Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa
File: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (raw, json)
Hash identifier: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=
Subject key identifier: 5D:5A:B5:4E:B9:50:90:31:68:D9:AE:C1:3F:15:59:3D:BE:A4:B9:41
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 01941F8C43A5CD9D58877D441DF0D9E5C9E6
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138181
IP address blocks: 2a12:a307:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:43:a5:cd:9d:58:87:7d:44:1d:f0:d9:e5:c9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d5ab54eb950903168d9aec13f15593dbea4b941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:6a:72:b1:02:34:12:61:1a:51:78:7a:98:
ee:bc:44:af:68:5c:e7:ad:76:c2:31:b8:9c:e6:cc:
50:19:e5:b2:98:b7:27:26:6c:87:32:f5:4e:7b:ec:
36:92:f9:80:c9:c0:73:de:bd:12:55:32:92:85:f2:
56:a4:6d:2c:f7:e4:3a:6c:17:87:a7:86:02:3d:71:
b3:5b:6f:f8:85:f9:88:f9:ac:08:10:86:e3:df:6c:
15:d9:da:1c:f7:76:d1:85:8b:6b:15:00:45:7c:01:
6f:a2:b3:12:bb:71:f4:4e:ac:f9:4b:e6:64:27:f6:
dd:ad:5c:c3:5a:18:66:39:7f:9c:be:1a:75:88:76:
14:cb:19:66:9f:a6:8d:ce:cc:20:fe:98:b6:8d:04:
37:d8:a4:73:8b:b3:ab:57:18:0f:d8:59:34:d3:35:
0f:2e:e4:c2:d8:d7:4b:48:eb:f1:20:64:e0:c6:8e:
a8:29:a3:59:a3:55:57:c8:54:45:12:7d:0a:7c:26:
1f:3b:3e:34:14:88:9d:6c:1d:ad:12:64:83:f1:98:
70:54:56:ef:71:ae:ea:4f:ad:82:42:a6:9f:88:2a:
70:73:18:21:40:09:ad:39:dc:f8:ee:9a:a9:99:37:
8b:dd:fb:5c:03:0d:9e:ef:e5:a3:cc:50:aa:40:d8:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5A:B5:4E:B9:50:90:31:68:D9:AE:C1:3F:15:59:3D:BE:A4:B9:41
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a307:3::/48
Signature Algorithm: sha256WithRSAEncryption
20:fa:40:58:40:c6:80:dd:1e:8f:92:39:f7:4e:08:e8:e1:67:
19:e9:02:ca:1d:a8:da:f7:36:a2:1d:99:ca:ab:32:b7:27:c2:
8d:06:3d:86:34:a7:19:c7:85:72:90:e0:38:ce:2f:98:e0:4b:
50:b5:7f:d8:78:3d:7b:9e:69:e2:93:bc:fc:01:89:a8:20:4a:
3c:cd:24:e1:84:af:6f:91:22:fa:05:7b:6c:ce:ec:a2:fe:54:
d4:e7:d7:70:37:23:35:5a:63:af:b6:f8:fb:fe:86:2b:af:6f:
f9:6e:18:60:18:eb:37:ea:35:f3:44:53:49:00:62:7e:e5:27:
76:ca:61:e7:9f:bc:55:ed:7a:f9:69:52:f1:bf:95:d8:af:23:
a1:ce:33:82:c1:e7:80:31:95:c0:69:c0:5a:07:48:fd:c2:a8:
66:5a:aa:aa:30:a7:c1:c3:e9:51:79:60:fc:46:42:bd:14:65:
ad:e9:4b:1e:b1:e1:7f:ad:61:88:60:be:04:a2:6f:d9:e8:62:
59:55:4b:d6:14:88:d8:45:4c:50:70:2f:76:65:b2:37:b8:88:
c5:eb:15:5b:f8:2d:98:fb:31:3d:ea:2f:6e:7a:04:a2:a5:02:
17:81:fc:bd:71:21:17:55:5f:09:f9:50:e8:70:15:fb:e1:1d:
f9:b3:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:05:50 2025 by rpki-client