Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/uID_AUaziSnLI0lAwJTwsfqCxRw.roa
File: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (raw, json)
Hash identifier: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=
Subject key identifier: B8:80:FF:01:46:B3:89:29:CB:23:49:40:C0:94:F0:B1:FA:82:C5:1C
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 01942748151B0429B7F42296CFC7206DC65B
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/uID_AUaziSnLI0lAwJTwsfqCxRw.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202939
IP address blocks: 2a13:b487:1700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:15:1b:04:29:b7:f4:22:96:cf:c7:20:6d:c6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b880ff0146b38929cb234940c094f0b1fa82c51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:0c:34:4d:0f:54:1a:9e:04:69:1e:db:bb:
29:77:a9:dc:1a:29:d9:3d:0a:09:9f:b1:8f:a3:75:
f7:5f:45:f7:ad:f0:68:7c:ee:2e:cd:41:ce:cb:cd:
9f:63:37:b2:61:94:e3:39:82:97:bc:42:fa:06:72:
47:11:96:ba:17:b9:9f:ee:c5:f9:c7:87:fd:c3:81:
31:70:02:77:ae:8b:a7:e4:06:47:e6:7c:41:a2:73:
a2:2b:a8:af:32:6e:96:f6:a0:cc:50:ef:3a:7a:3f:
cd:7e:db:d7:96:26:de:56:5f:c9:da:0b:65:b0:52:
24:4c:f7:df:dd:fb:b9:00:11:45:b3:0b:4d:02:c6:
ea:2a:30:38:db:ce:d5:fe:9c:27:6f:57:8b:2d:bd:
86:da:20:9e:5e:9e:1d:62:0b:ec:29:ac:03:11:d6:
63:3b:65:78:85:c5:ee:85:f7:28:c4:36:33:a8:0c:
bb:d9:5f:9c:fc:8c:77:0a:03:a6:09:4f:59:fc:66:
7d:85:dd:10:90:81:8b:a5:08:52:54:c7:95:fc:73:
c1:00:b9:56:ef:5f:2f:49:84:a6:05:3c:9e:87:c5:
07:ae:f5:c8:c8:e3:13:74:14:1c:c1:58:2b:30:a7:
7f:9f:70:7c:52:e1:c3:3f:88:c5:34:69:18:21:e9:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:80:FF:01:46:B3:89:29:CB:23:49:40:C0:94:F0:B1:FA:82:C5:1C
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/uID_AUaziSnLI0lAwJTwsfqCxRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1700::/40
Signature Algorithm: sha256WithRSAEncryption
34:0c:7c:d9:72:4a:39:ba:bf:40:c6:64:61:e3:66:e9:b3:c0:
b6:73:8a:de:11:17:4b:a4:e5:23:77:08:bc:7d:22:9e:42:ea:
b6:5d:3f:89:be:1b:70:58:08:49:10:3b:70:ea:31:d5:14:b3:
27:17:06:06:41:8d:0c:da:67:fb:d8:9d:70:ea:62:92:1f:a8:
67:37:fb:84:1c:4f:13:bf:9f:f5:13:6c:c8:fd:7d:d5:68:a6:
3e:69:ab:ad:c6:3c:d2:1e:e5:c3:c4:ed:0b:3b:66:ff:e4:a9:
ea:de:30:1f:55:85:e7:e3:bd:c1:74:24:e9:cc:7d:7c:dd:0a:
aa:39:d6:e6:90:22:b8:b6:73:0f:cd:3c:1a:5a:63:84:d2:fd:
d8:0c:a0:9b:01:60:85:28:d2:fc:79:1b:ab:a7:9b:b5:0b:4e:
7a:e1:76:c4:4b:61:62:6b:2d:6f:7d:cf:2c:52:c7:5a:30:b0:
a9:af:c7:3e:c8:f3:06:96:bc:43:ed:0f:f6:f8:ea:7d:e5:92:
6c:8f:fa:c1:57:e2:b2:a1:24:3c:fd:84:d9:e5:fa:f2:f7:d7:
c2:b3:81:e4:2a:82:15:6e:96:5c:64:0b:40:85:20:4e:dc:fa:
84:aa:70:1f:ca:9d:36:fd:5b:6c:50:65:33:e5:8a:c5:8c:1a:
8c:26:f7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:52:31 2025 by rpki-client