Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RYOXWTq5QJgznNpAxs0HECOjewY.roa
File: RYOXWTq5QJgznNpAxs0HECOjewY.roa (raw, json)
Hash identifier: kFuk9uXh+8vwyp7Ht64B+AZXO73sOSz1BT8aSwOgcAk=
Subject key identifier: 45:83:97:59:3A:B9:40:98:33:9C:DA:40:C6:CD:07:10:23:A3:7B:06
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA92C50FE2A308D094B5F3167BDB00
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RYOXWTq5QJgznNpAxs0HECOjewY.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209586
IP address blocks: 2a0c:b641:510::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:92:c5:0f:e2:a3:08:d0:94:b5:f3:16:7b:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=458397593ab94098339cda40c6cd071023a37b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:93:47:e5:58:74:2f:c5:40:15:67:d6:80:
1a:71:6a:b9:61:fc:0a:19:39:3b:5b:45:b3:9d:e9:
82:b5:38:bd:06:2c:4d:c8:f6:b4:25:d8:ce:ec:c7:
4e:54:a5:49:49:74:01:07:3d:81:44:c4:43:da:81:
99:30:0c:ed:21:a9:da:58:07:2f:f2:51:c2:72:09:
ac:b0:76:9d:82:55:10:18:a6:22:17:72:89:f2:54:
2b:ee:d0:09:73:dc:d5:b5:00:ea:60:91:95:e7:c0:
e2:f5:68:ac:72:f1:1a:85:58:a8:b0:e9:c2:5e:1f:
65:92:0b:56:e0:20:5d:9e:68:6d:19:3c:2a:64:44:
c0:9d:1d:54:cf:79:fe:33:0a:43:f7:4f:16:3a:6a:
05:bc:9d:74:5b:f7:7a:52:b7:5b:92:8b:a1:b6:70:
36:db:a6:fb:46:5e:bc:58:fc:2f:db:05:46:85:8f:
49:50:8a:af:9d:25:6f:31:e8:e6:8b:ec:2d:36:57:
d4:ae:01:87:a2:bf:bf:a8:c5:3e:bf:5a:55:0c:5b:
00:cb:1c:80:f0:82:45:49:0d:52:c1:04:d2:f8:ac:
4b:bb:97:97:a7:3e:54:bc:db:ca:c1:ad:56:94:0b:
23:04:e8:6e:b8:04:7b:ee:98:db:e3:58:d1:f2:29:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:97:59:3A:B9:40:98:33:9C:DA:40:C6:CD:07:10:23:A3:7B:06
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/RYOXWTq5QJgznNpAxs0HECOjewY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:510::/44
Signature Algorithm: sha256WithRSAEncryption
05:cb:bb:6e:fb:c6:1b:0e:df:2e:a1:6f:34:11:60:9c:27:67:
e9:5a:aa:1e:19:65:dc:03:02:40:f1:7b:19:3a:e0:8f:d2:ff:
3f:4b:ee:07:3b:0a:90:74:1b:f1:58:c0:c9:11:a0:27:8a:98:
b3:60:41:53:e4:e9:f3:9c:71:12:7f:76:be:0c:45:3f:35:4a:
1a:e5:59:91:1b:c5:62:a7:00:ae:63:00:22:de:4c:6c:57:0f:
ed:e6:8a:ac:b1:8e:5a:50:54:56:b5:39:6d:64:55:ff:b3:78:
5b:25:60:14:36:a6:18:36:4e:64:85:5d:08:e8:05:0b:f8:ed:
76:88:ba:c3:a6:19:40:c5:5f:ad:e0:94:9c:09:d1:dd:c2:0a:
86:eb:84:18:04:c4:d6:b0:e9:7d:0a:2a:0b:31:f1:35:7b:2e:
6a:5e:1e:37:29:b4:a2:0d:1c:38:65:cb:93:be:ca:23:0b:1a:
88:61:1c:63:f3:10:8d:20:3f:2b:94:47:ec:85:01:81:a1:b8:
e8:9b:dc:cc:8c:d0:99:76:51:c5:79:c8:c0:2a:6c:f7:49:11:
10:85:7d:3c:31:a7:e3:97:c7:d6:78:23:68:4d:28:7d:1b:78:
ef:f7:c1:fe:f4:e2:df:9e:d2:5a:07:08:fc:b3:b1:23:4d:af:
ed:4c:fe:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:09:27 2025 by rpki-client