Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/mI_12gpPA1x4m56hwYP082Ar3JU.roa
File: mI_12gpPA1x4m56hwYP082Ar3JU.roa (raw, json)
Hash identifier: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=
Subject key identifier: 98:8F:F5:DA:0A:4F:03:5C:78:9B:9E:A1:C1:83:F4:F3:60:2B:DC:95
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 0194236A30B1D451F1B75C521E8C740AE5C0
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/mI_12gpPA1x4m56hwYP082Ar3JU.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207134
IP address blocks: 2a01:b960:2305::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:30:b1:d4:51:f1:b7:5c:52:1e:8c:74:0a:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988ff5da0a4f035c789b9ea1c183f4f3602bdc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:51:87:9b:ab:95:e4:01:a7:08:72:e0:58:
75:65:af:84:7a:3c:c9:12:bd:75:cb:f2:e7:74:d4:
a9:58:9c:c5:54:55:99:49:74:c0:39:ab:cd:7e:6a:
7b:33:f6:a6:13:40:28:3a:b9:b0:09:ff:0a:b0:27:
b6:22:1e:ad:60:b4:66:e0:95:ee:02:82:1b:ff:05:
f5:65:14:71:9f:0e:b2:a7:73:47:1c:b7:cc:a5:01:
a0:2d:70:0d:ee:c1:c3:6e:a4:43:a7:bd:d2:32:91:
00:89:e1:77:e1:c3:d2:bf:46:18:03:6e:bd:c6:87:
b9:1f:78:2d:2a:ec:25:b8:b9:ab:a7:d2:35:c1:da:
91:58:3c:f6:e6:5d:da:18:2f:31:8b:b5:e8:db:02:
6a:44:44:67:cc:7b:5d:b1:d8:10:79:f1:42:82:7c:
4d:2b:db:d8:7e:a4:a8:12:17:d3:67:e5:2e:98:bd:
ec:89:41:e6:aa:ef:4c:72:9b:47:79:b1:93:52:0a:
ce:66:7b:3d:e2:f8:25:71:51:8c:70:1c:85:04:50:
02:76:6f:ab:64:4c:16:4c:51:4f:05:87:74:6e:f2:
41:0a:6b:3c:ae:c5:a0:14:19:8d:3b:a8:21:3c:6c:
64:cb:69:e9:ef:fa:98:bd:47:81:d0:24:8c:4e:eb:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8F:F5:DA:0A:4F:03:5C:78:9B:9E:A1:C1:83:F4:F3:60:2B:DC:95
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/mI_12gpPA1x4m56hwYP082Ar3JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b960:2305::/48
Signature Algorithm: sha256WithRSAEncryption
39:b3:13:dc:10:c5:92:3b:30:01:43:7e:a1:b8:eb:54:65:2c:
c5:45:1a:53:c3:c7:d1:58:b9:3e:1b:7f:22:a1:2a:0c:15:0b:
01:43:5b:37:4d:72:40:79:27:e7:fb:09:ed:9c:f5:53:76:69:
78:28:42:7f:02:e9:61:18:92:e7:fa:58:d8:23:54:a5:ba:2c:
17:97:4b:ee:fd:00:cf:15:9c:31:df:a9:39:e8:4f:54:a4:8d:
de:96:67:d1:5d:ee:e2:f2:0a:b6:39:c7:0f:e1:ba:50:0b:cc:
cf:23:8e:b6:28:ba:f6:bb:5a:98:ad:63:17:fd:e2:7e:7e:21:
a0:6b:08:8a:15:d7:75:74:7e:fe:26:23:8d:68:28:ca:96:c0:
84:24:39:07:b2:d2:68:9d:14:75:a8:b7:9b:4f:bb:10:01:13:
ae:17:22:a8:27:33:7d:f5:b8:bf:8e:4a:84:d3:1d:f8:f5:bf:
0a:bb:72:67:0d:cf:7c:97:26:2c:0e:d5:e1:e2:72:68:f8:bb:
61:2d:f7:50:ae:6d:76:03:ba:62:1e:d1:6b:aa:2b:f9:e5:f8:
11:4e:24:18:fe:1a:3c:ff:35:83:8f:a5:5b:f1:cf:9d:9f:f9:
14:ce:68:53:5b:41:14:a9:a3:dc:f8:56:6f:b5:74:ff:bd:9d:
7a:b0:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:53 2025 by rpki-client