Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DDGgge6d5LlDy5dfWiBTroZGTmE.roa
File: DDGgge6d5LlDy5dfWiBTroZGTmE.roa (raw, json)
Hash identifier: zUOcG6+MR1ospsTENGFCDauMx9GhwzFthN3G8vcsKdo=
Subject key identifier: 0C:31:A0:81:EE:9D:E4:B9:43:CB:97:5F:5A:20:53:AE:86:46:4E:61
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C591DC00C1C7123DED0A753CDF5CB
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DDGgge6d5LlDy5dfWiBTroZGTmE.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34150
IP address blocks: 2a02:2698:9c00::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:59:1d:c0:0c:1c:71:23:de:d0:a7:53:cd:f5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c31a081ee9de4b943cb975f5a2053ae86464e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:cc:f6:bf:dc:e4:aa:d2:01:c9:ce:b3:7f:
bb:93:6e:cd:34:44:0f:d8:af:07:c9:ff:56:a4:7f:
02:fe:fe:04:ad:ad:8d:60:d5:31:24:5b:0a:8f:3e:
57:fe:1a:0c:2d:22:38:4d:d1:5a:76:92:fa:29:48:
3d:58:9d:34:44:39:c9:eb:e5:cb:b1:11:fe:b2:5d:
09:be:0c:e4:77:79:ec:24:a7:77:16:d0:4c:7b:ca:
52:af:42:0a:6e:7e:16:0d:db:b6:07:de:7f:ba:41:
a3:bf:7d:ed:37:fc:cd:ce:32:5e:7d:27:1a:0a:fa:
50:f2:5a:16:c2:cd:bf:14:4d:1e:07:18:68:82:01:
d7:88:50:bf:3d:c7:9c:04:fd:e8:6f:6e:8c:ff:2f:
55:03:2e:25:e0:a6:4e:0b:67:5c:56:fa:57:45:67:
77:d4:5a:d5:09:28:08:d3:eb:85:c9:af:12:de:a6:
78:fa:42:f6:27:52:2e:46:b3:f9:13:d9:44:28:62:
98:05:a0:b8:2d:a2:1c:05:d4:67:67:9b:0e:13:04:
a7:a0:6e:89:33:1a:cc:d0:98:8d:a4:3d:42:be:5b:
5a:f3:8a:6e:88:5e:67:02:d1:e6:bc:dd:90:52:d5:
5f:14:08:1a:d2:58:c8:c7:da:83:94:5c:d2:e0:45:
67:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:31:A0:81:EE:9D:E4:B9:43:CB:97:5F:5A:20:53:AE:86:46:4E:61
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/DDGgge6d5LlDy5dfWiBTroZGTmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
aa:f5:16:46:c2:0c:1f:d2:2f:39:7b:97:33:48:3d:04:d2:5e:
c9:ca:0c:05:fa:01:9f:91:d9:ce:70:13:60:98:c4:35:a3:19:
fa:ed:8f:43:73:1f:14:69:ae:a7:40:74:83:1e:59:12:d1:9e:
bc:18:d7:b5:db:2a:eb:21:e6:0e:96:ad:8e:2f:76:4f:ba:d5:
ff:a5:58:f8:c7:83:e6:1d:68:47:66:5d:58:08:16:0f:94:ea:
87:81:78:9e:e0:a6:05:25:49:95:0b:35:ee:14:e3:49:f7:66:
5e:f3:16:84:ef:ea:94:a5:88:2b:6b:5a:54:18:19:9a:21:51:
fc:4d:50:fe:73:fb:a2:d9:ab:da:3d:d8:d0:6d:a0:76:b8:c2:
ec:94:07:ec:fe:01:d7:2c:ac:91:de:c2:98:ec:00:f4:4d:93:
38:fa:66:0a:30:18:2a:cc:5e:8c:fc:2a:a8:4f:21:60:7d:17:
2b:6b:33:92:b4:69:92:e4:5a:45:d9:f8:65:77:19:41:06:84:
b9:1d:44:f7:40:d2:4f:15:06:f4:ec:b2:97:93:4b:e0:31:eb:
72:12:cc:59:de:ae:0b:bb:33:03:7a:74:35:60:9d:60:f3:06:
3a:76:eb:7a:ab:6a:36:d7:bd:96:13:da:c1:f1:2c:54:98:e1:
75:7c:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:36 2025 by rpki-client