Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa
File: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (raw, json)
Hash identifier: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=
Subject key identifier: F6:19:FA:B5:80:75:84:6A:79:55:2D:24:05:34:8C:3A:D0:FC:00:17
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B653B027B0F3CC70390ECE0B936733
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397520
IP address blocks: 2a01:488:bb19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:53:b0:27:b0:f3:cc:70:39:0e:ce:0b:93:67:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f619fab58075846a79552d2405348c3ad0fc0017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:18:45:38:b9:0c:d0:3e:02:c5:c2:d9:b5:19:
a5:9b:2c:2a:58:6b:87:b7:4d:4e:7e:9b:4f:7b:4b:
12:0e:09:7a:d3:92:fb:ae:39:ea:0b:25:4d:0f:31:
4c:b4:30:8d:5c:bf:cf:ff:d9:84:c4:8b:2c:65:45:
36:a2:83:d9:1b:e4:d8:cc:83:fa:a8:8a:f3:9a:67:
c2:36:37:55:04:2d:0f:93:15:8a:3d:8c:55:92:39:
fd:2f:ab:9d:5c:77:db:a5:80:76:05:2f:e0:a2:78:
a6:70:60:38:3b:c5:ca:1b:c7:f4:1d:c0:6a:33:77:
09:ca:4f:b5:9e:a3:70:ca:b3:86:79:82:00:45:71:
dd:16:f0:97:26:c0:f3:2a:71:6a:47:99:04:89:ed:
a5:6e:67:bf:1f:22:cc:b5:49:c1:e4:9d:39:71:e2:
fa:84:54:89:25:65:45:4a:d3:66:ad:64:59:38:8f:
c7:1b:02:64:9d:01:02:33:3c:5a:26:b1:05:42:15:
a1:55:8e:68:41:9b:3f:74:e9:f2:6c:93:ef:98:55:
a2:c6:6b:1c:f3:53:b7:5f:dc:90:f4:75:d9:b2:59:
ac:7c:cf:8f:a1:a1:a8:c2:a3:fd:a4:3c:80:99:9d:
a4:91:03:25:ed:2a:4f:20:3b:41:d0:b3:d8:f6:a1:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:19:FA:B5:80:75:84:6A:79:55:2D:24:05:34:8C:3A:D0:FC:00:17
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb19::/48
Signature Algorithm: sha256WithRSAEncryption
24:6e:e6:33:bc:5a:a1:90:49:1e:b8:c3:c7:7a:2f:95:63:68:
7a:48:39:9c:7d:25:2f:de:52:f1:72:46:80:1a:0d:d3:0a:5c:
16:9a:61:d2:5e:3e:6e:7f:8b:2c:e7:b8:92:3b:a1:0b:7e:78:
e0:16:b9:4d:07:9e:dd:76:26:a2:58:3e:8e:00:f8:ec:13:16:
aa:b5:99:94:d7:2a:75:36:10:04:5d:21:7d:32:d9:45:94:a6:
c9:48:dd:0d:e5:eb:4d:fd:88:91:13:2b:ab:a9:f1:34:05:47:
bf:98:ee:5d:c3:2f:d6:15:af:cf:8d:69:d0:c8:a2:3c:38:06:
23:22:13:a9:9e:85:47:ae:b0:d7:8e:5b:cf:fd:45:31:6a:9b:
ca:b4:90:e9:5c:60:a1:f5:03:64:ab:e8:b1:dc:a0:79:a9:15:
e4:ad:51:d8:df:cb:c2:23:a2:68:c6:4c:56:df:74:8a:26:81:
5d:9b:dc:f2:9b:30:92:33:71:5a:b7:fa:43:5b:32:0a:15:e1:
08:7b:68:56:a0:4a:d8:a5:bd:41:aa:e7:c2:ff:31:ee:6b:a3:
20:de:66:fd:eb:29:55:51:0c:2b:ca:0a:ab:03:f6:ab:4c:63:
be:28:70:84:34:83:7b:94:bb:9b:39:cd:97:17:4f:cd:51:3a:
bd:5d:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:12 2025 by rpki-client