Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/a1_1jQrKyriUnhVRdQoaVQArNCw.roa
File: a1_1jQrKyriUnhVRdQoaVQArNCw.roa (raw, json)
Hash identifier: kGNqlGk8UyIZrdJCzJYN6usf1wBN4kstwrEgtHV3Ywg=
Subject key identifier: 6B:5F:F5:8D:0A:CA:CA:B8:94:9E:15:51:75:0A:1A:55:00:2B:34:2C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA771E98FEE48DA887A38585DFED6B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/a1_1jQrKyriUnhVRdQoaVQArNCw.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35913
IP address blocks: 2a0c:b642:1a08::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:77:1e:98:fe:e4:8d:a8:87:a3:85:85:df:ed:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b5ff58d0acacab8949e1551750a1a55002b342c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:91:7b:8c:0b:15:11:b1:91:d2:27:02:76:
01:01:83:fd:8d:7c:d2:02:a7:2e:d4:dd:25:25:ab:
25:5b:b3:71:e3:cc:78:7b:c4:0a:18:52:b6:ba:34:
c1:db:ac:d5:c9:80:fe:70:3d:9b:05:c7:6c:6f:6f:
4c:cf:96:c9:57:4f:37:bf:92:9b:40:c2:a8:a0:26:
7c:22:5a:9c:24:31:95:aa:0b:e9:1e:52:97:80:1c:
a5:97:7d:55:ff:93:e4:ec:17:e6:69:2d:0a:3f:31:
f7:45:e5:b3:04:7c:fc:41:f5:e2:9f:50:87:49:77:
9d:31:55:4a:d2:91:fe:06:1c:2a:d8:29:c7:4d:9d:
2d:af:de:44:8e:20:b3:2e:7a:a9:02:2d:6a:7b:71:
41:27:32:eb:c9:23:f1:10:5c:da:15:86:19:a4:ee:
03:3c:d8:5d:02:d1:4f:34:02:f3:c4:03:ab:a6:1d:
c9:96:22:76:e3:f3:b5:02:9f:cf:73:bf:d6:05:24:
68:7c:8f:fc:1b:14:ef:e7:47:ce:4d:2b:c3:a9:bd:
69:e1:38:0e:2f:ce:f3:5d:74:a0:db:31:74:8d:0d:
d3:39:70:26:d7:7f:82:2d:31:50:68:98:92:35:35:
6e:19:15:31:25:94:1f:5f:26:01:16:44:f8:b2:14:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:F5:8D:0A:CA:CA:B8:94:9E:15:51:75:0A:1A:55:00:2B:34:2C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/a1_1jQrKyriUnhVRdQoaVQArNCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a08::/48
Signature Algorithm: sha256WithRSAEncryption
25:4b:dc:b9:ec:7a:01:ea:d0:37:e3:d3:5d:d3:fd:ac:dc:f0:
0c:bd:b5:64:6f:b3:fb:61:fd:f3:42:a5:1c:f1:e4:5b:70:41:
dd:14:3c:ae:97:4f:8e:17:25:a3:d7:57:77:13:eb:d1:16:8d:
b0:69:e0:f5:56:8e:73:1f:12:ad:6f:40:fc:10:46:d4:8a:28:
05:70:c6:c9:8e:0e:db:7e:a6:ba:58:8b:e8:d9:3d:00:eb:ca:
49:a2:4e:7b:ca:1d:2e:b8:29:ce:6d:34:5d:32:4f:b8:72:a1:
cc:18:a4:69:be:bc:83:be:57:62:95:87:fe:a9:f5:b8:f3:fc:
89:44:c6:3c:67:14:d5:b5:1d:66:74:dc:2e:f9:09:83:e9:7f:
73:98:0f:9c:8c:8c:6c:b4:8f:84:6a:7e:2c:e9:cc:ae:43:a5:
03:88:13:4c:a5:d3:49:e7:2f:3b:50:22:54:c1:9a:be:d3:0f:
e2:d9:be:df:c0:50:64:56:4a:50:0c:48:43:5d:f8:72:41:43:
d0:1d:32:20:a2:90:60:a2:1b:81:4e:07:8e:93:b5:33:08:24:
03:ea:d6:d9:63:fa:19:a9:96:07:1a:4f:84:83:04:3d:94:b9:
0f:ee:b6:c1:d1:99:66:5b:e7:9e:08:cc:a5:da:2c:a2:f9:b7:
60:d9:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:51 2025 by rpki-client