Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/aS2z1lZE9xnUUTE6JXQy1aNfHG8.roa
File: aS2z1lZE9xnUUTE6JXQy1aNfHG8.roa (raw, json)
Hash identifier: G/7B1VXAASY7QAsDWedOiKdkvLm/fHkdhD3zP6wIl7A=
Subject key identifier: 69:2D:B3:D6:56:44:F7:19:D4:51:31:3A:25:74:32:D5:A3:5F:1C:6F
Certificate issuer: /CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
Certificate serial: 01942748812A78069DA55C75EB436F1C95E6
Authority key identifier: 54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/aS2z1lZE9xnUUTE6JXQy1aNfHG8.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62430
IP address blocks: 2001:67c:9ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:81:2a:78:06:9d:a5:5c:75:eb:43:6f:1c:95:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=692db3d65644f719d451313a257432d5a35f1c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:b3:2f:29:2c:94:c9:c7:97:4b:02:ae:12:
31:f6:8c:b4:19:4d:3a:05:0d:12:cd:2c:68:f2:25:
86:68:05:5f:38:29:fc:7e:76:7b:1c:ca:a8:94:9a:
92:17:3f:2d:1c:75:ca:4d:6e:13:a5:ee:19:25:13:
ec:79:a1:65:e9:cd:c7:1b:e6:83:fd:01:c5:ff:31:
2b:a3:cf:40:9e:26:cf:0e:2c:43:cd:f8:97:7a:43:
6d:69:64:c0:10:2a:7a:c9:b4:7f:56:6d:12:5b:f8:
35:1e:1f:e1:6a:56:bc:14:8e:4b:ab:fb:26:e4:b8:
0f:dc:69:a5:54:df:94:21:f0:43:f8:dd:51:f7:af:
e1:23:48:cc:4d:1d:db:1e:6b:c4:75:c1:30:f8:11:
8c:1b:59:01:47:10:06:c0:0e:2c:d4:35:1b:79:7c:
ae:4d:d8:4b:c1:9b:ee:92:6a:f7:17:47:0e:cb:04:
16:f6:54:01:21:d9:48:03:0a:f6:ef:2d:52:4d:f8:
c6:8f:36:79:88:52:dc:37:95:4e:d7:00:f9:6c:94:
5c:38:01:1a:34:b7:22:9c:db:0f:81:22:93:e0:d0:
ae:45:35:13:6c:7b:9e:d5:e1:97:71:8c:2d:4a:b1:
fa:68:6c:fa:a9:c2:0b:6a:f4:8e:3a:9b:18:71:27:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2D:B3:D6:56:44:F7:19:D4:51:31:3A:25:74:32:D5:A3:5F:1C:6F
X509v3 Authority Key Identifier:
keyid:54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/aS2z1lZE9xnUUTE6JXQy1aNfHG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9ec::/48
Signature Algorithm: sha256WithRSAEncryption
39:01:83:97:f2:7c:90:cc:3c:0f:29:4e:87:08:9a:e9:fa:41:
dc:78:73:b3:4f:cb:27:41:7f:96:29:30:bc:8b:da:98:02:5e:
f8:f3:c4:1a:fd:06:7f:8d:18:05:aa:c9:27:95:ce:95:8d:e0:
97:1f:f2:94:b4:7a:c7:3b:3a:7e:4f:90:c1:48:45:a4:d9:67:
d2:1a:cd:9c:2e:14:bf:ab:37:3f:4c:25:2e:ed:f8:45:97:7c:
9b:28:8c:95:3f:7a:6b:be:8e:4e:6a:e3:e5:50:64:c1:31:b0:
11:cc:6d:70:cd:f8:7f:e4:a9:c2:ee:de:59:1b:a7:12:5d:7e:
2b:07:58:e1:a5:6b:26:f7:d5:a5:31:e6:fc:57:99:cf:26:67:
e4:ea:b9:39:4c:24:7c:a3:30:94:ac:a5:6b:77:d7:e8:dd:5d:
38:19:eb:bd:65:9c:6e:af:76:c7:b6:8f:7d:08:8c:e4:40:e4:
d7:1b:c0:34:94:15:5a:c0:31:e4:ea:be:7d:e4:14:40:de:33:
8a:2e:cc:83:cf:fb:c0:fc:98:25:ab:6a:0b:88:04:4a:be:91:
38:15:b3:1f:02:3b:5b:ca:55:f6:6d:af:39:7b:a7:37:6b:82:
4a:b0:6f:60:3e:5b:92:10:00:1c:e9:f9:a0:2b:a9:3a:68:ae:
40:e9:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:33 2025 by rpki-client