Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0k1cuHVuZFntmchjR6fPixwHTSk.roa
File: 0k1cuHVuZFntmchjR6fPixwHTSk.roa (raw, json)
Hash identifier: XLFxr19mQodq/kyuewArknRel1EZBS4Vzf12/joISd0=
Subject key identifier: D2:4D:5C:B8:75:6E:64:59:ED:99:C8:63:47:A7:CF:8B:1C:07:4D:29
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019518B2731A8178AECE8C09255BBA763B8E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0k1cuHVuZFntmchjR6fPixwHTSk.roa
Signing time: Tue 18 Feb 2025 10:55:02 +0000
ROA not before: Tue 18 Feb 2025 10:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213344
IP address blocks: 2a0c:b641:280::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:b2:73:1a:81:78:ae:ce:8c:09:25:5b:ba:76:3b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Feb 18 10:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d24d5cb8756e6459ed99c86347a7cf8b1c074d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:db:47:39:8e:c0:a5:a2:9f:0b:8b:2f:45:
2f:55:48:20:e9:e8:f1:1f:2b:ed:c2:36:40:84:78:
52:47:47:e0:d3:88:07:32:9a:45:4e:6a:05:a9:c6:
df:a9:6e:28:dd:f4:38:38:bb:10:57:3f:23:7f:2a:
0e:af:fd:bc:1b:08:91:4f:9e:f0:c0:a0:13:94:01:
d1:7f:98:2e:ee:50:22:71:9c:35:0b:20:a4:d7:bc:
37:e6:7f:38:1a:cd:8b:89:b5:55:08:b5:f9:85:cf:
2a:11:04:28:ee:8a:44:b6:74:fd:19:88:81:b8:61:
0c:4c:2a:6d:c6:8a:ae:be:2c:19:d1:9d:31:7b:df:
95:3a:17:c6:45:2b:9f:40:9c:94:7f:87:0e:9c:da:
b1:ec:3d:dd:e0:13:cc:3d:45:e1:0f:d0:15:76:09:
ff:37:c0:62:25:80:62:11:54:3c:2d:59:43:e1:81:
1b:5c:89:00:31:ef:c5:a4:8f:3b:4f:c9:91:20:53:
18:d4:cb:9d:10:d4:92:1e:26:79:ed:ed:1e:86:c6:
c7:3c:15:c3:1e:7c:da:8b:c0:ce:38:72:bb:e1:b4:
c5:11:bf:77:4b:25:fc:bd:37:4c:55:30:aa:93:c4:
e7:d4:52:5e:75:6c:24:bd:3f:19:fb:25:2b:6a:dc:
e1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4D:5C:B8:75:6E:64:59:ED:99:C8:63:47:A7:CF:8B:1C:07:4D:29
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0k1cuHVuZFntmchjR6fPixwHTSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:280::/44
Signature Algorithm: sha256WithRSAEncryption
4f:a3:65:aa:4d:88:04:85:34:57:84:83:7f:72:3c:f2:f1:9a:
a0:f3:c0:d0:43:4d:37:71:9b:8a:e4:7c:1c:cd:b0:6e:30:ec:
77:2d:e3:59:da:f5:47:d6:14:1b:1d:a8:40:e6:e9:c3:2e:6f:
6c:cc:1c:f7:05:6b:45:56:86:b9:77:61:9c:4d:22:8d:db:ec:
93:ee:d3:af:1d:85:73:c3:de:89:f4:14:90:96:4b:dd:68:4d:
8d:c1:1a:1f:48:e1:0b:b3:14:0a:84:9e:cf:15:9a:60:82:c8:
29:04:41:39:da:45:bf:23:21:d0:3b:bd:23:62:59:c4:38:b0:
4c:21:ac:7c:df:cc:ce:ce:45:9e:0d:e3:f8:a7:3e:01:b3:fb:
cb:87:37:d2:da:b8:4b:97:f5:3e:d8:2f:f0:69:a6:ea:47:69:
5d:32:6e:90:76:56:4c:b5:44:e6:cc:02:7d:97:4c:bc:f2:5e:
fb:16:3b:dc:96:35:29:11:2f:84:aa:6d:59:f1:61:fc:a4:65:
41:19:6c:52:83:44:35:f0:da:03:b8:7e:2a:8d:f1:d8:68:e3:
0d:59:5d:8f:d8:a9:a3:07:b8:2b:90:3f:3d:57:e7:d7:31:db:
9e:ca:ff:44:67:f3:b5:6a:aa:6f:a1:77:7c:dc:35:b9:09:39:
89:07:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:28 2025 by rpki-client