Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/lC2KQAOisVOwxCnTUOf6nl08y8o.roa
File: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (raw, json)
Hash identifier: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=
Subject key identifier: 94:2D:8A:40:03:A2:B1:53:B0:C4:29:D3:50:E7:FA:9E:5D:3C:CB:CA
Certificate issuer: /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial: 01942445932A277AD38EF5AEDD3CFB631FF2
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/lC2KQAOisVOwxCnTUOf6nl08y8o.roa
Signing time: Wed 01 Jan 2025 23:48:46 +0000
ROA not before: Wed 01 Jan 2025 23:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 2001:67c:924::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:93:2a:27:7a:d3:8e:f5:ae:dd:3c:fb:63:1f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Validity
Not Before: Jan 1 23:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=942d8a4003a2b153b0c429d350e7fa9e5d3ccbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:da:31:a1:97:3b:38:0c:66:27:a0:82:d8:0a:
71:d1:e8:66:f1:65:58:5b:3c:38:cd:fd:3e:cb:98:
c1:87:45:c0:a9:33:da:03:61:31:90:cd:d4:1b:e0:
cb:0d:b6:bd:86:36:46:8a:36:bd:c8:67:e6:72:53:
8d:36:69:d7:3c:d0:90:c6:78:c5:77:61:44:16:79:
aa:bd:88:2b:ba:43:30:09:4d:61:5a:85:ec:c7:e1:
bd:55:6b:74:ff:47:07:42:18:32:4c:3d:b6:8e:9e:
2d:80:28:f4:e7:ad:2a:4f:cf:8c:9d:5e:39:0d:a5:
0f:ce:84:53:55:05:bf:a3:57:01:2a:0a:57:52:9f:
4b:ea:bd:f6:7d:a0:56:9f:a9:96:68:63:83:d0:86:
30:c8:5c:ee:37:a2:45:0e:bf:a0:fc:c9:1e:3f:b1:
0f:09:71:dd:36:25:d2:58:b1:f0:ff:d3:00:c9:4f:
d3:63:13:05:3e:83:05:c6:7d:e5:64:71:47:05:3b:
ab:c7:41:9e:12:13:a3:b1:82:42:96:0e:2c:9c:ac:
2e:0a:ae:c5:25:2a:92:65:d2:2a:a4:f6:21:2c:97:
95:ce:24:fd:3e:c9:6e:ef:ea:4d:94:d2:e8:41:1d:
49:8a:dc:1c:06:71:75:55:a9:15:7c:21:64:66:90:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:8A:40:03:A2:B1:53:B0:C4:29:D3:50:E7:FA:9E:5D:3C:CB:CA
X509v3 Authority Key Identifier:
keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/lC2KQAOisVOwxCnTUOf6nl08y8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:924::/48
Signature Algorithm: sha256WithRSAEncryption
55:ac:94:0d:fe:12:8b:22:d6:17:c1:1c:e7:34:8a:96:3c:ae:
f3:a8:81:67:a4:7d:b5:2e:3f:05:18:9e:8e:c4:3a:8e:ee:58:
85:3d:5b:fb:ed:1e:5e:7a:e5:88:aa:9e:8e:7f:f3:98:98:21:
88:0f:c4:7e:b9:48:22:3a:27:c7:fd:8e:f4:73:db:ca:a9:15:
1a:fe:7a:3e:85:7d:24:b7:03:0c:30:97:e2:6b:63:7d:7a:ef:
26:ec:02:d7:c1:80:c9:67:eb:a8:b5:e1:48:4b:c4:15:bc:c5:
44:5f:17:1a:5b:61:12:36:a7:c7:54:f9:9b:9b:e4:fb:30:51:
23:74:d2:ab:d7:d4:b7:76:2e:d0:a6:19:0d:12:31:99:5e:b0:
fe:4c:e0:82:0e:0d:1c:31:ef:c6:57:ef:d0:39:06:d9:f2:00:
c9:b9:06:f0:9f:be:49:24:ae:91:96:26:ef:fd:05:d0:64:0c:
93:5b:38:2a:56:ad:0d:74:fe:0d:f0:fb:77:9f:19:27:c7:79:
99:1e:35:c6:bb:81:1e:89:71:5a:3e:f5:68:0b:5d:a4:a2:93:
71:72:ba:ba:79:ee:25:c9:fd:58:9f:b4:10:a8:09:ae:c0:a1:
ce:97:fd:3a:94:88:d2:16:b4:68:41:e2:49:0b:24:87:3e:82:
30:1f:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:30 2025 by rpki-client