Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GayyysZriYc1t6Rfxpi_7TIG7sU.roa
File: GayyysZriYc1t6Rfxpi_7TIG7sU.roa (raw, json)
Hash identifier: g0Z+o7xeIv5e4ntVBqJSmN2TYfMsFEhLvKudVJyg1r0=
Subject key identifier: 19:AC:B2:CA:C6:6B:89:87:35:B7:A4:5F:C6:98:BF:ED:32:06:EE:C5
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA9C5AED7C8BE5FF89041D2C4FC4A1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GayyysZriYc1t6Rfxpi_7TIG7sU.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211364
IP address blocks: 2a0c:b641:170::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9c:5a:ed:7c:8b:e5:ff:89:04:1d:2c:4f:c4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19acb2cac66b898735b7a45fc698bfed3206eec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:35:05:88:19:ab:5b:9e:02:47:c6:5a:6d:
2b:d3:cf:59:17:11:db:4f:2a:cb:d4:06:76:b2:bf:
4f:ed:a0:88:4f:7e:37:98:a8:e5:8c:a1:b3:8b:5f:
15:5c:71:31:d8:dd:d1:15:53:8c:a1:90:20:89:57:
eb:b7:69:3b:03:a4:bb:37:d1:fd:f9:b1:fa:0d:8c:
89:db:88:44:04:ba:58:45:5c:9c:3e:29:cd:6a:83:
12:d6:d8:16:56:54:49:30:4a:ce:e2:8c:1a:cd:81:
7d:b2:b4:d5:73:b0:a6:26:4a:48:fa:f0:0d:e7:8c:
74:61:fe:8b:06:a5:c4:68:44:c2:35:79:7f:ee:4a:
f3:21:c8:6c:21:14:5d:bb:b7:ce:a8:c9:e2:14:29:
1c:88:38:2f:c9:5a:33:68:0d:11:67:d5:5f:df:4c:
74:88:d7:d2:96:e7:31:8f:2c:00:47:59:87:4b:f0:
ee:81:f3:e9:be:21:fe:ba:da:af:80:d2:f7:51:f7:
75:1f:ae:37:b1:f7:59:6b:9b:13:82:73:0c:b9:b7:
f3:13:83:53:ac:9b:f8:36:5e:2d:3e:2a:cb:e4:95:
1d:c9:66:b4:00:e6:c9:39:3b:95:ef:79:0d:2e:2b:
db:f0:97:27:cc:39:49:7b:c1:12:47:4a:60:73:94:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AC:B2:CA:C6:6B:89:87:35:B7:A4:5F:C6:98:BF:ED:32:06:EE:C5
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GayyysZriYc1t6Rfxpi_7TIG7sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:170::/44
Signature Algorithm: sha256WithRSAEncryption
43:14:ba:74:f6:a7:6f:9a:ed:68:a8:a5:9a:ba:9f:ff:55:cf:
97:61:a3:fd:e5:df:22:97:52:dd:6b:2a:e7:19:e8:32:d9:50:
ab:2f:61:c5:4f:d9:2b:cc:80:cc:ea:01:0a:b3:7b:0b:c1:f1:
79:ac:cc:11:c3:c1:e5:50:ae:04:2c:04:8e:eb:1f:57:cf:b8:
ab:b2:cb:12:6f:a1:4d:ee:a1:bd:11:66:d8:6c:ea:50:e8:02:
c4:75:5c:bd:d6:9e:b8:1e:a3:cd:a2:1a:28:61:38:a0:38:fc:
c1:1b:9a:63:c3:b0:cc:d6:f2:f7:9f:46:ab:22:31:ea:2c:d4:
8f:7c:75:ce:ca:87:8e:a9:70:61:54:b4:d9:0b:71:82:ab:4b:
62:f9:16:44:ee:4d:5e:68:f3:4c:3a:59:27:73:29:61:1c:3d:
1a:0d:5c:0f:a9:06:df:33:fd:24:7c:84:5c:f4:be:72:3e:e3:
b7:4a:f1:71:e0:ca:fc:8b:63:af:f9:16:f4:91:cf:ff:a3:d5:
86:e8:31:76:58:f4:01:ca:3f:73:b2:e4:10:e9:e2:3d:3b:03:
c3:86:b3:87:7e:d8:05:59:68:ef:c2:df:ab:7d:7c:0f:2d:7a:
b2:8c:c6:13:0e:e8:d0:9c:f5:c1:50:4d:ef:64:82:ed:62:7d:
0a:58:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:51 2025 by rpki-client