Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1wvnbg6Q8117K_nteTTte4S7nxg.roa
File: 1wvnbg6Q8117K_nteTTte4S7nxg.roa (raw, json)
Hash identifier: ENgyyDmLjUOckKDAZj9H4d3tNAHS1prBGM7EEwWm16I=
Subject key identifier: D7:0B:E7:6E:0E:90:F3:5D:7B:2B:F9:ED:79:34:ED:7B:84:BB:9F:18
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521E41D777824E385FA81C01112F3DA
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1wvnbg6Q8117K_nteTTte4S7nxg.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203868
IP address blocks: 2a0a:280:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e4:1d:77:78:24:e3:85:fa:81:c0:11:12:f3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d70be76e0e90f35d7b2bf9ed7934ed7b84bb9f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:98:47:20:de:54:b0:1b:63:2c:91:dc:6c:
04:67:43:c6:c1:d2:59:d0:dc:ae:f2:c5:85:ef:72:
22:fa:34:af:e9:90:5d:e0:4e:d7:6a:be:1c:21:cc:
6b:33:01:63:50:71:de:99:2d:8e:b2:ec:7f:a3:58:
a7:b7:75:cf:df:40:a2:14:d9:57:c3:49:db:73:ad:
02:ea:93:20:84:79:62:1f:7e:cf:63:58:cb:f2:de:
f0:04:d9:d5:50:d2:05:a3:4a:23:8a:cd:55:dd:82:
1c:48:71:a2:21:1d:9d:a5:79:6f:50:c0:4d:0a:8f:
cf:6c:7c:06:45:fb:a3:d4:ed:f8:bc:d8:7c:98:a3:
0a:52:7d:87:d7:d4:58:db:c2:95:4c:c1:2d:0f:16:
a8:32:7a:36:7b:fc:fe:04:cd:9e:a9:25:c5:08:88:
c9:50:c3:b2:99:3d:69:96:a8:b3:68:15:92:04:56:
e3:1d:3c:a4:25:c9:5c:75:3a:65:87:0a:2d:7d:d4:
dc:3d:5f:be:27:05:32:a4:74:5a:0d:5b:5a:c5:2b:
d5:33:fe:c7:60:6f:bd:f4:be:98:42:31:83:b1:e1:
e5:20:88:17:62:1d:d3:e8:9a:71:1c:d1:d7:57:ae:
0e:7a:7d:dd:51:05:6e:a9:42:14:63:e1:16:aa:a1:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:E7:6E:0E:90:F3:5D:7B:2B:F9:ED:79:34:ED:7B:84:BB:9F:18
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/1wvnbg6Q8117K_nteTTte4S7nxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:b000::/36
Signature Algorithm: sha256WithRSAEncryption
81:dd:d9:29:de:73:ab:b6:e3:35:51:18:a2:5c:89:fc:74:73:
60:a8:70:98:d3:96:a7:8f:f5:f3:df:89:60:fa:ea:48:d8:9d:
08:fd:90:c6:71:3c:54:42:a7:98:3e:13:92:73:06:95:56:02:
6c:17:bd:c2:d9:41:9e:6e:22:2f:41:6f:4f:36:3c:ba:8f:76:
77:47:83:cf:c0:1a:d4:c1:f5:71:3a:0e:4d:c4:a3:7f:19:4f:
4a:e7:1a:48:ec:8e:d0:a2:80:20:da:6b:3f:6e:e8:42:c5:39:
2c:5d:9d:76:1d:e1:07:c7:e4:88:76:fe:f7:68:50:0b:9d:97:
f3:3a:b8:20:3b:ea:e7:0c:ac:1c:d5:af:56:b2:82:34:81:b8:
b3:b2:cf:4e:3b:96:30:f9:36:a6:a9:f9:3f:11:aa:e8:32:69:
e8:69:d4:27:37:2b:84:ee:04:d7:15:6b:6c:c2:bf:24:46:99:
2b:f7:f3:be:9b:c5:fe:be:46:31:9c:01:81:23:0d:ae:b6:16:
0d:9d:c5:fe:5c:d7:ef:1c:2a:6e:67:f3:24:cd:a0:ab:16:2c:
8d:8e:b9:47:bd:ca:ca:b8:c1:ba:94:60:f5:ec:c3:b9:2e:e0:
64:8e:fa:4a:e1:ab:b0:ae:ff:00:0f:ba:45:bf:ac:f4:5d:25:
5d:22:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:07:43 2025 by rpki-client