Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/2srJ1ccR_MusUii1p5u23EQJVos.roa
File: 2srJ1ccR_MusUii1p5u23EQJVos.roa (raw, json)
Hash identifier: eM0Mb814ig9UIV9KBROzdZXl35g0+Ta9EaNmjphvA5M=
Subject key identifier: DA:CA:C9:D5:C7:11:FC:CB:AC:52:28:B5:A7:9B:B6:DC:44:09:56:8B
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747D7D64499DC4F66431D73CDF76885
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/2srJ1ccR_MusUii1p5u23EQJVos.roa
Signing time: Thu 02 Jan 2025 13:50:07 +0000
ROA not before: Thu 02 Jan 2025 13:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59417
IP address blocks: 2a0b:b87:ffb7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d7:d6:44:99:dc:4f:66:43:1d:73:cd:f7:68:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dacac9d5c711fccbac5228b5a79bb6dc4409568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:9d:1f:ab:a9:63:cf:d2:24:ef:08:9e:37:
b4:6f:40:d6:a0:5e:42:57:ce:7d:7a:6a:a8:fd:8d:
ac:c0:de:e2:50:f0:22:b4:82:ba:b1:f8:c1:73:22:
d9:e0:3f:d8:44:ca:45:25:87:c9:4b:7d:3c:25:40:
c8:86:a1:c6:97:a6:2a:75:13:de:66:ce:f9:29:a1:
5e:18:41:c0:f0:cc:61:d5:d1:b7:fc:de:67:29:25:
c3:32:f7:04:b6:b4:8b:8f:a7:1c:b0:da:bd:e1:08:
78:1c:0d:d6:87:f0:70:d3:02:f7:d0:56:8c:e4:ae:
42:c4:19:0c:c5:4a:2f:81:33:e4:61:1d:d2:46:09:
1e:57:ca:13:19:50:d0:02:eb:1e:50:88:ca:93:75:
fd:e9:39:74:95:4e:8b:bb:1c:00:cd:86:9b:53:a1:
5b:88:2b:af:b6:58:22:d9:32:1d:9b:74:8b:7d:f9:
66:ce:e1:7f:e7:69:39:36:17:ea:0e:c7:61:5e:77:
2e:b3:11:dd:f2:31:93:3c:cc:e3:59:c7:ae:2d:f4:
a2:8e:6e:43:66:d3:01:52:3f:91:64:51:f6:7e:3f:
bc:80:ac:f6:ee:5d:4b:fb:9c:1b:4a:11:d8:91:c8:
34:97:48:7d:4d:08:b5:c9:f9:76:2d:20:f7:54:b1:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CA:C9:D5:C7:11:FC:CB:AC:52:28:B5:A7:9B:B6:DC:44:09:56:8B
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/2srJ1ccR_MusUii1p5u23EQJVos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb7::/48
Signature Algorithm: sha256WithRSAEncryption
cb:00:d0:19:d7:79:91:2e:84:88:6b:79:b9:2e:86:11:2a:c3:
8a:53:af:2f:50:db:64:4d:08:6f:5c:2f:47:6f:37:dd:9b:34:
55:93:93:0f:ca:f0:2b:85:ff:a2:33:0c:9f:6e:14:7c:0d:af:
b2:38:9b:cd:32:5b:da:2e:62:7d:2d:99:fd:c5:7e:ae:28:d1:
33:fe:cd:1e:88:27:c4:16:a0:f1:3b:cb:b0:68:ab:21:e9:25:
ce:76:fd:a5:c3:08:7b:99:22:0a:73:dc:c6:da:73:94:b2:7a:
c0:74:e0:16:c6:16:0a:12:ce:44:92:91:db:3e:f5:f9:8b:e9:
0f:39:22:68:64:fa:5b:21:04:c5:8c:f1:74:c9:83:f1:92:25:
57:53:1c:29:49:7f:73:98:2c:8b:bb:84:d0:7c:21:f9:e3:54:
0a:fd:66:aa:2f:85:d7:86:37:93:9c:01:36:61:f0:fe:7b:ec:
da:22:03:48:ff:de:56:7e:af:8f:24:db:8d:f0:22:26:a7:5c:
d6:c9:6d:31:c9:45:16:9e:48:39:5d:ec:d2:b4:0a:d5:5a:8a:
96:cf:b0:f8:15:fb:ab:f9:ff:d2:fc:65:bd:5d:ed:2d:fd:61:
93:94:cc:1f:82:b0:27:bc:64:76:5d:30:35:f0:f0:4f:73:d2:
7e:dd:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:17 2025 by rpki-client