Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa
File: I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa (raw, json)
Hash identifier: H4ThFxj2wgOGFGxz87hZLwfWFdZQqMGoVJJaZVtoaOE=
Subject key identifier: 23:99:71:B9:78:3C:29:F6:F1:EF:35:D2:88:69:9A:F3:47:DD:CC:9D
Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial: 01944BCAA47335AC857316993212D8ED522B
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa
Signing time: Thu 09 Jan 2025 15:59:19 +0000
ROA not before: Thu 09 Jan 2025 15:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215759
IP address blocks: 2a14:6680::/48 maxlen: 48
2a14:6680:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:ca:a4:73:35:ac:85:73:16:99:32:12:d8:ed:52:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
Validity
Not Before: Jan 9 15:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=239971b9783c29f6f1ef35d288699af347ddcc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:dc:b7:19:44:a8:7d:46:57:9f:4b:36:b5:
d8:d6:bb:2c:a5:da:5b:db:56:18:cb:c0:1f:f5:6e:
97:6d:e2:13:41:d7:0f:d3:c5:97:ed:2b:a7:f3:34:
a1:b4:68:23:19:e2:33:3b:a5:32:ba:a4:ba:7f:55:
3f:53:40:f9:db:92:c0:37:75:a5:24:56:e5:b5:c8:
4c:6d:3f:f9:eb:c1:05:5c:a7:17:75:c4:e3:c0:5e:
da:e3:e2:de:c7:25:f4:5e:a9:d7:2a:8b:1a:1d:ea:
a9:80:59:c4:32:ee:93:e3:62:c4:21:3c:a2:b6:8e:
8c:47:ab:4f:35:66:24:65:04:85:01:91:a9:0f:f6:
5f:0a:8e:49:34:c8:d0:9a:e8:a2:14:ca:b2:a3:5c:
26:1d:c5:34:de:be:61:c1:18:10:93:6e:ff:3b:11:
cd:83:e7:be:4d:0a:89:10:fe:32:38:3d:13:13:ec:
df:ae:80:1b:8d:76:db:10:14:5c:75:9a:5b:3e:31:
3c:38:fc:d3:cd:4f:77:0f:a3:8a:bc:e6:8e:87:f8:
be:41:48:4c:e1:62:c3:98:52:f3:e8:ec:75:40:5c:
c1:35:c1:25:f3:82:f3:0b:05:94:54:ba:71:eb:37:
97:b4:c3:6b:6b:95:d6:39:cd:03:55:e6:21:31:df:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:99:71:B9:78:3C:29:F6:F1:EF:35:D2:88:69:9A:F3:47:DD:CC:9D
X509v3 Authority Key Identifier:
keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6680::/48
2a14:6680:12::/48
Signature Algorithm: sha256WithRSAEncryption
32:26:ee:4e:42:bc:4a:de:ab:e9:da:c9:17:89:e7:cc:48:3d:
c3:33:af:9a:3b:de:b6:d7:6c:9a:6f:64:bc:b6:b9:c3:83:a2:
0b:ad:56:37:cb:41:2d:3b:c4:a2:25:f5:9e:3b:89:d6:99:ef:
f6:0a:40:70:ba:d7:e0:bc:f2:4d:ef:c7:3c:ea:ed:af:55:52:
0d:fa:b1:6d:23:42:7e:5f:45:cc:38:e7:d5:98:0f:a2:ae:b5:
da:f8:cc:64:5a:d4:32:0a:51:a5:fc:66:bd:fc:62:05:d4:fe:
fc:d4:0c:f6:87:c8:70:98:37:76:6e:a3:e9:3a:08:2a:69:4b:
45:f9:69:c9:4a:44:d9:44:f5:64:69:02:f1:56:a1:15:17:fd:
92:83:48:43:e7:fc:8e:28:9e:bb:13:cf:7a:b4:b2:d1:f8:6d:
28:92:aa:bb:00:6b:d1:21:47:08:74:4b:eb:de:cd:2d:76:7b:
52:1b:fa:f6:b7:47:ff:93:ba:03:9e:8b:9b:67:11:5d:91:b8:
e3:b8:f7:b9:06:94:c6:71:20:5b:ef:34:8b:4a:f9:9c:e8:26:
52:63:85:1f:50:35:6e:e2:1e:91:7e:af:4a:c5:d7:03:35:df:
23:49:19:82:7d:df:87:00:4d:15:0b:00:74:aa:99:0a:a8:d6:
bb:5e:2d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:33 2025 by rpki-client