Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/uB-4YlNuT93bQpmxAKztWNH51Lk.roa
File: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (raw, json)
Hash identifier: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=
Subject key identifier: B8:1F:B8:62:53:6E:4F:DD:DB:42:99:B1:00:AC:ED:58:D1:F9:D4:B9
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 0194258F8B258901897E20664109FB169D73
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/uB-4YlNuT93bQpmxAKztWNH51Lk.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1680
IP address blocks: 2a10:640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:25:89:01:89:7e:20:66:41:09:fb:16:9d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b81fb862536e4fdddb4299b100aced58d1f9d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:58:93:4b:0c:6d:bc:b0:97:5a:b9:9d:18:52:
64:6b:ad:b4:f1:d1:4e:d0:2c:dc:f0:d0:00:c4:92:
d0:62:c2:4f:da:4e:8d:c3:ce:a5:87:ae:00:0c:2d:
eb:99:a4:bd:3a:5a:58:f6:ae:0c:14:2b:1f:64:e1:
91:bf:0c:a7:8c:10:14:fd:c4:94:f1:8c:71:1b:3b:
67:f0:d7:2d:04:66:af:81:86:98:a2:ae:12:e2:b4:
e6:b0:3a:0e:cd:38:d8:17:72:28:b1:1e:c4:04:7b:
13:c4:b0:1a:b8:45:6d:c5:97:03:61:73:a7:74:a7:
11:c0:c5:ad:09:2a:d9:a2:37:42:6e:ec:cf:94:f3:
6e:19:3e:c6:3b:4e:f3:ad:ec:34:a8:10:16:72:dd:
f2:9a:3c:0e:a6:13:ae:a9:ec:f8:c9:65:dd:00:a3:
ab:a9:e3:6a:34:aa:04:22:3b:d7:e0:24:6a:88:89:
84:fb:33:2c:b9:f7:42:f4:ee:33:63:fa:f8:31:7b:
f8:58:72:57:8f:e9:e0:ec:fe:47:27:92:cd:f4:c0:
70:74:0b:08:70:6b:9c:ce:50:2a:0d:38:78:23:8e:
b7:6a:e3:cf:33:36:19:c4:e4:d0:49:76:b7:d7:b8:
dc:f1:8d:18:f5:56:92:b8:11:43:ce:a9:c3:2b:c1:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1F:B8:62:53:6E:4F:DD:DB:42:99:B1:00:AC:ED:58:D1:F9:D4:B9
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/uB-4YlNuT93bQpmxAKztWNH51Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:640::/32
Signature Algorithm: sha256WithRSAEncryption
3b:f2:97:ef:6d:c1:f2:04:a8:5b:b0:f1:f4:6f:3c:e0:f5:00:
cb:0a:4e:55:30:29:a1:47:53:d3:f4:d2:02:35:d4:6f:4f:1b:
95:df:80:3b:da:b8:d7:15:82:63:92:bc:89:1e:a7:73:6a:1f:
13:07:f8:1b:df:82:0d:28:c3:e7:8d:1a:4e:47:98:96:98:85:
af:5e:43:59:78:8f:08:28:2b:7f:b2:c3:00:c8:b9:f4:61:c8:
b5:13:96:66:af:ff:98:c3:b8:46:28:9a:12:d9:b2:6c:d9:d8:
29:6b:05:a9:9a:98:04:f0:f0:8f:a5:a1:e2:91:45:3a:fd:f5:
18:47:78:39:e2:e3:f9:97:1d:30:71:7a:17:c2:80:80:97:56:
d5:99:c0:eb:0e:cf:d1:8a:c2:86:14:88:85:0c:6b:e8:cd:2c:
42:2c:ea:1b:63:9a:9f:4d:97:1a:3a:24:54:78:2b:aa:67:bd:
cc:66:a1:20:68:de:7d:dd:66:29:05:29:91:ad:cc:d4:ef:9c:
e1:bc:77:48:72:4d:e6:ee:fd:78:31:c0:9f:e7:a8:cb:d6:e5:
51:4a:9e:9d:25:eb:14:e5:f0:9f:df:44:5a:0f:16:5c:8f:4f:
de:b3:27:03:ce:60:a0:90:d9:9f:f9:86:8e:09:60:d7:f9:d7:
c3:6a:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:29:06 2025 by rpki-client