Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MafXZHYyWU9S1HcbgJTAIW7hBsY.roa
File: MafXZHYyWU9S1HcbgJTAIW7hBsY.roa (raw, json)
Hash identifier: Ah33Op5bc6LWEEF+HV1wcl/lnuzu3wWTnW2wPcrjpSI=
Subject key identifier: 31:A7:D7:64:76:32:59:4F:52:D4:77:1B:80:94:C0:21:6E:E1:06:C6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA9EA888A72E2936BDB38223984866
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MafXZHYyWU9S1HcbgJTAIW7hBsY.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212196
IP address blocks: 2a0c:b641:d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:a8:88:a7:2e:29:36:bd:b3:82:23:98:48:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31a7d7647632594f52d4771b8094c0216ee106c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:2d:bb:af:04:aa:5a:13:a4:de:5b:9b:e3:
7f:da:43:04:a2:aa:3d:32:55:a5:66:f2:80:b1:b0:
59:20:1f:c4:c2:b9:55:6d:8e:5a:a6:4d:1a:37:00:
51:be:5e:c9:80:9e:87:5a:13:37:ec:ef:ab:0b:6e:
38:c6:36:86:bc:7e:02:70:fd:df:50:7c:28:0e:5d:
ba:36:7d:84:77:69:7f:25:2c:62:ac:be:bf:55:c3:
87:48:bf:06:c9:cc:ce:91:f3:a4:4f:e4:93:cf:14:
a5:22:c9:ed:9d:6f:ef:8d:ae:00:74:36:1f:1d:65:
f2:d2:00:17:b5:71:cc:99:a4:71:73:c0:52:4e:d4:
81:2f:96:5e:47:07:39:f9:bf:cd:c1:aa:52:da:c0:
7e:a1:80:db:42:aa:37:2e:d7:9f:e7:18:7d:b4:30:
24:6d:f3:9e:78:29:2c:72:ce:e4:aa:a2:3e:20:d3:
a7:fb:e7:a6:6a:3e:d2:7f:74:6c:de:ac:be:11:1d:
47:cb:e8:9f:1c:3a:ae:50:a4:d3:07:11:f7:c1:e0:
ec:ca:9a:ba:0f:7b:aa:b3:76:da:c6:1e:db:6d:1e:
44:86:a2:bc:97:ed:47:3f:5c:99:c2:6f:2b:fb:cc:
f5:57:f8:40:eb:3a:ac:84:b9:08:1c:bb:82:87:ba:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A7:D7:64:76:32:59:4F:52:D4:77:1B:80:94:C0:21:6E:E1:06:C6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/MafXZHYyWU9S1HcbgJTAIW7hBsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d0::/44
Signature Algorithm: sha256WithRSAEncryption
5d:e5:b9:77:1b:99:e1:28:7f:dc:06:9d:b2:46:79:9d:87:5a:
d8:2e:84:fd:20:b2:bd:5d:44:46:19:95:ed:d4:c2:3b:74:19:
65:64:fc:f4:54:d5:5c:47:f8:89:e0:92:e5:96:dc:51:f3:b9:
20:79:9e:f3:6c:6e:fb:85:fc:22:b6:ed:10:e6:c3:0a:14:9e:
26:a5:72:c4:30:7f:99:ec:f3:1d:04:cb:b6:77:c3:f6:92:12:
fc:c3:28:ef:d3:cb:cc:3a:e0:a9:92:aa:dc:24:3a:76:4b:70:
46:7b:1b:78:af:19:ec:03:8f:cb:b1:40:2b:c0:00:80:41:35:
22:c6:20:26:4d:27:32:7b:db:f6:2b:81:c6:72:e6:37:a5:0c:
c0:3c:09:97:2e:f6:f7:cb:a7:9e:8f:86:70:b1:c8:5b:aa:79:
10:97:58:fa:0a:3a:55:83:23:19:e6:01:de:09:f4:ae:c1:50:
42:ef:7e:a0:de:71:e2:06:0d:be:62:ab:96:53:7c:56:9e:98:
67:e2:bc:2f:c5:e1:47:88:89:a4:be:72:da:99:99:21:e1:90:
d1:b9:a8:fa:55:76:70:bc:6d:0d:b5:56:57:f0:12:06:c7:e2:
3d:8e:cf:a7:2d:e8:c7:f4:48:62:e0:4d:cd:e4:9c:06:54:e1:
a1:57:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:12:11 2025 by rpki-client