Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/su_1DPB7Zp9ePwa-RHRem-w70CY.roa
File: su_1DPB7Zp9ePwa-RHRem-w70CY.roa (raw, json)
Hash identifier: NSbW9yzN/6/DTloMlYOQZADFDTunvCQs/5F9HlR2sjU=
Subject key identifier: B2:EF:F5:0C:F0:7B:66:9F:5E:3F:06:BE:44:74:5E:9B:EC:3B:D0:26
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747BBC31F16739B36E569CC63E17466
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/su_1DPB7Zp9ePwa-RHRem-w70CY.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47152
IP address blocks: 2a05:b0c7:5000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bb:c3:1f:16:73:9b:36:e5:69:cc:63:e1:74:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2eff50cf07b669f5e3f06be44745e9bec3bd026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:32:b3:1a:55:bd:d6:fe:3f:34:d2:25:5b:
36:06:a1:2f:3e:2f:2b:cc:35:19:4a:35:f1:52:34:
81:0b:c2:b9:69:8c:4a:9f:f6:3b:a6:0a:93:35:82:
79:3c:b9:87:6b:fc:74:7c:25:18:9e:b7:d8:c7:05:
a4:3c:e2:0b:8d:9f:7e:79:d0:8f:98:4b:43:4c:83:
ae:d8:86:23:23:87:41:77:bb:16:38:51:d3:76:31:
f2:1f:49:d3:42:4d:86:e2:12:06:e6:4f:92:e6:18:
86:72:f9:0e:93:1b:e6:1f:44:dc:0c:e3:aa:f9:02:
50:1d:65:fb:bf:a0:71:73:af:a6:8b:f5:e9:52:be:
a4:9f:05:e5:0a:ac:54:a2:aa:0d:eb:39:cc:ee:7f:
03:2c:f8:dc:4b:f9:6a:c7:4d:e1:c1:80:0f:1c:b5:
7c:ff:9a:94:13:32:b1:89:68:ff:cb:78:5c:e9:81:
55:b1:af:22:22:1e:31:fa:f6:09:f7:c2:fc:2c:98:
f0:e0:eb:1b:a7:8a:75:74:16:ff:0c:87:08:a1:65:
9f:60:c0:d5:5e:a0:d6:e2:57:74:52:1f:78:03:7b:
d3:d7:3d:95:b7:c0:00:bb:07:59:11:10:45:06:76:
58:ab:27:08:1a:db:12:6a:ba:ed:c1:9a:fa:2d:55:
92:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EF:F5:0C:F0:7B:66:9F:5E:3F:06:BE:44:74:5E:9B:EC:3B:D0:26
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/su_1DPB7Zp9ePwa-RHRem-w70CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:5000::/37
Signature Algorithm: sha256WithRSAEncryption
84:02:46:29:9a:3e:86:e5:74:38:d0:1c:9d:a4:e6:39:5e:2f:
91:3a:fb:28:66:7c:02:73:d7:89:5d:5f:16:3a:d2:09:9c:aa:
d8:31:30:41:b4:60:81:6d:b3:c5:36:d4:b6:87:03:3f:30:a2:
ab:91:83:c8:78:41:c3:f0:cc:ae:fc:4c:be:77:96:48:09:a1:
e7:18:de:d1:a0:2c:66:b0:24:c8:4f:37:28:10:05:0a:79:02:
71:67:cf:13:16:d4:7b:07:f4:0f:a6:86:f7:a2:20:c1:2d:31:
b8:ed:b3:63:b3:8a:40:c1:9c:d8:9a:25:17:9f:78:c4:dc:d5:
b9:f4:cb:11:1a:14:53:28:d0:e2:d7:ad:75:8f:fc:92:8f:21:
82:d2:23:5c:a8:ee:6c:26:21:4f:d0:c9:7e:b0:11:67:fe:1b:
5a:94:75:68:e9:8f:58:a1:e8:f5:ae:2c:89:07:7e:f1:8f:d0:
65:6e:de:fe:e1:ef:94:5a:d7:bb:00:9d:ad:79:61:e3:08:aa:
0e:2b:8d:ce:43:7f:7e:02:da:e0:46:45:f0:a8:f6:81:a1:85:
7d:ab:c0:7f:29:e0:22:96:93:08:38:86:e1:3b:43:84:53:cc:
50:d1:03:87:71:d8:06:37:95:59:0d:90:8d:ec:ad:42:75:e6:
1a:0f:e6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:40 2025 by rpki-client