Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/iTsjMJW933pnfn9sCmOh9vf7MTQ.roa
File: iTsjMJW933pnfn9sCmOh9vf7MTQ.roa (raw, json)
Hash identifier: VG0VNFEkUqY74+gOBjChnW4whoIyYXuJnWGW1oN5q9Q=
Subject key identifier: 89:3B:23:30:95:BD:DF:7A:67:7E:7F:6C:0A:63:A1:F6:F7:FB:31:34
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019441ED3100510DB792F60AE6C18ADEF746
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/iTsjMJW933pnfn9sCmOh9vf7MTQ.roa
Signing time: Tue 07 Jan 2025 18:00:51 +0000
ROA not before: Tue 07 Jan 2025 18:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a10:3f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:ed:31:00:51:0d:b7:92:f6:0a:e6:c1:8a:de:f7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 7 18:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893b233095bddf7a677e7f6c0a63a1f6f7fb3134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:88:be:d0:59:ab:73:d7:69:24:73:39:2f:
44:e5:34:71:f3:03:66:ea:d6:1c:61:c9:f7:00:43:
e6:3f:4c:3f:1c:a4:62:53:67:d2:4f:54:a7:d2:c3:
24:2d:2e:59:19:df:a3:75:bf:0b:05:cd:19:58:4e:
f7:74:77:b6:b5:29:1c:25:a1:e0:f2:ee:c8:76:49:
0e:f5:11:d7:05:1a:bf:36:35:65:6b:70:45:ce:2e:
97:ac:b9:ec:bf:95:c6:0a:8d:5c:6d:69:b6:1a:2e:
3b:2e:9b:87:e8:38:72:24:99:3b:ba:e8:4f:17:87:
93:98:93:39:9f:37:b6:a0:7f:4a:ee:fd:be:43:01:
21:cb:02:ce:b2:a2:cb:3e:8d:b1:08:38:32:38:ff:
7c:45:42:5a:42:6d:28:72:37:8d:2c:8d:97:21:99:
ab:e9:71:a1:cc:cf:c3:b1:d3:c7:84:e4:65:b2:54:
c9:8c:69:a5:10:5b:c2:34:6a:e0:19:ef:4c:c5:86:
3e:80:fc:d5:04:bf:23:13:ef:74:38:63:b7:05:d5:
d2:f3:4f:48:76:a5:a8:ec:b6:a1:3a:22:c7:29:57:
6a:d0:4e:aa:9f:4b:84:3d:85:93:3f:b0:68:11:5a:
66:88:c5:3d:18:ec:5f:14:ab:a2:14:1d:c9:3c:27:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3B:23:30:95:BD:DF:7A:67:7E:7F:6C:0A:63:A1:F6:F7:FB:31:34
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/iTsjMJW933pnfn9sCmOh9vf7MTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
12:b3:42:db:5b:b4:9f:d4:da:2b:d3:93:67:ee:37:f5:4b:5d:
3a:ee:6b:83:e2:72:b2:ae:7d:4e:ff:3e:96:d6:bc:00:6c:ea:
ee:ba:91:35:95:23:f5:7e:e6:c7:78:26:78:6b:f7:0e:2f:83:
e8:e1:29:6c:9a:83:94:b2:a9:1f:42:b4:75:6d:91:96:f2:57:
f7:2e:80:29:c8:4f:4d:43:0a:a6:84:c9:da:79:1b:9f:de:c9:
99:8f:b4:ce:d4:5c:59:3b:71:b7:03:4c:f3:87:93:0d:22:03:
f8:73:fa:e0:6d:e4:dc:14:c3:ba:95:59:cc:2a:1a:28:e3:65:
1c:29:d2:a6:8c:56:bf:91:e7:ef:8b:df:38:30:07:9b:83:23:
b4:d9:a3:b6:f3:15:62:18:57:92:8a:2c:76:79:74:2d:c3:6a:
55:5f:c9:c3:c4:0f:2e:7d:e5:03:d4:aa:aa:8b:73:b4:40:96:
20:04:a6:ae:f8:52:d3:43:78:11:f5:80:c0:e4:95:06:b9:c8:
1b:80:fa:4e:38:26:fd:6c:ae:e1:d4:b6:01:9c:53:97:b6:fa:
a3:f5:43:56:fb:b8:a8:ca:d5:bd:51:45:0a:3f:a9:c5:c2:c6:
af:b9:73:38:d8:8f:13:ec:52:0f:6c:ad:3f:e4:26:63:c1:25:
b9:3b:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:03:04 2025 by rpki-client