Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1Xh79WRejusmuVuhX1D1M0zsLMI.roa
File: 1Xh79WRejusmuVuhX1D1M0zsLMI.roa (raw, json)
Hash identifier: J2kDaHShH9GY34WnG68aY8i82bsNs8f5dLUTRq3X/XQ=
Subject key identifier: D5:78:7B:F5:64:5E:8E:EB:26:B9:5B:A1:5F:50:F5:33:4C:EC:2C:C2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA98D032D69778F0C2D7BAD545A7EF
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1Xh79WRejusmuVuhX1D1M0zsLMI.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210469
IP address blocks: 2a0c:b641:580::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:98:d0:32:d6:97:78:f0:c2:d7:ba:d5:45:a7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5787bf5645e8eeb26b95ba15f50f5334cec2cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:c2:10:4b:68:58:67:f1:38:8e:76:f5:82:
93:b7:8c:0e:75:6d:47:2b:51:01:5c:c2:0f:3c:2d:
c6:bf:66:48:11:0c:45:31:60:b7:ed:9c:b5:43:f2:
c5:c1:a9:75:14:0e:b8:c7:05:ca:a0:c8:20:e5:d8:
33:c5:e7:41:72:c3:b6:8e:5c:f7:c4:a1:35:c6:cf:
9c:57:5d:98:5f:0c:35:c8:1e:80:f5:8a:c2:eb:41:
56:0a:75:3d:a4:33:53:b3:35:ff:31:e1:41:96:68:
a5:3b:b0:73:96:7c:07:41:1c:3c:1f:ee:11:47:e6:
3b:93:18:80:04:46:43:11:63:19:73:ab:ee:96:89:
3f:69:06:d9:f5:27:14:d3:04:05:b6:89:51:59:af:
ec:a7:b3:fa:b8:34:6e:26:d1:d6:af:8d:68:a9:c3:
c4:c4:d8:d7:e0:ca:69:0b:32:38:3b:4b:4b:bc:1c:
af:8d:7a:31:44:08:96:41:01:b5:f1:55:c5:dc:22:
3b:52:ff:b9:c7:25:ab:49:ca:35:31:b5:77:1a:8e:
1a:67:42:e4:e7:46:04:60:f9:63:b4:3b:fa:02:a8:
2a:31:d3:ba:10:1f:a8:f1:d7:8e:23:1e:b0:a7:52:
82:9b:15:db:90:f8:b1:28:8b:9c:15:05:3b:ea:05:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:78:7B:F5:64:5E:8E:EB:26:B9:5B:A1:5F:50:F5:33:4C:EC:2C:C2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1Xh79WRejusmuVuhX1D1M0zsLMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:580::/44
Signature Algorithm: sha256WithRSAEncryption
0a:3d:9e:f3:ec:fb:79:2f:3f:50:d6:b4:81:fc:2b:bd:ba:c6:
51:25:b2:f0:4c:5a:f2:6a:87:bd:12:d5:33:46:4d:6e:8b:a5:
2c:d6:35:d5:21:39:5d:85:48:73:90:42:f5:38:db:d8:84:4a:
3a:e5:70:ad:1f:1f:a0:3c:71:1b:e4:9a:0e:f3:8d:a1:fe:74:
03:8e:73:d1:3f:6d:39:6b:58:8b:e9:c9:fa:90:e5:61:cd:47:
df:aa:e2:17:d6:89:1d:86:d0:29:bf:4f:06:c5:d6:4b:6e:26:
d2:0f:72:9e:64:b8:e1:b0:6a:1d:9f:28:5f:0f:85:e1:10:2e:
7f:4b:79:27:b2:e7:e6:d5:1e:a9:04:14:42:b0:15:b0:ad:ae:
13:d3:6c:7a:f2:4f:1f:c1:57:2c:ba:18:8a:3e:01:13:4c:f3:
29:8d:6b:bd:8e:6b:69:ab:c9:36:d2:64:1c:13:bf:f8:0e:5f:
02:b7:f0:70:30:9e:25:7b:6e:02:9c:2e:8f:7e:38:8d:7b:d9:
62:59:a3:f9:30:d7:13:33:09:c6:a9:c9:19:7c:95:43:1f:a2:
d8:59:f2:0b:6e:2f:84:bd:d1:a8:7e:36:08:b3:80:c3:70:02:
1a:9a:04:12:6e:39:5c:a0:38:4f:fe:6f:86:0f:d0:4d:ad:8c:
cc:7b:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:07:51 2025 by rpki-client