Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/SI90qQvScrNKS-02paw66Vtte1g.roa
File: SI90qQvScrNKS-02paw66Vtte1g.roa (raw, json)
Hash identifier: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=
Subject key identifier: 48:8F:74:A9:0B:D2:72:B3:4A:4B:ED:36:A5:AC:3A:E9:5B:6D:7B:58
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0194258F6A45DED43DF262EAEB15121B9F13
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/SI90qQvScrNKS-02paw66Vtte1g.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212149
IP address blocks: 2a12:5840:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6a:45:de:d4:3d:f2:62:ea:eb:15:12:1b:9f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=488f74a90bd272b34a4bed36a5ac3ae95b6d7b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:76:42:41:da:76:ba:61:51:56:16:08:85:
59:71:6d:a9:cf:8e:27:0b:31:8b:92:14:cf:45:28:
89:ac:5b:c4:f3:fe:1f:31:1f:b6:1b:57:9e:96:15:
5d:70:d0:5b:ea:6e:6f:e6:2e:f0:88:e0:1a:80:7d:
0e:8e:b3:c0:74:56:26:d9:47:ff:32:cc:ec:fc:c9:
b6:a7:2a:d3:48:34:06:0e:66:70:a4:fe:7a:9e:8f:
db:ea:54:06:fa:d4:e0:30:be:c7:17:55:ca:bf:79:
68:8d:68:07:d7:87:db:32:71:da:6e:bf:0c:f9:3d:
2c:d6:35:28:0e:62:da:95:29:56:14:d5:f8:e4:63:
1a:c9:a6:88:ab:f5:a9:24:ea:4d:15:07:dc:7a:46:
ee:41:37:1c:fd:bd:d0:b8:69:cd:91:ec:dd:f3:6a:
0b:74:c1:c5:85:ba:2e:1b:60:93:3f:f2:8f:d3:a0:
f6:02:f1:73:08:d4:ad:d9:b0:00:e8:4a:9b:82:5d:
57:6b:45:74:39:8a:00:83:10:c0:bf:41:47:c7:2c:
1e:0f:59:39:ba:7e:8d:b2:a6:e7:68:92:d6:a9:8b:
ae:b4:0a:19:fa:cc:fd:95:44:41:d2:8a:6f:dc:a0:
b8:15:a1:d6:12:78:15:74:4d:7b:a7:16:d2:29:28:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:74:A9:0B:D2:72:B3:4A:4B:ED:36:A5:AC:3A:E9:5B:6D:7B:58
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/SI90qQvScrNKS-02paw66Vtte1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5840:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
1c:73:60:1f:df:88:3a:63:ca:80:72:0f:69:8b:a1:a2:21:7e:
4f:23:06:ab:74:77:98:b9:3d:3b:86:d9:d2:90:7e:c2:5f:e3:
a5:a2:63:1d:96:49:7c:c8:65:27:dd:26:4d:89:05:30:39:ba:
d2:01:6a:97:bc:69:a3:7d:85:b8:c7:ec:07:6d:18:03:e0:0a:
3a:8c:64:33:aa:40:e4:40:d0:e2:cf:18:30:3d:0d:84:ea:53:
dc:a5:3d:f3:a0:e2:60:92:c2:c6:e7:19:9d:7f:8d:29:81:fe:
56:89:77:67:21:6b:53:bf:a6:e6:6c:d5:b5:44:36:b6:73:97:
bb:90:96:ff:24:26:64:9d:48:e4:61:5b:04:94:a8:f9:4a:98:
30:33:3f:20:50:df:16:db:84:e7:58:75:bc:77:9f:a9:47:0d:
24:b5:4d:85:47:6d:09:f5:ac:c1:19:bb:09:48:9f:7d:86:24:
47:53:29:91:50:99:dd:9b:4b:17:94:cc:65:39:f4:62:6a:8c:
b4:da:28:3a:dd:25:41:20:c0:9b:01:f8:29:27:fa:a2:3c:b4:
7b:fc:d3:37:e8:c3:f0:09:0c:4b:90:d0:75:ba:8f:ee:5c:f2:
69:7a:62:ee:0a:8c:f9:93:97:b2:97:98:3e:ae:ad:e8:f9:5c:
dc:38:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:49:47 2025 by rpki-client