Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/qnFffULuZkD3WAJFMjcSjE8KLV0.roa
File: qnFffULuZkD3WAJFMjcSjE8KLV0.roa (raw, json)
Hash identifier: 3RoDeJIvhLdUQNKp3436G/+SXszr4AzKvXyWP5Iyh00=
Subject key identifier: AA:71:5F:7D:42:EE:66:40:F7:58:02:45:32:37:12:8C:4F:0A:2D:5D
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 019427B53DA10486C1E86D5D24168C4CB99E
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/qnFffULuZkD3WAJFMjcSjE8KLV0.roa
Signing time: Thu 02 Jan 2025 15:49:36 +0000
ROA not before: Thu 02 Jan 2025 15:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 2a0b:5f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:3d:a1:04:86:c1:e8:6d:5d:24:16:8c:4c:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Jan 2 15:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa715f7d42ee6640f75802453237128c4f0a2d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:8b:0e:60:1f:3c:5d:c4:8d:a1:4d:5e:f0:
6f:93:6d:a2:8f:00:6a:7f:ab:e4:46:c3:b8:7c:02:
5b:51:b5:54:4d:53:9a:4f:a2:3a:df:08:1f:3c:64:
37:ad:29:9e:18:b5:31:fb:56:df:14:55:db:0c:4d:
11:40:e4:5b:f5:2e:fc:36:37:fe:97:46:d6:35:41:
0d:3e:10:a7:c6:16:fa:ae:0a:3f:a8:2d:53:19:53:
c6:cd:87:0f:03:95:48:4b:03:7f:5f:c8:d1:20:e3:
c7:75:17:c1:97:0a:a2:05:da:5b:36:23:08:f6:4d:
46:28:34:e8:33:5c:db:8a:c7:1e:05:ee:f7:2e:58:
99:88:77:e2:30:fa:47:33:e7:32:c2:09:13:82:86:
bf:ba:c6:0d:cb:7c:de:f1:a3:f2:87:bf:77:53:51:
5e:dc:94:ba:53:7e:1c:3b:f2:7c:dd:7d:25:25:51:
f1:54:48:3d:7a:26:9b:a0:dc:0f:6e:0d:a5:8e:99:
de:36:88:ed:b8:b6:33:95:7f:00:f2:8f:df:ae:f8:
5b:a3:04:97:29:c7:3c:ca:99:ab:e6:23:d0:6e:23:
a2:80:9f:91:eb:e3:86:2e:d9:11:7e:b3:38:4e:0c:
84:46:56:69:b4:f2:5d:52:0e:80:b1:15:5c:e9:56:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:71:5F:7D:42:EE:66:40:F7:58:02:45:32:37:12:8C:4F:0A:2D:5D
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/qnFffULuZkD3WAJFMjcSjE8KLV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:5f00::/29
Signature Algorithm: sha256WithRSAEncryption
a1:9c:ec:79:7f:3f:4e:2c:d8:74:2d:c2:99:41:68:e3:72:57:
cf:d7:5c:50:72:8a:cd:59:46:22:0d:eb:c5:23:ef:74:a2:0f:
e4:cf:c9:7a:41:3c:9c:86:8a:6c:a2:df:d2:8d:f2:aa:92:45:
69:dd:e6:dc:1f:20:78:1b:bd:51:7f:6d:68:be:c0:60:c0:ed:
01:35:30:fb:9c:53:ce:6f:3d:7c:03:41:7e:9c:91:ff:97:47:
5a:ba:96:0c:8a:ff:2d:58:ce:45:63:ba:aa:45:8a:1c:d2:44:
b1:14:e1:0b:1f:7a:d4:88:8c:fe:60:29:dc:cf:f5:5a:9c:d4:
ff:e5:4f:cf:3a:c3:ba:01:8c:8e:6a:3a:da:9f:f1:ba:39:cc:
eb:19:be:5c:4d:4a:d2:04:b9:8d:e0:b9:07:ee:a1:2d:d3:a4:
a2:d4:5e:89:d7:32:cf:b0:a7:90:2d:cc:ec:c9:3b:d2:2a:02:
1b:4e:fd:f2:a4:35:be:d4:fa:4a:58:47:28:27:55:46:be:a4:
e8:83:79:7d:d9:a7:fb:a9:39:6e:3d:d7:56:9f:3c:b9:22:73:
0e:5a:36:26:85:3c:98:34:cf:c4:69:63:fd:2d:86:b4:c5:49:
61:0e:dc:0d:5e:1d:3f:fb:3e:4b:94:01:97:2d:5a:3a:8e:f3:
b5:17:bc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:30:08 2025 by rpki-client