Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/S64plXiTBiUF_54Ht5wbESx3CRc.roa
File: S64plXiTBiUF_54Ht5wbESx3CRc.roa (raw, json)
Hash identifier: LIeCeh4Xnc8Dt+Yt2nSVqAFgSqARXtXhCUDQnx6pmjc=
Subject key identifier: 4B:AE:29:95:78:93:06:25:05:FF:9E:07:B7:9C:1B:11:2C:77:09:17
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAA59E041CC7F20CB80AF23856D6D9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/S64plXiTBiUF_54Ht5wbESx3CRc.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213034
IP address blocks: 2a0c:b642:fc0::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a5:9e:04:1c:c7:f2:0c:b8:0a:f2:38:56:d6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bae29957893062505ff9e07b79c1b112c770917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:05:29:57:a9:87:8c:be:40:6f:c2:05:49:
5b:af:6f:34:43:b2:3b:c7:b3:3d:a7:3c:1e:cc:42:
0a:5f:bd:55:ff:d6:f8:30:cc:91:d2:2a:7a:22:d8:
44:5e:61:3e:42:d1:23:af:b5:01:f8:2a:97:a5:9c:
c0:23:e0:8f:94:d6:63:5a:35:ca:3f:58:75:c9:54:
46:48:b9:78:d1:11:1c:b8:15:d0:31:16:2a:38:b1:
63:85:84:26:a2:79:5a:b3:0d:eb:ba:6e:f8:58:59:
7f:55:7d:f4:d8:c7:66:76:eb:85:1c:ef:a9:02:31:
b0:1e:9d:f1:6e:1b:c7:5b:34:a7:42:fb:5b:94:dc:
89:96:27:0b:c2:3b:ea:e7:30:5e:6c:8b:6c:24:44:
29:4a:74:3f:75:f2:5c:5c:dd:35:c0:61:52:37:80:
9c:d6:5c:2b:dd:4d:80:15:34:f8:5c:97:eb:a4:98:
4f:3e:db:88:75:8b:2e:bb:35:df:ac:c4:57:74:8b:
9f:e3:b4:cf:62:6a:38:c0:0e:49:b4:1b:ff:8b:ac:
c1:58:3b:be:ec:0b:e3:ea:fa:54:54:e6:34:ab:c0:
e8:64:96:5b:93:ca:f6:1a:7b:68:0a:4e:68:32:e4:
7c:fa:6f:23:12:04:db:9e:82:9c:ef:76:36:6d:f3:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AE:29:95:78:93:06:25:05:FF:9E:07:B7:9C:1B:11:2C:77:09:17
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/S64plXiTBiUF_54Ht5wbESx3CRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:fc0::/43
Signature Algorithm: sha256WithRSAEncryption
8d:1d:f7:a7:37:0f:e9:f2:4a:5f:6b:24:40:a8:79:04:7d:e7:
2c:27:bf:68:a4:63:ba:7d:54:7a:99:af:d8:eb:49:3b:10:8a:
d4:8e:31:65:43:79:51:81:c3:11:85:12:cb:47:5c:d5:9f:5f:
4b:16:d5:1e:23:87:43:67:e1:5a:e1:35:89:9c:6d:b7:ad:ba:
d9:7e:e6:12:de:2f:27:96:47:22:ec:b0:aa:05:25:51:d7:5b:
5a:3b:9c:7e:b7:c6:5a:54:a5:7e:77:82:09:19:d8:dd:32:10:
3c:c9:7e:ec:9e:60:05:c3:40:75:ce:bd:22:e6:71:71:b8:af:
a5:9b:12:35:1c:9b:bf:3c:9a:b3:06:f2:1d:1d:e6:7f:f7:e8:
76:30:1d:09:f4:81:d2:39:f5:09:06:b6:1b:ef:f0:e7:fd:f0:
c2:28:b6:20:1e:78:cb:77:29:63:55:bb:ca:32:c8:b9:10:ef:
7a:cf:bb:32:59:a6:72:bb:5c:6b:4c:56:f8:98:df:68:4c:e1:
e0:b8:bc:33:f8:33:ff:64:30:73:35:59:27:98:75:1d:0e:a8:
53:f5:de:dd:12:7a:97:ed:49:3d:44:1d:40:22:00:85:cd:70:
1a:01:ec:04:8d:4c:94:56:4b:43:de:7d:61:90:d2:f0:f9:50:
e3:4b:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:30 2025 by rpki-client