Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hCMf5XKphmGITY59esXnjtvjX6I.roa
File: hCMf5XKphmGITY59esXnjtvjX6I.roa (raw, json)
Hash identifier: bcNtid+ReG3Ap7TSuXW2uoPQi7fd1uZciYEhUR+3XbQ=
Subject key identifier: 84:23:1F:E5:72:A9:86:61:88:4D:8E:7D:7A:C5:E7:8E:DB:E3:5F:A2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA86C3DC9BB4A213C872352C56DE8F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hCMf5XKphmGITY59esXnjtvjX6I.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204655
IP address blocks: 2a0c:b641:3c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:86:c3:dc:9b:b4:a2:13:c8:72:35:2c:56:de:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84231fe572a98661884d8e7d7ac5e78edbe35fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:df:3f:7a:67:a9:ba:4b:74:4f:b7:59:85:
43:d7:b2:06:00:21:e3:58:69:ea:d0:38:18:2f:6e:
f7:d6:7a:19:26:4d:78:59:08:f9:a5:c8:73:20:95:
8e:ad:ca:64:14:8a:4d:5d:49:57:fc:09:4f:62:58:
2d:05:40:33:83:e6:c7:ba:d1:07:e7:63:88:29:b9:
21:f1:70:39:c1:73:8c:4f:fa:d1:4c:de:0d:d2:e5:
9f:c3:d3:21:85:3c:93:42:0b:4d:e1:34:f8:85:7f:
fd:8e:74:61:f8:0d:57:54:0b:9f:46:ca:fb:6d:3d:
85:b9:27:1b:2b:e4:0f:85:67:c9:57:a8:48:0f:58:
d2:fc:c6:bf:83:e3:8e:d0:6d:c4:9b:a2:02:63:29:
c1:5e:fd:26:ca:c1:69:d9:17:41:b0:55:3c:4b:4f:
9e:db:0b:d0:25:76:b5:91:21:a6:a4:6a:f1:4c:b7:
e5:52:2c:57:d5:40:8c:e6:79:ca:0c:b6:17:17:c2:
30:c3:7d:1b:9c:60:54:76:8f:09:3f:6f:42:5b:c1:
e5:72:03:e3:9c:00:9c:1b:b7:4e:f6:e9:01:57:63:
1f:df:a9:b6:d8:ca:6d:15:56:b6:7c:8e:c4:d4:0b:
e0:db:31:23:2f:10:2c:60:ab:32:2a:94:f1:61:b8:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:23:1F:E5:72:A9:86:61:88:4D:8E:7D:7A:C5:E7:8E:DB:E3:5F:A2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/hCMf5XKphmGITY59esXnjtvjX6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:3c0::/44
Signature Algorithm: sha256WithRSAEncryption
46:da:99:cf:94:2b:17:21:3c:6f:b0:6b:13:43:2c:53:8c:d4:
89:94:9f:4a:c0:b9:37:19:1e:89:76:b2:48:ad:11:40:1d:3e:
6a:01:6d:45:7c:4e:09:5b:d9:72:aa:37:90:85:5e:53:2e:2a:
f6:10:36:83:67:0f:0a:61:86:2e:b3:79:bd:8c:54:81:c1:03:
ac:16:81:b9:66:d7:2b:52:fe:59:8d:db:1a:6c:79:d3:6f:48:
68:ad:77:3b:00:a4:3b:d8:3c:f3:ce:3f:fd:90:70:65:20:11:
4e:b0:2a:d3:b9:3b:8b:b7:9a:62:1a:c8:46:e3:07:29:ce:e9:
ae:30:e1:e7:72:ca:3e:a0:41:86:9c:28:37:a2:86:62:29:ee:
cf:f8:f3:d2:7b:ba:00:91:9a:1e:34:f7:21:63:78:d9:12:0e:
88:9e:81:b6:fa:87:7d:f6:63:0c:6b:3b:c7:23:a9:5d:9e:68:
5c:82:98:49:3e:b8:55:51:08:34:2d:0a:fb:0a:4e:31:fa:85:
4a:7f:e0:86:53:10:2d:ad:e6:a3:33:e2:e3:a5:a5:06:d5:c8:
8e:65:28:d1:6d:b3:ae:bc:bc:28:79:56:d1:8e:ec:8d:7f:e8:
2d:a2:6f:2f:80:ad:ec:28:94:22:9b:b7:e3:86:6e:a3:b7:13:
61:86:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:39:44 2025 by rpki-client