Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/CJLyzytU8EOC5Efu05kD7tsEX6Q.roa
File: CJLyzytU8EOC5Efu05kD7tsEX6Q.roa (raw, json)
Hash identifier: ATE8PFWU8hcGyRu+nNJyT0reB8q7PYt0ii0xkNy/umo=
Subject key identifier: 08:92:F2:CF:2B:54:F0:43:82:E4:47:EE:D3:99:03:EE:DB:04:5F:A4
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAA03492EDD2F5CF0450A39BE373D1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/CJLyzytU8EOC5Efu05kD7tsEX6Q.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212625
IP address blocks: 2a0c:b641:2b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a0:34:92:ed:d2:f5:cf:04:50:a3:9b:e3:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0892f2cf2b54f04382e447eed39903eedb045fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:5a:e3:20:c9:c7:73:dd:79:ab:70:3e:66:
db:56:fd:cf:a0:b3:cb:bf:42:d4:2e:87:48:b9:c1:
cc:16:cc:68:75:3b:0a:ce:79:8e:51:6e:e5:aa:72:
b4:46:93:79:52:2f:4c:7b:5a:bf:cd:40:a7:a3:5f:
56:33:4e:1c:7c:ce:dc:1d:ea:4d:3e:89:6b:45:10:
da:fe:18:65:cf:b2:bf:9b:74:30:cb:b6:4e:f7:91:
14:4c:7a:9e:9f:d8:bd:0c:ee:5d:6f:d5:9f:34:c3:
ce:8e:8d:ba:8e:18:3f:81:80:e0:31:78:b9:87:48:
02:75:40:e7:87:bd:95:16:90:24:53:e6:5d:8f:7a:
09:a3:8b:f9:64:9f:ca:75:e9:e1:c1:a7:43:cb:2c:
dc:38:94:91:a1:23:88:c3:e7:5f:89:8f:fc:5e:23:
7e:40:d7:1f:7b:e5:f7:2c:00:88:88:e5:2e:e4:5f:
79:79:35:21:33:ef:89:3d:94:d0:8c:f4:c8:f2:11:
5e:91:59:ed:41:ad:2f:a6:e9:cd:a2:ad:5e:0c:7f:
d1:5c:f3:28:68:2f:ee:1b:e5:9b:f3:63:e0:8d:4a:
08:e5:b5:7c:36:f2:d7:cf:99:a4:6b:21:f7:ae:80:
81:af:f7:2a:ad:ba:a9:19:b3:ca:21:63:e1:79:85:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:F2:CF:2B:54:F0:43:82:E4:47:EE:D3:99:03:EE:DB:04:5F:A4
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/CJLyzytU8EOC5Efu05kD7tsEX6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:2b0::/44
Signature Algorithm: sha256WithRSAEncryption
02:80:6e:b1:cd:8b:f0:2a:96:4a:ac:3b:88:1c:22:08:b1:f8:
8f:54:3b:4b:58:8c:a4:cb:4f:50:1c:7d:1e:2f:2f:f2:42:06:
a9:45:c7:be:41:58:e7:34:fb:61:a4:08:8f:25:6a:cb:5e:15:
11:3d:0e:6c:fd:4c:a2:70:d3:6f:80:5f:ab:d3:12:51:f5:67:
24:b6:5b:27:41:07:72:da:9a:88:c4:72:fc:bc:27:3b:8c:e4:
93:61:b6:8c:8d:28:93:f4:45:41:c2:85:63:98:3b:d2:96:a2:
03:88:9f:d4:a3:b5:c5:f5:c6:25:09:0c:44:bb:ec:33:3f:99:
fd:39:2f:70:fe:9a:3c:d1:e3:69:2c:24:9b:af:22:e3:30:a5:
86:fd:00:35:da:a3:26:10:85:b5:5a:35:18:32:35:c0:26:d8:
f1:5c:0b:9e:cc:05:c4:a1:dd:6a:57:25:4e:6b:a0:51:c2:7b:
49:ac:0b:fa:c2:b9:b1:c3:38:fb:54:82:e5:00:70:8b:5b:9e:
e9:b2:c0:fe:5f:2d:fb:fa:72:92:7f:c1:f6:d5:5a:92:55:6b:
3d:84:9d:7e:06:e8:e7:23:9c:21:42:a4:c3:b2:07:ba:03:a6:
c3:1d:51:c9:4c:4e:1d:c9:95:97:47:65:74:5d:40:6d:9e:4f:
56:d2:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:22 2025 by rpki-client