Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa
File: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (raw, json)
Hash identifier: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=
Subject key identifier: AF:A5:4E:96:95:3A:56:02:F5:59:59:44:40:A2:08:39:D1:49:EA:37
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 019431EF611CE73193A9B4063B731D91487C
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa
Signing time: Sat 04 Jan 2025 15:29:18 +0000
ROA not before: Sat 04 Jan 2025 15:29:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36832
IP address blocks: 2a01:ffc7:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:31:ef:61:1c:e7:31:93:a9:b4:06:3b:73:1d:91:48:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Jan 4 15:29:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afa54e96953a5602f559594440a20839d149ea37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:38:79:67:90:aa:7f:72:5d:c0:58:cc:4d:
62:df:27:99:f0:7b:0f:13:92:76:04:88:18:25:d2:
7e:33:d0:01:08:9c:af:71:ea:50:e6:c4:81:ec:53:
d3:46:73:53:ea:ae:6f:aa:ec:88:9b:77:7d:11:98:
52:c1:39:13:86:c2:6f:c1:2a:28:c3:ff:78:d2:f7:
2e:e7:e2:0f:64:35:cb:5d:40:25:fd:0c:71:22:03:
d6:5d:80:65:4a:8f:85:9d:17:21:dd:61:10:6e:92:
e7:4b:51:96:69:a0:07:23:a5:a8:98:80:a9:85:5a:
34:66:49:25:12:d7:5d:b3:45:e8:f8:5a:80:bc:03:
1b:4b:77:40:e3:eb:0a:6f:7b:91:5a:29:b0:0c:a4:
15:dd:00:e4:b2:35:11:5b:d5:6a:c3:45:58:66:95:
4b:33:28:0c:e7:7b:a7:73:fe:62:c4:62:bc:e8:82:
e6:ae:57:b1:7b:b3:30:dc:b5:c0:e5:ab:44:b2:e0:
f0:77:0f:06:8f:88:99:f4:17:54:a3:15:2d:94:96:
06:01:e2:ed:c1:73:c5:34:f9:f5:e9:48:a3:61:ff:
86:9c:02:20:09:a7:3f:e4:ee:a2:e9:a7:25:35:68:
7b:9e:28:63:a9:ad:ee:10:2c:a8:ee:e2:4c:dc:24:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:4E:96:95:3A:56:02:F5:59:59:44:40:A2:08:39:D1:49:EA:37
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ffc7:200::/40
Signature Algorithm: sha256WithRSAEncryption
b0:37:aa:98:00:72:f9:43:5f:5e:4d:ac:e4:a2:ce:30:fe:6b:
23:3f:b8:b9:4e:19:8a:74:d1:ca:87:2e:ba:6f:35:42:9b:f2:
f1:c8:ca:8d:fe:c8:e0:5a:a5:18:2f:ee:22:e2:8b:9a:f9:87:
a4:54:5c:9d:7d:e4:da:7b:7d:e3:68:e7:20:30:e0:df:aa:83:
12:c7:c2:55:84:86:53:10:6c:ab:b0:35:0c:76:3a:79:ee:ec:
8a:63:eb:ff:cd:be:ec:63:1b:26:79:0b:41:5b:bd:bf:33:3f:
41:d9:ee:ac:e2:d2:06:9f:78:ff:03:2c:2f:04:06:27:54:21:
b3:36:b6:ce:91:42:dc:17:7c:d5:50:bf:1c:f0:fa:fe:c6:4f:
65:8e:1b:bd:6d:c4:2b:c4:94:b9:35:a0:96:00:96:20:cd:db:
09:56:91:d0:7c:c8:5d:9d:0b:97:2a:92:66:df:49:4e:6e:b7:
99:07:6d:d3:75:24:63:f0:91:3b:0f:24:15:7c:74:b6:0a:f0:
8c:65:05:b6:aa:04:ef:89:b3:9b:92:9e:d1:53:34:4f:b3:9f:
86:55:1a:a7:d0:46:32:5b:c9:13:8e:0a:fd:1b:5c:16:ab:4a:
5c:34:bf:97:ec:e5:f0:4c:e1:30:ca:0e:9d:c3:05:c8:ee:88:
ea:af:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:54 2025 by rpki-client