Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/IAnrwkjZREz9e2befvDjJt5K894.roa
File: IAnrwkjZREz9e2befvDjJt5K894.roa (raw, json)
Hash identifier: QbZkDRkpqioEjJh7FseQ0HMDmnK8FziG2mObmGFYiVk=
Subject key identifier: 20:09:EB:C2:48:D9:44:4C:FD:7B:66:DE:7E:F0:E3:26:DE:4A:F3:DE
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 0194258E4E483FE36771CF37FB819A2EB80B
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/IAnrwkjZREz9e2befvDjJt5K894.roa
Signing time: Thu 02 Jan 2025 05:47:50 +0000
ROA not before: Thu 02 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59880
IP address blocks: 2a0f:fdc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:4e:48:3f:e3:67:71:cf:37:fb:81:9a:2e:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Jan 2 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2009ebc248d9444cfd7b66de7ef0e326de4af3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7c:90:3f:32:a9:07:b3:fb:75:0a:80:a2:c5:
75:0b:0a:c1:26:5f:6f:73:85:c6:2b:f5:3b:0d:7b:
6e:42:75:ed:af:d6:2a:cf:91:1f:2d:2d:22:bc:24:
96:69:a1:a0:fb:6a:51:16:31:2d:cf:ce:9e:6e:af:
84:48:fb:9b:e1:3f:74:fd:50:38:29:e6:60:85:d8:
04:35:85:97:58:4a:eb:58:ad:d9:1f:2f:a6:21:9c:
80:5c:99:bc:95:45:e2:2a:23:ea:29:40:54:63:ed:
2f:1a:bf:b8:25:ed:62:82:9d:61:98:39:73:a8:65:
62:81:83:0a:c5:40:fc:1f:6a:05:9a:f8:b7:ac:f3:
28:5f:aa:fa:64:c9:a6:70:51:54:a6:f0:c4:4c:96:
aa:21:96:1e:c5:03:3a:97:74:ea:75:9f:c1:f8:81:
dc:13:75:59:48:db:5b:7c:47:7c:4e:d8:45:8e:4b:
68:e3:71:4f:33:8d:33:6d:40:73:3a:06:59:f5:16:
28:31:03:15:1b:ae:a5:79:30:2b:a5:b6:31:37:a0:
b5:2d:2b:6f:6c:8e:5c:da:f9:7c:3b:ed:04:eb:7a:
a8:35:26:ff:ed:a8:c9:8e:d6:e1:7b:44:d9:41:dd:
f4:4e:29:9c:b4:14:b7:1e:11:ed:f3:5e:6b:fe:d8:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:09:EB:C2:48:D9:44:4C:FD:7B:66:DE:7E:F0:E3:26:DE:4A:F3:DE
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/IAnrwkjZREz9e2befvDjJt5K894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
83:a4:1e:25:2d:dd:26:c4:1f:b1:92:d1:14:98:a4:01:37:e8:
63:b8:e9:7f:ae:9e:c0:c5:8a:7e:c1:9d:1a:47:00:33:9d:75:
34:31:1a:13:fa:f7:ae:b9:e2:8a:f3:b9:9c:74:6b:a4:c9:ad:
bf:91:58:e6:a9:1d:73:7c:de:c9:f8:26:d2:09:0e:80:83:5c:
60:95:e8:f2:83:9e:44:4a:fd:bf:1b:59:95:b5:e3:86:4e:07:
42:96:7f:1d:6e:33:92:ff:4d:d3:48:94:9e:0f:e7:ec:1b:a3:
38:e0:46:a9:4e:8c:6a:2b:2f:b5:c5:6c:91:5f:cb:9f:63:a4:
87:f4:31:09:91:96:dc:f9:e2:c3:ed:ac:96:39:b9:49:28:f1:
1f:95:92:d7:8c:bc:c3:24:a6:f7:5e:5e:67:3e:b9:5f:da:92:
64:6e:c0:f8:78:59:42:c6:fb:c8:2b:fc:89:50:25:9b:95:1a:
d7:15:20:cf:85:f2:b9:d4:a3:d6:fa:1c:5c:d0:f0:84:2a:ad:
68:54:bc:d5:14:36:7e:36:b0:0e:6f:70:c5:2c:5b:4b:91:15:
99:9e:62:f8:08:4f:4e:c8:9f:9b:ea:a8:c1:e3:7c:3a:d9:9f:
2b:a8:8a:09:51:47:20:c5:03:ec:01:af:2d:b6:8e:aa:a9:6e:
01:3f:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:15 2025 by rpki-client