Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/9jLVpGilYmQEGxg1WpK2yNt9KVk.roa
File: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (raw, json)
Hash identifier: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=
Subject key identifier: F6:32:D5:A4:68:A5:62:64:04:1B:18:35:5A:92:B6:C8:DB:7D:29:59
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 0194206866A1CBE7967613CD37874B61FEB1
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/9jLVpGilYmQEGxg1WpK2yNt9KVk.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8422
IP address blocks: 2a00:a200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:66:a1:cb:e7:96:76:13:cd:37:87:4b:61:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f632d5a468a56264041b18355a92b6c8db7d2959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:6c:0c:07:5c:13:7b:72:b8:29:4b:02:50:
5c:4d:98:b8:2a:ce:58:bc:2b:9c:a8:1d:85:68:9c:
8f:7b:97:2c:e9:56:f9:ee:f2:08:09:d8:28:9a:54:
78:2d:ec:31:34:d6:41:a8:cb:a7:3b:65:00:f0:dc:
f9:22:47:d1:80:4b:d8:54:08:0c:3f:62:6b:e3:89:
02:e9:bf:2f:72:1e:db:e3:8c:9e:85:cf:38:d7:30:
f8:e5:f3:15:7d:6f:b4:ee:35:db:b9:95:04:ee:bf:
1c:df:34:3d:38:80:a9:e2:17:81:c6:a3:08:19:35:
75:6e:e7:86:db:d0:b3:47:59:da:cc:f1:f0:c0:66:
41:99:a8:ac:de:af:3a:61:8e:b0:82:b7:e4:e1:51:
60:79:e7:78:37:14:c5:d5:d4:7d:b5:bf:64:2f:4b:
15:af:da:98:a7:42:b9:d4:d0:0f:47:a6:26:cd:d8:
bf:e7:75:7b:9a:5c:bb:81:39:93:74:ed:d0:30:19:
9b:9a:10:af:7c:16:74:0b:f2:d5:84:74:51:bd:c4:
3b:e8:06:43:8d:ac:86:ff:57:16:af:a7:46:5e:97:
b3:55:29:4c:b4:5b:05:b3:2d:8b:69:06:c2:1f:32:
bd:13:c8:97:50:1d:c1:b7:ed:09:71:0e:2e:78:9b:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:D5:A4:68:A5:62:64:04:1B:18:35:5A:92:B6:C8:DB:7D:29:59
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/9jLVpGilYmQEGxg1WpK2yNt9KVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:a200::/32
Signature Algorithm: sha256WithRSAEncryption
56:4d:d5:3b:cb:2d:cc:c8:f8:75:94:97:b0:fc:06:36:32:7d:
8f:bf:cf:a5:95:49:8f:e8:75:ac:75:44:ce:2a:30:34:02:79:
5b:ad:cd:df:16:aa:d5:68:76:c6:86:20:c6:54:cd:86:63:16:
39:88:92:6d:aa:86:df:39:29:08:3e:d7:b2:28:ee:cd:52:f4:
7e:61:6d:1e:63:31:95:73:a7:62:1c:d5:3b:ac:99:30:ee:9b:
12:00:7f:fd:b7:9f:76:f4:99:22:91:6b:8b:f5:4b:75:76:c3:
10:cf:ba:27:ad:60:49:84:e9:da:4c:2f:dd:d4:68:8f:b1:1e:
a7:1f:11:9a:55:77:c9:73:8b:67:80:d0:d1:41:21:a2:f8:77:
2d:90:97:de:93:08:6b:13:d6:9b:a9:a6:2e:cb:80:f6:1f:8f:
2a:79:7f:2c:ad:c5:1c:52:93:1c:3d:ab:c6:ac:89:16:cb:7f:
eb:2b:ca:11:c0:28:1b:5f:15:50:8d:19:be:ba:3b:b7:03:d9:
4b:90:ba:af:35:2d:b7:7d:8a:90:0c:f6:c5:bd:dd:8f:8e:ec:
3e:8e:19:27:c0:56:9a:68:c4:75:b6:9f:16:90:47:ff:76:00:
4b:3c:3d:9c:0b:38:99:f0:d4:49:f1:29:c0:c5:83:a9:ec:4c:
1b:63:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:24 2025 by rpki-client