Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/owDo-dE90Q4aVz9Otyrxfp0jJuU.roa
File: owDo-dE90Q4aVz9Otyrxfp0jJuU.roa (raw, json)
Hash identifier: R3FfKqa+CBkhoX3AH8SVbam9fEJqpTMt1H0aKWJw/DM=
Subject key identifier: A3:00:E8:F9:D1:3D:D1:0E:1A:57:3F:4E:B7:2A:F1:7E:9D:23:26:E5
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 019427B598056CECB9D61D63F088B1C9B791
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/owDo-dE90Q4aVz9Otyrxfp0jJuU.roa
Signing time: Thu 02 Jan 2025 15:49:59 +0000
ROA not before: Thu 02 Jan 2025 15:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47447
IP address blocks: 2a06:fcc0:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:98:05:6c:ec:b9:d6:1d:63:f0:88:b1:c9:b7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Jan 2 15:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a300e8f9d13dd10e1a573f4eb72af17e9d2326e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:6d:4d:fa:24:20:ce:ab:72:56:10:45:2e:
de:23:21:c2:bd:a0:4b:40:5f:66:1e:36:4e:cb:ee:
98:b6:07:8c:fa:0b:05:3f:25:dc:24:bd:74:5b:59:
60:5f:b8:82:10:5f:f1:c6:e3:29:84:22:ca:0c:70:
42:68:fd:2c:83:44:c2:a1:50:ad:95:02:7d:4c:8b:
24:3b:6f:bd:a7:fb:6f:84:b5:a7:fc:e1:79:e5:5b:
b0:b4:fb:0d:a1:cf:84:3d:97:25:8d:d3:f4:a8:63:
a4:33:1b:d2:e0:7a:65:d5:b2:e4:22:73:e0:3b:96:
ea:31:a5:b8:de:a2:b9:cd:5e:2c:91:77:40:6d:5f:
5e:d9:03:dc:aa:42:64:2d:d1:90:ca:f1:d5:cf:d9:
02:f8:0c:87:d5:42:5f:e2:10:27:e7:56:c3:a7:ea:
5f:98:fd:92:88:d5:40:05:d4:bf:0c:41:56:32:d9:
b3:74:2c:21:73:88:a7:66:d6:56:75:8a:17:12:08:
1e:db:46:7f:ef:b6:dd:3d:e2:c8:15:96:ce:29:8e:
ae:3b:17:9b:ef:3d:07:d4:78:e0:2e:bb:4d:8a:c4:
b2:27:38:85:85:7a:fd:c4:6c:b6:04:cc:1a:fd:88:
45:44:25:bc:fb:ec:91:11:d1:0f:60:49:2d:7a:93:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:E8:F9:D1:3D:D1:0E:1A:57:3F:4E:B7:2A:F1:7E:9D:23:26:E5
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/owDo-dE90Q4aVz9Otyrxfp0jJuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fcc0:a::/48
Signature Algorithm: sha256WithRSAEncryption
8c:1c:fb:67:b7:05:72:53:80:63:32:37:bf:dc:d0:30:e6:c2:
ea:2a:dc:ae:f4:39:c2:01:d7:1f:ae:5e:16:5c:d2:d5:4c:61:
80:a4:a5:fd:38:2d:29:90:19:96:b4:e7:ce:8c:ae:22:86:87:
44:9a:20:2d:e7:12:70:3b:90:e6:71:93:24:1b:5f:9a:fb:fe:
e6:ab:d5:8e:86:d2:b3:41:bc:cb:89:ba:08:50:0e:32:9e:c3:
6a:07:e2:11:e6:c9:67:83:47:47:64:76:9a:f5:0b:e1:6b:ae:
ae:52:c1:bc:78:d1:88:d7:e4:20:06:3c:8d:8f:09:e6:ad:ae:
8c:b5:00:1f:48:a2:66:d6:b8:a9:66:2c:08:d3:7d:61:45:eb:
c2:89:04:71:72:ae:94:1f:d4:bb:9c:de:b0:c9:22:d4:f9:fa:
fa:4f:1d:ff:04:21:81:ba:14:b9:cf:78:0b:d4:07:4b:9a:c9:
36:fa:34:70:98:57:06:15:74:16:88:6c:07:6e:9f:db:ac:28:
6f:58:79:fb:98:56:b0:0d:8b:e4:7c:f7:d7:fc:d2:3a:31:92:
62:02:f0:96:c4:2c:46:4e:04:18:5d:95:75:e9:87:11:78:7b:
07:df:e9:ce:15:09:78:57:1c:74:26:77:84:01:e9:2f:ab:d7:
65:6f:83:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:15 2025 by rpki-client