Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/J2OkX8bApJPiRItiujPnBGrsZY4.roa
File: J2OkX8bApJPiRItiujPnBGrsZY4.roa (raw, json)
Hash identifier: i7nPB++63HS9z1hezyAi0vnytbZFG8+Xg2xHv015LZ0=
Subject key identifier: 27:63:A4:5F:C6:C0:A4:93:E2:44:8B:62:BA:33:E7:04:6A:EC:65:8E
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 019427B598C6DE4577D18513EFE5954E3AFA
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/J2OkX8bApJPiRItiujPnBGrsZY4.roa
Signing time: Thu 02 Jan 2025 15:50:00 +0000
ROA not before: Thu 02 Jan 2025 15:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204957
IP address blocks: 2a06:fcc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:98:c6:de:45:77:d1:85:13:ef:e5:95:4e:3a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2763a45fc6c0a493e2448b62ba33e7046aec658e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:16:e1:19:ea:4c:5e:f5:5e:1c:6e:99:5a:
9c:60:9e:a0:55:45:2f:3b:d2:a3:75:9a:08:7c:e8:
91:2b:6c:eb:5b:59:10:11:7b:88:a9:a6:e9:1f:b0:
bd:c9:d9:ed:65:ea:c3:9c:83:64:95:d0:de:3b:1e:
65:45:45:88:e9:b0:66:b8:f3:91:b1:2c:bd:0d:de:
68:25:58:30:84:c6:21:e1:43:04:65:f3:2b:4d:74:
c5:d4:f6:ac:cf:80:ba:a9:db:91:39:4c:cf:25:29:
a3:3d:7c:a3:eb:11:50:19:f6:c1:aa:06:87:51:72:
b2:ac:13:69:7c:84:50:ff:8b:87:a9:8f:f9:90:e6:
e2:a8:f9:fa:78:9d:b6:bc:48:55:ec:79:23:aa:d7:
e6:cc:f6:23:3f:5d:b7:20:3a:4c:d1:1e:d8:58:8d:
59:17:86:0a:dc:e2:a4:c0:64:d5:b9:55:76:10:1e:
58:52:c6:73:fc:8f:31:74:c5:a6:e6:5e:06:24:9b:
d4:d1:00:51:54:7e:05:8c:b4:2c:ed:f5:6c:b0:54:
b2:96:e5:aa:b5:1a:03:45:cc:81:d3:af:2f:63:f4:
a7:13:8b:db:a6:78:61:bc:d4:cd:17:09:8e:85:7b:
52:ae:ea:ba:f7:8d:6d:9c:a1:32:bb:35:a9:47:88:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:A4:5F:C6:C0:A4:93:E2:44:8B:62:BA:33:E7:04:6A:EC:65:8E
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/J2OkX8bApJPiRItiujPnBGrsZY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fcc0:2::/48
Signature Algorithm: sha256WithRSAEncryption
2b:29:f6:c7:da:28:f2:ec:69:cf:a1:51:f4:c7:57:26:b3:a7:
77:df:ba:a1:d2:c1:98:0b:3d:ce:ad:ef:46:77:66:a8:f7:2b:
4d:8a:a5:48:92:28:89:b9:dc:44:20:f1:70:2a:eb:07:04:48:
26:3c:f8:67:bf:60:9d:8f:c5:6e:11:3a:a6:ad:90:18:f7:6f:
1c:05:41:c4:ea:40:59:ef:61:68:c5:65:45:f0:c8:fd:24:87:
2a:36:bf:f2:d4:e8:7a:71:dd:3e:42:96:87:25:df:a8:cd:8f:
d2:c4:29:71:0f:cd:36:1c:59:b0:ae:61:fc:28:13:a2:d8:55:
50:a0:de:51:3f:ef:cd:99:e9:3d:66:d0:59:99:34:a8:3a:72:
c3:c5:1f:54:c9:ed:cc:08:fa:eb:b4:03:c6:89:87:49:af:d3:
ee:2f:6c:a4:96:33:1f:9b:85:3b:50:4b:c5:b6:57:67:90:7b:
88:8e:04:91:04:e3:f4:b9:c0:2c:70:ae:e6:7c:4c:f0:95:1b:
12:05:af:62:5e:74:92:15:85:ef:77:9e:6c:e1:c3:d5:51:f8:
ec:c9:22:14:0b:f6:c9:13:da:68:37:a1:34:95:32:d9:05:a6:
44:73:67:be:12:18:28:9a:48:2a:d0:81:35:47:c9:22:d8:ff:
13:31:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:13 2025 by rpki-client