Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Aqt3jeaprsuKaHcOUqUUT28sbp8.roa
File: Aqt3jeaprsuKaHcOUqUUT28sbp8.roa (raw, json)
Hash identifier: EmCBxRRSxkg6mCxIsUzjtmNjSktnaiN0x5KAiYWphtY=
Subject key identifier: 02:AB:77:8D:E6:A9:AE:CB:8A:68:77:0E:52:A5:14:4F:6F:2C:6E:9F
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747BB19A89F83D5D98F5B56023AD372
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Aqt3jeaprsuKaHcOUqUUT28sbp8.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 2a05:b0c6:5c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bb:19:a8:9f:83:d5:d9:8f:5b:56:02:3a:d3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02ab778de6a9aecb8a68770e52a5144f6f2c6e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:74:30:a2:92:55:68:f0:c0:48:52:38:0b:
0b:4b:61:45:e1:38:48:f1:df:bd:c0:1f:50:9b:44:
34:88:34:82:a0:5d:d4:7b:93:c9:de:d6:74:30:5f:
de:05:0d:55:0f:67:a1:e6:9e:43:b9:6f:ef:9d:dd:
96:6f:49:6a:9b:e7:96:a3:47:a1:b9:b0:fa:d4:f1:
f7:fa:ca:87:56:92:fe:c8:c8:c7:88:0f:b8:12:93:
a8:43:4a:32:47:af:5d:f9:ed:1b:a0:e6:b7:2b:37:
f9:84:60:01:f7:b9:45:c0:83:0b:e6:5a:8d:79:1a:
8c:17:d1:9a:a0:f0:b0:ab:e5:83:2b:e1:cc:9a:d8:
dd:62:09:7c:25:66:55:7f:61:bf:9b:3d:ac:f5:77:
f4:8a:5d:d6:2a:b3:69:16:21:63:c0:e4:01:2b:62:
af:d7:4e:b8:18:31:ad:57:34:a0:a6:40:e9:5d:cd:
b6:23:ae:bf:dc:57:3c:5e:3e:f6:b4:c0:9f:92:69:
b0:3b:16:01:cb:00:25:97:d7:75:6b:94:23:14:55:
3d:50:93:19:6a:54:46:c1:9e:60:bf:0c:31:96:8e:
9d:fc:61:9a:f0:5c:50:8d:44:a0:56:92:43:ad:d2:
bd:06:53:60:38:90:60:65:d5:cb:dc:ec:0c:9e:ba:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:77:8D:E6:A9:AE:CB:8A:68:77:0E:52:A5:14:4F:6F:2C:6E:9F
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Aqt3jeaprsuKaHcOUqUUT28sbp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:5c1::/48
Signature Algorithm: sha256WithRSAEncryption
63:01:14:e5:f4:c1:88:4c:2e:d4:44:a0:ee:b2:e4:20:bc:68:
a5:3b:59:28:76:47:b1:ef:63:e0:8b:0b:47:4d:e2:2f:bc:c4:
9d:69:4e:f9:f7:b5:2e:d8:e7:3e:95:59:05:a9:df:46:b1:af:
4d:1c:35:b4:df:b8:1b:bd:07:40:33:e3:16:7d:7f:6c:0f:7a:
26:22:bb:2f:bf:7b:f4:10:b6:00:9c:92:97:6c:d4:3d:0c:fb:
f8:3a:58:d4:d4:4d:54:ba:fa:04:23:a8:6e:80:a3:54:87:90:
91:cc:25:fa:d1:78:2e:5e:2a:2a:2b:28:76:9d:f2:54:7c:80:
37:9f:bd:bf:91:36:f9:57:59:6d:89:f0:97:df:fe:2d:db:96:
32:85:53:ae:09:f6:f9:e9:6a:2f:3a:56:e6:ba:d8:97:90:97:
26:e2:2d:7a:e5:7d:42:b8:ea:07:4d:5a:d4:52:df:85:c1:93:
c4:2f:f7:65:f3:26:41:d1:96:24:cd:16:7d:78:52:6d:5e:30:
a7:c6:2e:d5:23:27:e9:4c:ab:d1:de:7f:ca:5f:eb:70:8f:31:
81:9e:5a:e4:63:71:8d:39:27:e9:98:f4:37:b6:cb:6e:d8:8e:
a9:31:42:9d:2c:f9:44:3f:6e:92:6b:87:17:33:58:63:dc:c8:
56:c4:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:55:44 2025 by rpki-client