Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/sbxNn528r3_zzXNbv7r2uOHDqfE.roa
File: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (raw, json)
Hash identifier: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=
Subject key identifier: B1:BC:4D:9F:9D:BC:AF:7F:F3:CD:73:5B:BF:BA:F6:B8:E1:C3:A9:F1
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA63B6C4E4ECA569D97DDAE223F8BC
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/sbxNn528r3_zzXNbv7r2uOHDqfE.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 2a0e:d780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:63:b6:c4:e4:ec:a5:69:d9:7d:da:e2:23:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1bc4d9f9dbcaf7ff3cd735bbfbaf6b8e1c3a9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:28:12:62:51:ba:66:b3:78:3e:e9:68:e0:
ed:e1:b8:24:61:24:8f:a6:3c:ad:6d:fd:96:99:c6:
ea:d4:de:46:7e:eb:1e:b0:fa:48:5c:30:1d:c3:b1:
25:ae:ac:f1:5b:7f:ae:9e:eb:1d:25:b6:ee:26:e2:
95:ec:4c:d3:8d:05:a5:2b:a9:a5:a5:5e:77:e3:20:
ea:16:91:72:06:7d:8a:9e:d6:c9:69:f3:66:55:79:
8f:df:fe:13:74:b1:5c:b8:e8:fe:ed:d0:8f:6a:fb:
a9:ae:c5:1d:f8:61:e2:5a:46:c3:9c:17:76:af:b8:
c9:37:9b:96:1b:98:d1:88:4d:c8:98:06:5b:a1:3f:
05:9d:a8:1b:10:8d:18:6b:6f:2a:f2:cb:ea:1a:ed:
66:53:87:e2:e1:e9:a7:a9:69:44:38:53:a7:97:95:
37:5f:18:a1:01:10:9d:78:0d:d5:53:6c:b4:39:fd:
71:44:e3:03:36:fd:3c:1e:ca:c9:1e:1b:3e:09:e0:
3c:1f:46:e9:eb:43:7b:84:40:a3:74:1c:7f:27:3e:
94:32:d4:9d:94:ee:cf:e7:f8:3b:7a:b7:24:ca:7a:
2b:07:cb:de:4b:f2:20:f0:25:51:7c:4d:8d:4b:7d:
08:4d:fd:30:f3:7f:23:35:79:46:f1:c3:e2:84:af:
16:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BC:4D:9F:9D:BC:AF:7F:F3:CD:73:5B:BF:BA:F6:B8:E1:C3:A9:F1
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/sbxNn528r3_zzXNbv7r2uOHDqfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d780::/32
Signature Algorithm: sha256WithRSAEncryption
99:c2:51:c1:3e:7a:9a:bf:16:b9:47:16:bd:e9:ad:64:5b:d8:
12:44:4d:6e:ab:50:3f:9c:18:74:ef:63:7d:59:85:76:b7:b2:
cc:ab:8d:0a:df:9d:b0:ca:13:a4:68:e4:40:87:1c:d2:5a:c4:
66:a7:ad:d0:c4:3c:78:18:f2:d3:f1:61:fc:7f:2e:a4:29:63:
c3:6b:0f:ff:b5:9c:0a:62:04:f1:69:25:1e:a3:77:c7:2f:89:
9f:b7:2a:47:16:fe:20:8b:d6:6b:48:b6:61:17:f9:de:b2:b8:
7d:26:2d:d9:0a:ad:76:e3:9f:35:c6:4a:14:e4:c1:01:be:eb:
f3:8c:30:06:d8:38:6c:ec:63:12:3a:78:01:8a:1e:a2:5b:12:
29:a5:73:2d:aa:7f:53:ff:e2:66:44:15:d9:6f:87:df:38:b5:
a5:a6:4f:02:64:bb:5f:85:08:f9:fa:c2:1d:4a:a1:51:10:ad:
2d:d4:5d:c0:20:2a:12:76:13:d0:e7:82:10:94:1e:f5:e7:13:
74:27:b0:41:34:ae:20:d8:bf:99:ce:e6:e1:a3:82:ff:d8:4b:
a4:cb:dc:2d:ff:7a:dc:40:83:ad:66:b6:d0:3a:39:11:44:e9:
d2:47:87:12:ad:5a:d9:e7:51:37:29:d9:5a:c6:99:b6:ab:2f:
05:81:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:20 2025 by rpki-client