9d:bc:7e:92:56:07:
76:4e:60:7d:86:b0:a1:70:e7:58:c5:45:ee:0f:e4:00:c7:65:
d3:de:95:74:10:10:10:0f:0d:5d:0c:9d:58:c9:e1:4b:0d:9b:
db:50:49:ae:88:a7:b9:7d:ed:de:1e:95:e1:e2:72:f2:a8:c4:
00:fd:02:6d:f3:15:57:d9:27:da:da:06:95:76:95:d0:63:53:
86:48:86:b1:93:e0:42:b5:c3:a3:bb:f2:6f:05:3f:27:ec:10:
c7:f7:91:e7:dc:cf:32:a3:df:51:d1:0f:f3:c6:71:78:6d:22:
bb:5d:3a:43:37:c0:6b:cc:2f:76:a1:91:51:5e:0a:b9:80:f9:
55:eb:9e:d9:8c:85:84:63:ea:d8:02:e7:a5:f1:05:63:87:e1:
4c:cc:50:6f:93:31:0d:66:1e:5d:40:31:9c:ed:69:b3:ce:5b:
6c:ea:18:d0:0b:36:62:0f:94:3b:fe:55:49:e0:0f:08:18:c9:
20:24:55:d6:a0:e3:18:4e:bc:39:51:78:4b:11:32:14:ed:cc:
dd:85:61:67:bb:32:c9:52:9e:c4:99:bc:20:b5:41:2a:dc:fb:
41:27:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:37:39 2025 by rpki-client