Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/1ohlvL5PZw_3hcwGQ_J581-Kfkw.roa
File: 1ohlvL5PZw_3hcwGQ_J581-Kfkw.roa (raw, json)
Hash identifier: okrFXmsJ6KTYYIjnZcAOYjjx16+oQFPNv0K3PQHdWEg=
Subject key identifier: D6:88:65:BC:BE:4F:67:0F:F7:85:CC:06:43:F2:79:F3:5F:8A:7E:4C
Certificate issuer: /CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Certificate serial: 0194258F6122471FA4FB94C5439CC7D27AA5
Authority key identifier: 48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/1ohlvL5PZw_3hcwGQ_J581-Kfkw.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216344
IP address blocks: 2a11:8a80:9000::/36 maxlen: 36
2a11:8a85:400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:61:22:47:1f:a4:fb:94:c5:43:9c:c7:d2:7a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48abf29fdef8570502f4b51be5ffc05c4d9b3465
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d68865bcbe4f670ff785cc0643f279f35f8a7e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:c1:70:61:2c:b5:74:6c:05:b9:ec:18:36:
ec:6e:7e:0a:95:0b:e9:55:d7:21:d8:7e:d5:64:95:
ef:11:90:03:51:28:98:0a:4e:59:cf:5f:16:a0:b9:
86:bc:f3:08:5b:92:1c:df:a9:7c:f4:01:39:8e:50:
8b:fc:a1:fb:15:b8:ea:48:de:08:75:b3:73:0a:da:
43:78:f9:e0:52:7a:18:f3:36:1d:90:6f:e5:2f:b6:
05:61:fd:d7:0d:f7:9e:39:c4:7f:e2:bc:f4:bc:85:
d2:a4:fc:3b:46:64:f7:0a:41:e6:bd:c8:e2:53:bc:
3d:d6:5b:f7:48:8f:0c:cc:b1:9c:cb:5c:64:0d:c0:
17:a7:8a:58:c1:13:97:fa:49:4e:ad:03:10:58:0e:
af:96:32:46:ff:7e:ab:7e:e9:e9:a4:c5:17:cc:c5:
a7:3f:ce:2e:32:f1:c4:1e:78:a7:9d:89:ef:75:99:
5e:3b:03:b1:b8:5f:22:7a:b3:0d:03:53:57:03:e0:
d3:fd:0b:d3:c4:62:cc:0d:83:53:ea:c6:7d:07:7e:
c5:ea:3d:be:10:61:35:11:68:96:1c:89:dc:a2:04:
e2:0b:8f:25:de:be:a6:c7:2a:85:b5:25:a6:ef:6d:
16:2e:9e:3e:8d:a6:f9:31:75:80:c4:64:55:1b:18:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:65:BC:BE:4F:67:0F:F7:85:CC:06:43:F2:79:F3:5F:8A:7E:4C
X509v3 Authority Key Identifier:
keyid:48:AB:F2:9F:DE:F8:57:05:02:F4:B5:1B:E5:FF:C0:5C:4D:9B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKvyn974VwUC9LUb5f_AXE2bNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/1ohlvL5PZw_3hcwGQ_J581-Kfkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af41cb-ff91-459c-9a64-aba113f3e3ae/1/SKvyn974VwUC9LUb5f_AXE2bNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8a80:9000::/36
2a11:8a85:400::/38
Signature Algorithm: sha256WithRSAEncryption
60:f5:ba:4a:f0:91:35:a2:bd:c7:b5:44:31:fc:da:42:aa:ba:
a5:f4:9d:6f:4b:fb:eb:ed:ef:ac:5e:70:bd:25:f9:67:19:e8:
13:88:ef:05:b0:3e:8a:cc:09:4c:45:34:96:df:a5:18:36:af:
11:78:0a:5d:5b:63:f2:61:1a:0a:eb:95:9a:19:74:90:8e:e0:
cc:45:aa:1a:1b:57:0c:41:7d:bd:9b:dd:8e:33:26:e7:98:ad:
5a:1f:ff:e7:f5:a6:84:fb:94:23:03:5a:d5:94:af:91:29:15:
33:d9:87:eb:b4:00:d9:9a:8e:cd:90:f6:21:63:40:4f:a3:67:
2d:90:2a:e4:5e:40:fb:cb:01:84:ec:00:96:cf:58:a2:3e:b5:
5a:c5:21:96:80:61:d8:c0:67:e7:70:d7:bc:ba:e9:0b:19:d7:
13:dd:d0:8c:da:b9:78:cf:9e:a0:06:f4:e9:4a:3b:4b:d7:ae:
c6:39:f8:45:a1:a1:ef:f9:a1:8b:2f:17:c6:c8:76:74:43:39:
8b:f5:82:3f:13:78:aa:95:80:39:40:0c:19:04:62:96:85:7f:
3b:bb:65:01:38:96:93:57:f3:af:4c:29:e9:3a:03:27:81:7c:
4a:c1:6e:12:e8:17:35:af:4e:80:4c:88:2d:21:d1:86:89:fa:
8a:c4:d9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:21:28 2025 by rpki-client