Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/siGNpjOukqtq61iEt69vPKECUBY.roa
File: siGNpjOukqtq61iEt69vPKECUBY.roa (raw, json)
Hash identifier: KGLP98dU7eIP8APR/O7z5omV59hwh3Vy+VU74c3Ej2U=
Subject key identifier: B2:21:8D:A6:33:AE:92:AB:6A:EB:58:84:B7:AF:6F:3C:A1:02:50:16
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 019567D7544ED5BB12E1AA50015ACE23528C
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/siGNpjOukqtq61iEt69vPKECUBY.roa
Signing time: Wed 05 Mar 2025 19:45:19 +0000
ROA not before: Wed 05 Mar 2025 19:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 2a06:fcc0:1::/48 maxlen: 48
2a06:fcc0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:d7:54:4e:d5:bb:12:e1:aa:50:01:5a:ce:23:52:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Mar 5 19:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2218da633ae92ab6aeb5884b7af6f3ca1025016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:e3:1a:7f:07:fa:7f:57:a2:ec:44:ba:2a:
f7:4c:ae:57:d3:55:5e:9b:2e:62:40:e5:d9:80:31:
3d:15:fa:84:b7:ff:27:c6:d1:43:ef:76:b0:27:11:
0c:dd:17:e7:62:2e:25:e5:1b:67:28:50:e9:18:8c:
9f:c8:72:13:db:d3:09:ff:c2:3f:b7:25:61:c9:d7:
fb:c1:c4:86:0c:ae:e5:b0:05:8d:75:b7:f3:69:35:
60:35:0c:b7:38:5c:fe:7d:9c:b1:aa:8e:6a:49:be:
24:b3:9f:fe:21:91:16:6c:4a:41:ea:fc:b3:a4:29:
22:b3:7d:b6:ef:35:ac:5e:5d:72:36:fb:ee:f4:97:
a2:b2:d4:73:78:f1:fd:5d:94:cb:5d:3d:8d:66:cf:
68:89:a9:73:1e:b4:bc:34:20:42:bf:d6:85:7b:9f:
58:7d:7c:fb:05:ff:0f:aa:c1:b4:72:61:f6:3e:df:
ff:b9:3e:0d:63:4f:a8:94:09:1c:05:98:2d:a8:94:
17:ac:b2:91:e4:68:a1:c9:4e:0e:9f:09:63:c8:0a:
d2:c6:e1:40:fb:93:ec:4f:76:c1:58:80:df:29:32:
82:50:4d:3c:bf:0a:ec:7d:17:8a:a9:4e:c7:38:09:
f6:b3:34:97:c3:f1:3d:bf:48:00:cc:de:20:74:4c:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:8D:A6:33:AE:92:AB:6A:EB:58:84:B7:AF:6F:3C:A1:02:50:16
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/siGNpjOukqtq61iEt69vPKECUBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fcc0:1::/48
2a06:fcc0:4::/48
Signature Algorithm: sha256WithRSAEncryption
0d:6a:3b:b0:31:ab:0b:e0:c7:a0:aa:a8:b2:91:14:ff:a2:a5:
a7:42:aa:02:15:5d:de:92:df:e5:48:ed:86:13:0e:9e:e5:df:
36:aa:9d:03:c7:5c:45:52:9d:f9:0b:4f:74:40:57:95:56:8f:
de:27:2e:c5:31:e7:58:1f:4d:d1:0b:94:96:75:bf:68:36:43:
a8:28:92:81:2e:60:86:73:a3:ad:e4:fd:d7:5c:a2:fc:fd:5d:
c1:4f:76:c1:77:3e:82:71:41:90:f8:e4:80:05:29:c9:e8:f6:
d8:34:ae:5c:02:21:8a:f9:5e:4e:d4:ad:3f:01:af:2a:25:51:
08:a5:f9:4d:09:09:f8:9d:ce:38:af:3e:98:3d:fe:30:33:f4:
de:7f:f9:55:db:4a:de:95:78:cd:fe:89:86:93:97:02:c7:62:
26:07:bc:23:f6:30:cf:1e:80:7e:87:a7:07:71:0c:3c:6c:49:
d1:ab:7f:e0:00:dc:70:17:02:39:b0:a7:ae:e6:82:09:16:5f:
55:fa:92:59:6f:94:99:a2:04:06:39:39:c5:79:cc:c2:65:d4:
58:20:d0:a1:2b:e1:19:15:38:b9:0e:0c:2b:c6:86:c5:c6:c6:
50:d5:49:a5:0b:16:a2:70:c3:7d:ec:c9:a9:d0:db:f8:10:bb:
f1:80:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:26 2025 by rpki-client