Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AnGb1F6vrDQn-_J9yPy81EbgHug.roa
File: AnGb1F6vrDQn-_J9yPy81EbgHug.roa (raw, json)
Hash identifier: gjaX4Az39L7nM4ttftGzLr4ijUTfbnAw2dsPkVEVbiE=
Subject key identifier: 02:71:9B:D4:5E:AF:AC:34:27:FB:F2:7D:C8:FC:BC:D4:46:E0:1E:E8
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0194228D91B152ABD4A6D805CF738D7381BC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AnGb1F6vrDQn-_J9yPy81EbgHug.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16260
IP address blocks: 2001:668:1fc::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:91:b1:52:ab:d4:a6:d8:05:cf:73:8d:73:81:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02719bd45eafac3427fbf27dc8fcbcd446e01ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:1e:39:47:e4:c2:d1:7c:14:26:6c:59:de:
5b:fe:a9:b7:12:9a:5d:8e:ce:1f:5e:14:fb:24:ce:
0b:41:9d:f6:4d:29:3f:12:00:a1:64:d7:25:17:df:
c0:04:36:c6:df:60:33:39:da:cc:22:39:e7:04:8e:
bc:df:89:ad:64:b6:ee:f3:fd:4e:38:a8:7c:40:60:
a1:bd:2b:99:a5:37:df:26:4b:6d:b0:a9:fd:ac:f7:
86:75:dc:93:cf:92:0a:3a:97:e6:cb:43:85:3a:03:
11:83:e6:ef:30:fe:37:b5:85:6c:6b:07:b9:3a:09:
12:3c:37:d6:83:ba:db:86:0c:a6:1c:42:7a:d3:b8:
e6:6d:09:6d:3c:0c:80:40:cb:5d:d9:f1:5e:b0:0c:
81:9c:ee:5c:73:9e:f6:ef:de:a4:49:c7:97:cc:f7:
73:cc:fd:7b:da:72:07:81:ca:39:f8:ab:a1:fb:1b:
a6:1c:94:af:1f:0b:18:d6:b7:49:26:83:74:70:e6:
de:f2:e0:5a:18:a0:eb:f4:63:3b:69:ef:f1:d6:59:
8e:ec:cc:78:46:53:0f:e4:04:46:cb:ff:a4:a7:5a:
24:50:4d:70:2e:24:88:17:6c:96:8e:77:df:95:c3:
9a:7f:7e:41:e8:d6:60:86:f2:95:0b:ea:34:a4:dd:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:9B:D4:5E:AF:AC:34:27:FB:F2:7D:C8:FC:BC:D4:46:E0:1E:E8
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/AnGb1F6vrDQn-_J9yPy81EbgHug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:668:1fc::/46
Signature Algorithm: sha256WithRSAEncryption
66:c9:d4:e0:38:8d:3b:16:36:67:b3:49:bf:3a:0d:82:00:a2:
54:78:82:2e:b7:ba:9b:4e:58:d6:59:cd:83:9a:54:b0:80:16:
c6:44:96:88:e6:db:22:c6:a5:ab:82:22:2e:35:20:70:be:d4:
af:a4:18:69:ea:53:0c:91:c0:db:da:6c:0a:6b:2d:12:c0:e2:
ed:5a:14:a6:86:03:11:35:95:fc:53:ac:18:27:da:a6:62:e9:
7d:4a:1a:f0:c3:98:fc:f6:10:97:51:8f:1c:73:92:d6:f8:4c:
a6:09:d7:02:29:a9:97:29:78:cf:95:d9:ee:35:2f:a7:9a:2e:
86:21:d4:41:2d:0f:ce:f0:dd:ea:4a:85:0f:85:69:c7:17:3f:
59:19:f3:13:94:ec:91:74:75:6f:8f:37:88:ae:b7:c4:ba:76:
b1:77:b3:59:53:dc:57:49:e5:d4:49:a6:fb:4b:ad:7a:88:62:
68:c4:32:ea:e7:21:ff:cb:96:d5:09:af:c9:ce:86:68:93:e1:
2c:56:e7:f0:4c:12:d7:ad:f0:7b:41:21:38:67:a2:06:9b:e8:
56:7b:f2:b6:2a:a8:50:22:8f:08:14:cf:fc:a2:96:64:00:c2:
7e:75:81:9a:e3:c8:b0:78:96:f2:76:14:9e:30:94:c7:6a:7b:
ec:eb:97:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:31 2025 by rpki-client