Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/1sTgJl3sTanwlgMRcn77_2dUJM8.roa
File: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (raw, json)
Hash identifier: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=
Subject key identifier: D6:C4:E0:26:5D:EC:4D:A9:F0:96:03:11:72:7E:FB:FF:67:54:24:CF
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0194274813FA6570BC0065FC2F3CF969DAE7
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/1sTgJl3sTanwlgMRcn77_2dUJM8.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200078
IP address blocks: 2a13:b487:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:13:fa:65:70:bc:00:65:fc:2f:3c:f9:69:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6c4e0265dec4da9f0960311727efbff675424cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:06:98:f7:00:c7:ef:57:95:60:87:3c:d1:
22:63:7d:67:dc:b6:01:b8:3e:eb:8a:21:8f:02:97:
bb:44:7f:49:d6:2e:79:cb:15:ed:e0:2c:3e:05:6f:
14:ea:44:a1:b4:ca:ba:d8:8c:aa:11:10:06:da:32:
5e:e1:d7:3b:f9:85:88:b8:b3:0c:ce:c2:08:7e:77:
d7:a6:bf:a2:15:9b:67:cf:a9:b6:90:14:d8:76:3e:
58:ac:04:1f:58:54:1e:ac:6b:7f:de:8f:5c:88:fb:
cc:19:65:0b:c3:6e:d4:1a:4e:f4:b0:13:ca:f1:ab:
9c:45:5b:17:27:88:7b:1a:c5:0e:9c:2d:fa:17:e6:
5f:1a:22:fd:ca:34:9a:1a:16:4d:7c:de:c7:a3:fd:
ef:19:13:94:6f:c6:7b:51:68:84:23:db:5a:83:0b:
06:ba:5c:9c:70:90:d0:4e:17:e4:2b:52:51:d2:29:
4d:f1:e8:00:1d:99:88:e2:0d:57:85:e1:6c:7f:d5:
94:d1:55:5b:71:43:58:99:dd:da:54:a8:7c:98:74:
f5:1f:05:a6:cf:b8:a6:ab:19:cb:34:98:f1:69:79:
ba:f0:c8:b2:41:39:5b:93:7c:b8:00:bb:de:cc:bf:
db:e3:3b:c1:59:a7:b5:b6:ef:02:54:e8:0b:8c:ae:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C4:E0:26:5D:EC:4D:A9:F0:96:03:11:72:7E:FB:FF:67:54:24:CF
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/1sTgJl3sTanwlgMRcn77_2dUJM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1100::/40
Signature Algorithm: sha256WithRSAEncryption
9e:13:d4:9f:3f:82:f6:13:01:7f:33:2d:94:15:12:96:d7:c6:
d9:29:6d:a1:20:e4:e3:14:27:bf:1b:1f:ad:44:8a:9b:46:4d:
74:d1:ec:6e:7c:ca:12:4f:33:64:99:44:16:8e:93:6c:a4:ee:
ca:d5:cb:62:02:93:44:24:7a:38:61:2b:7e:d9:d2:b1:24:41:
8a:63:f3:0f:87:12:b4:12:98:fe:cc:d2:9d:fe:84:8b:0f:6e:
71:ee:f5:0a:9f:71:42:2c:c9:a0:40:1a:e4:4b:77:d8:02:e8:
ae:74:e0:b4:1b:a4:64:5f:32:8b:b2:e3:92:74:56:3e:07:e5:
cb:70:39:cc:2e:ed:35:c9:1e:18:1a:52:ee:ae:d6:e6:b5:77:
dd:db:c8:44:f5:e9:92:fe:dd:91:4b:6f:e1:1b:cf:41:92:c8:
73:e6:7b:32:2c:56:26:ae:26:72:09:f7:4c:c8:b3:d2:8a:67:
cf:75:09:33:2c:37:e1:96:08:83:36:62:ca:3a:56:90:8c:2a:
53:ed:65:da:7f:91:60:f7:42:5f:0e:39:29:bb:90:12:c3:a1:
98:7c:44:b8:6f:56:ed:36:24:b7:59:78:96:a1:6e:72:ba:40:
6a:88:a6:a9:45:b1:1e:a2:b0:fe:02:22:ce:9f:13:d7:54:78:
33:bc:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:03 2025 by rpki-client