Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/q7b7nVWpkVbr40N_Opdu9wphH-A.roa
File: q7b7nVWpkVbr40N_Opdu9wphH-A.roa (raw, json)
Hash identifier: qMPucfrLKsdpwIUrrq74FwUiMd/2EJmaJ5bJL+xDKak=
Subject key identifier: AB:B6:FB:9D:55:A9:91:56:EB:E3:43:7F:3A:97:6E:F7:0A:61:1F:E0
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01942068039377681CFB14409FA29CC542CD
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/q7b7nVWpkVbr40N_Opdu9wphH-A.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 2a0b:3c40:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:03:93:77:68:1c:fb:14:40:9f:a2:9c:c5:42:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abb6fb9d55a99156ebe3437f3a976ef70a611fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:81:a8:ec:8a:0a:59:c4:80:08:f3:b3:f1:
79:d5:3b:ee:21:4a:e8:74:73:e0:87:1a:c5:5b:c4:
55:c2:6e:22:22:44:23:93:ea:a4:5e:f8:d2:77:22:
7e:95:2a:c2:5f:b9:93:e9:45:c0:fa:af:a3:70:0a:
47:c4:d2:e6:eb:d8:d5:68:28:49:37:82:d8:b0:38:
9b:3a:f0:3d:70:24:b3:d0:d1:b4:fd:18:7d:6a:52:
9b:82:3b:e7:24:71:dc:5a:f9:10:f1:17:ae:9a:e0:
19:2f:39:b0:88:14:1c:ce:41:9d:42:3a:5e:d1:ee:
d1:9d:bb:3d:1b:b8:60:c9:9e:9b:9b:55:7b:b7:22:
44:fd:d9:f3:c0:07:db:e8:dd:bf:c8:83:73:72:a7:
ac:35:f6:8f:1a:16:bd:f9:e6:80:65:23:18:c6:c0:
56:97:ac:94:92:6b:cd:50:4e:09:ce:a2:8c:46:cf:
40:94:7c:89:3c:73:56:57:28:b7:17:fc:62:8e:c5:
92:dd:b9:63:65:be:38:bc:92:85:2f:46:29:73:74:
dc:5c:e1:b4:68:57:a9:7d:c3:b2:f5:bf:a8:51:ff:
47:46:78:23:fe:23:74:e0:24:81:c7:fc:a3:ba:a5:
4c:20:22:57:c6:dd:17:4f:a6:fc:54:8a:8a:24:93:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B6:FB:9D:55:A9:91:56:EB:E3:43:7F:3A:97:6E:F7:0A:61:1F:E0
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/q7b7nVWpkVbr40N_Opdu9wphH-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3c40:22::/48
Signature Algorithm: sha256WithRSAEncryption
46:0e:e8:e7:a3:5d:50:a1:bc:95:b7:0f:9b:51:c6:5b:fe:b8:
42:93:b1:b2:8c:92:31:24:8f:a5:5c:cb:0f:c4:5b:a0:65:ce:
b8:54:e1:35:de:14:91:58:94:8c:39:2d:33:86:98:fd:b7:73:
f1:44:13:0c:9a:66:f1:6b:e3:09:64:dd:08:d0:b1:1d:c3:e4:
ce:1b:27:8f:27:f9:96:83:ae:47:5d:41:76:e8:3a:d0:c9:97:
87:49:9a:7e:07:0b:91:d3:ea:8a:a4:85:5f:1b:52:11:84:5c:
7e:e5:e3:b8:cd:cf:0d:91:97:2b:2d:5b:5f:2d:71:17:4d:51:
4a:26:c7:51:8b:66:0f:28:f0:01:b1:2f:6e:19:1a:d7:86:ae:
6f:19:f3:24:fd:c0:d0:cb:0d:f1:6f:0f:81:76:ad:83:e1:47:
bd:40:c8:47:96:9f:ce:c9:cc:40:8c:3e:7d:47:5f:6c:c0:ba:
9a:03:ca:03:7b:fd:bc:f5:73:46:94:56:1b:a1:33:56:09:f5:
ee:42:45:a1:75:8b:0f:5e:80:9f:3e:82:10:59:9a:d3:1b:f3:
e4:cb:72:43:9d:6e:18:2e:0a:c0:66:34:15:e0:0e:a6:a2:a2:
27:ea:bb:b5:d3:1d:51:c9:d4:2a:4f:22:ef:a9:79:62:e6:31:
27:78:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:42 2025 by rpki-client