Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/1bGM56MEcLFHsgzDo3baYK4aCMQ.roa
File: 1bGM56MEcLFHsgzDo3baYK4aCMQ.roa (raw, json)
Hash identifier: oVXVqg3b1Z1hACKH4hIRJE0IPfCRY+hMDc2k4VQe4XU=
Subject key identifier: D5:B1:8C:E7:A3:04:70:B1:47:B2:0C:C3:A3:76:DA:60:AE:1A:08:C4
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01942144091A83EA1621DA8C637EEB090393
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/1bGM56MEcLFHsgzDo3baYK4aCMQ.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35744
IP address blocks: 2a02:40c0:5353::/48 maxlen: 48
2a03:3060:5353::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:09:1a:83:ea:16:21:da:8c:63:7e:eb:09:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5b18ce7a30470b147b20cc3a376da60ae1a08c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:42:3d:d2:a7:6f:32:9e:42:a8:73:ef:26:
9d:74:ea:e8:17:c3:0b:58:92:c4:6d:87:07:5f:e8:
36:31:5d:02:bc:1e:5d:ee:cc:b0:d1:9d:4e:6b:b3:
76:08:66:c0:1a:9f:59:bd:3b:08:5a:e2:01:f6:30:
73:c7:cf:1a:c1:e1:28:75:79:03:a5:35:49:0c:0c:
bc:97:93:7f:d1:89:34:49:1d:1b:6e:dc:a7:84:cf:
01:55:f8:de:f3:1f:d0:97:b4:55:0d:49:cb:5b:f8:
65:f9:b0:29:99:9a:b1:70:6f:9e:c7:fd:c9:98:c9:
73:4f:7f:69:50:8c:e4:b9:97:e8:86:3f:a6:14:36:
d3:42:7e:a7:a6:61:8d:24:eb:35:5e:c5:28:d8:aa:
82:c2:6f:c3:8a:9f:1b:6a:94:4d:e7:d7:fc:3e:85:
5e:f7:a5:d7:f0:af:c7:35:7f:7d:c5:52:b2:9e:e4:
02:a1:2c:40:20:f0:0b:3d:ff:08:82:10:22:8e:00:
44:c4:bd:b6:59:15:71:cd:a4:62:af:02:9b:ce:75:
b1:90:30:46:3f:90:7a:9c:9b:9b:e7:ce:19:23:3c:
a2:7c:ee:03:b1:0a:b1:6d:3b:b4:ff:f1:e7:ec:62:
2b:63:36:68:9a:9b:fe:30:26:c5:e0:2d:e3:8f:0f:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:8C:E7:A3:04:70:B1:47:B2:0C:C3:A3:76:DA:60:AE:1A:08:C4
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/1bGM56MEcLFHsgzDo3baYK4aCMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:40c0:5353::/48
2a03:3060:5353::/48
Signature Algorithm: sha256WithRSAEncryption
52:4c:51:2d:1f:8e:44:28:c8:22:5d:54:b1:80:37:22:97:41:
d7:29:43:18:0e:51:1f:65:dc:ff:fc:49:95:a6:18:d1:ac:07:
8f:07:49:06:0b:75:ef:ba:d7:94:5c:bf:07:ba:61:23:8b:14:
e5:65:e7:91:83:19:b0:84:68:77:e3:00:c6:c4:b2:49:f7:b3:
be:03:b0:80:e3:98:aa:f8:e0:37:53:47:3a:3b:2a:41:89:d0:
ac:74:fa:b8:0b:d4:71:56:47:62:64:d8:16:8f:56:4d:36:87:
52:1d:10:57:1e:ac:70:89:0e:4d:e4:71:b1:01:39:f5:5e:3a:
81:15:60:75:c2:83:ab:92:a6:e1:40:29:d2:b9:15:92:e3:f0:
6a:b9:8d:85:35:71:0f:c3:39:e7:8e:10:69:92:2c:c4:b0:78:
33:79:cb:b6:d5:43:25:5e:d8:3e:dd:34:65:62:6b:79:4b:14:
3c:0b:1b:07:18:0e:43:3a:49:70:70:42:fa:33:84:06:db:1f:
87:3f:be:b2:3f:c4:a3:5e:3a:cf:d7:da:99:a4:1a:25:1f:8a:
a3:37:03:e9:56:30:cf:53:d6:21:e3:fd:d4:1e:eb:a3:96:e9:
ff:93:e8:0d:a6:2d:58:64:b4:1c:fd:ff:09:4b:50:49:eb:59:
58:8d:91:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:03:54 2025 by rpki-client