Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/q1kthjb5xsed_gneexxhxsi5Vgk.roa
File: q1kthjb5xsed_gneexxhxsi5Vgk.roa (raw, json)
Hash identifier: 3Sq3nnRgbkTvsAgxQiWp1mNBD87MEK91VD0gnFoisxU=
Subject key identifier: AB:59:2D:86:36:F9:C6:C7:9D:FE:09:DE:7B:1C:61:C6:C8:B9:56:09
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFAAD0CC768C9EFD0D9903819BA7C81
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/q1kthjb5xsed_gneexxhxsi5Vgk.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214001
IP address blocks: 2a0c:b641:d40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ad:0c:c7:68:c9:ef:d0:d9:90:38:19:ba:7c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab592d8636f9c6c79dfe09de7b1c61c6c8b95609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fe:aa:b2:f0:e6:a5:71:4f:9b:ee:78:9c:76:
6d:ed:f1:3d:56:00:cb:e2:f8:6e:3c:76:47:48:95:
b3:a7:4f:bd:47:25:ef:5b:50:af:92:69:d7:9a:88:
76:53:c9:bc:39:5d:e7:a5:20:6e:20:02:a0:c2:a8:
21:3e:1e:5e:4e:36:10:af:cc:de:a7:a7:80:52:f9:
f5:0b:ca:45:3e:0c:68:9d:f0:8f:30:a4:21:92:66:
30:12:66:aa:9c:92:41:64:a1:37:c4:14:f3:6f:5a:
75:91:1f:81:c0:7b:b4:d9:f1:7a:24:b3:af:d0:e6:
53:1c:ac:8f:94:13:12:ad:17:88:b5:46:ba:c5:bf:
b5:a6:df:83:6d:0e:97:1e:b3:5a:b4:b9:6a:fa:55:
4e:58:63:e5:47:f9:2c:2b:b7:82:90:56:b0:9e:50:
15:fb:e2:87:aa:70:e5:2c:16:fa:e5:a8:17:5a:f6:
58:24:7c:1e:44:45:eb:0b:cb:68:86:29:44:1d:1a:
61:19:e1:01:16:ee:8c:77:a1:b8:c6:ed:bb:6b:da:
ab:93:62:21:36:ea:22:72:09:66:e4:fb:6a:6a:a4:
3f:80:db:90:85:23:ef:ae:cf:46:a2:2b:36:67:b7:
f2:24:dc:c9:5c:b6:37:e4:cb:03:ae:9c:05:b1:5b:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:2D:86:36:F9:C6:C7:9D:FE:09:DE:7B:1C:61:C6:C8:B9:56:09
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/q1kthjb5xsed_gneexxhxsi5Vgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:d40::/44
Signature Algorithm: sha256WithRSAEncryption
1a:0d:be:71:e3:bf:79:34:5e:6e:dd:d6:7e:44:74:0d:4d:e0:
9b:67:5f:bb:be:fe:04:52:c4:ae:af:b9:f7:27:75:4c:07:b0:
92:b3:a5:65:37:f4:90:98:e2:71:1a:ee:0b:0f:b5:6d:13:93:
da:45:bf:4f:f3:08:2d:a2:f7:56:99:6e:f0:5c:fb:32:48:05:
33:e8:97:92:9e:c0:b6:40:13:22:61:42:46:51:29:2c:ed:58:
70:20:19:42:16:05:64:04:7b:3c:b1:e7:b8:39:e2:8e:0c:2c:
c2:a5:10:43:f0:d3:cd:ee:d2:4f:4a:11:aa:87:6e:4a:8f:15:
6c:aa:74:1f:17:19:30:19:b9:64:5e:bb:c0:b4:78:ec:e4:3e:
1c:e6:1e:c8:cb:5d:31:ba:96:89:dc:f5:8b:01:aa:9d:be:48:
4f:5c:7d:e5:9b:73:08:e3:0f:d0:c4:26:ea:89:9d:11:39:12:
76:a5:51:96:48:9b:f5:08:9d:ce:ba:60:dd:06:7e:0d:94:ee:
d3:5e:cc:40:99:b1:c7:06:52:9c:77:44:1a:e9:31:38:cf:05:
6e:e1:8d:8b:5d:5b:a2:90:30:aa:88:e5:0b:0c:43:7e:82:72:
22:87:bf:3d:d4:4b:07:39:18:ad:8b:eb:8a:dc:72:92:f2:74:
8a:52:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:42:00 2025 by rpki-client