Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/m1mbZ8gsyC5uv17gYm_y_aF2vyk.roa
File: m1mbZ8gsyC5uv17gYm_y_aF2vyk.roa (raw, json)
Hash identifier: osC8Y24LI3jvf9fnEWhuDDGU1/RQdO1XyG4u097YlRk=
Subject key identifier: 9B:59:9B:67:C8:2C:C8:2E:6E:BF:5E:E0:62:6F:F2:FD:A1:76:BF:29
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 019422203BCF3FADEC7D635460541F68C106
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/m1mbZ8gsyC5uv17gYm_y_aF2vyk.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211522
IP address blocks: 2a0e:8f02:f023::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3b:cf:3f:ad:ec:7d:63:54:60:54:1f:68:c1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b599b67c82cc82e6ebf5ee0626ff2fda176bf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:9c:1b:61:ab:4a:14:02:77:be:9f:54:ee:
af:d9:72:e9:6c:25:bc:72:b0:32:b0:3c:b6:59:97:
18:3a:99:6e:7b:ee:ea:8e:97:6a:cb:38:97:c2:8b:
9e:e0:8d:29:2b:63:13:be:e2:6c:6a:0e:82:82:5e:
e6:97:bc:5d:75:6e:d9:12:e0:fe:09:e7:c0:91:07:
de:2a:81:a1:98:01:0d:27:9a:f0:47:06:82:2f:13:
8f:75:de:0e:db:8f:9b:55:a5:5b:b4:c6:3e:46:8d:
cd:c4:a0:d8:39:78:b0:c8:db:7a:30:98:b1:87:db:
c1:ce:3c:67:4c:cf:3b:f3:b1:e9:b9:16:cd:a6:12:
f7:55:80:a0:2f:d9:ae:1a:9d:9c:e1:07:02:05:90:
a4:e9:4a:71:5e:0a:4e:45:a9:06:7f:ce:f5:c5:2c:
40:f1:b5:e2:ce:7a:3c:86:95:6d:a1:ba:de:70:84:
a1:02:ff:d1:ff:76:1b:04:12:6e:31:44:f5:69:c9:
a2:ad:d0:6c:ad:b2:fd:5b:47:6f:95:fb:ce:0d:f5:
97:3c:53:b4:67:9f:4f:4e:6e:c9:68:ce:ea:48:26:
e7:f8:be:74:71:81:80:a6:b8:a5:b2:3e:a7:f7:79:
3e:04:a6:89:20:d8:12:38:f1:a2:77:d5:82:b2:2a:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:9B:67:C8:2C:C8:2E:6E:BF:5E:E0:62:6F:F2:FD:A1:76:BF:29
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/m1mbZ8gsyC5uv17gYm_y_aF2vyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f023::/48
Signature Algorithm: sha256WithRSAEncryption
85:09:76:56:de:d1:63:54:30:d5:bf:c2:c8:52:da:e8:e4:82:
59:8e:01:15:63:47:da:d2:b3:94:56:51:82:a3:6d:b7:66:12:
eb:86:5c:2f:de:22:87:1c:c8:8d:4e:b7:8b:c2:15:c1:80:29:
5c:f2:1a:8b:67:c5:43:8e:de:1f:c7:eb:a9:49:3b:c2:84:be:
6d:d6:d0:4b:71:6b:91:1b:d9:f9:1f:11:7a:30:db:73:cd:4f:
3e:d1:3b:8b:a0:47:81:48:a2:b0:0d:44:9c:fb:06:33:8d:89:
e2:97:6d:a6:98:29:cb:78:71:f5:5d:7f:21:0a:5d:b5:22:a7:
27:a4:c6:85:d9:f9:4f:26:8a:2d:45:18:80:58:74:16:69:a7:
26:d1:5d:9b:b8:ca:27:b1:6e:55:c3:65:9f:54:2d:21:1b:1c:
2f:c2:8e:fc:54:1b:f6:69:5e:35:af:69:e0:39:cb:a1:42:03:
bc:26:50:1b:b5:61:9a:36:88:ae:71:cb:3c:db:49:94:e4:c0:
55:70:a1:3f:bd:2d:a7:bf:b3:c0:c8:9c:e6:57:c4:00:7c:97:
bb:6f:ed:18:a0:9e:af:bf:e4:d7:05:39:90:75:c7:61:6d:1d:
eb:b7:a7:79:5f:ac:d6:b8:2a:4e:81:39:5c:7d:4c:83:2a:b0:
95:94:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:46:54 2025 by rpki-client