Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/4mtjo1wkfTbCTW9KNexHpaJfxb4.roa
File: 4mtjo1wkfTbCTW9KNexHpaJfxb4.roa (raw, json)
Hash identifier: NNFjMP/4ryf3yqLdY/nlmC6UZkGbjTY7ealoIUdpyCw=
Subject key identifier: E2:6B:63:A3:5C:24:7D:36:C2:4D:6F:4A:35:EC:47:A5:A2:5F:C5:BE
Certificate issuer: /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial: 0194236A21502AD595E4C21BDFC8D80451FB
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/4mtjo1wkfTbCTW9KNexHpaJfxb4.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31317
IP address blocks: 2001:67c:f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:21:50:2a:d5:95:e4:c2:1b:df:c8:d8:04:51:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e26b63a35c247d36c24d6f4a35ec47a5a25fc5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:f4:72:ff:b5:9c:49:91:bf:f5:4a:e8:53:
81:33:6a:6a:ad:dc:bd:27:6a:96:5f:fe:4b:93:07:
66:e5:f8:a0:68:b8:94:fb:28:77:92:3a:72:c2:87:
6a:ea:a4:10:72:e9:76:8a:e8:22:4d:82:b9:f9:28:
f5:ea:c8:cd:48:0a:c7:fe:96:96:87:38:a7:41:82:
e5:7c:48:4b:3f:fb:97:42:d4:0c:e0:a3:54:0c:af:
2d:54:42:48:30:00:3c:e8:6b:d9:ff:e2:45:8e:12:
ca:34:7b:58:3e:05:b6:71:8c:fd:86:ea:d1:e9:9c:
14:fb:de:9f:eb:f6:da:cb:31:68:e4:24:7b:0a:b3:
ee:17:cf:e9:21:c4:59:b6:e2:4a:35:d9:50:48:e8:
4b:d0:46:eb:c5:3e:e2:f1:c7:f7:4a:3f:f0:5c:9d:
a8:27:b1:3b:c5:3b:e2:fa:43:5c:8e:93:4d:67:c9:
b5:cf:70:b5:c0:67:ea:82:2f:85:7b:5d:1f:f4:56:
5e:8a:94:45:a5:56:31:f0:f5:5a:97:c2:03:00:a7:
0f:23:10:a3:93:7f:37:f3:0b:e2:d5:25:8f:a8:2a:
bf:2b:ce:f8:80:ec:e2:56:e8:8f:86:62:c2:61:08:
e3:cd:5e:a9:f4:61:58:0c:11:0e:b0:26:9b:a4:a4:
e2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:63:A3:5C:24:7D:36:C2:4D:6F:4A:35:EC:47:A5:A2:5F:C5:BE
X509v3 Authority Key Identifier:
keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/4mtjo1wkfTbCTW9KNexHpaJfxb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f00::/48
Signature Algorithm: sha256WithRSAEncryption
4b:2c:7d:4c:0b:a8:8f:74:f4:56:e3:d0:d4:15:41:ad:46:99:
e8:d8:95:66:b7:2a:e9:e4:07:0a:a1:a8:73:06:8b:c9:c9:ad:
59:4d:f5:21:41:66:83:51:de:ec:21:e0:bb:3b:bd:13:6a:42:
00:41:b8:5f:bf:79:78:49:94:41:58:66:fc:5a:e6:54:75:d1:
aa:13:c3:31:b4:2c:04:8d:88:fe:22:33:31:3e:a5:cb:d7:a4:
54:59:c2:22:5a:3c:81:6a:ea:12:ec:4b:94:ee:1c:c3:46:39:
b0:29:0c:cb:63:c5:bf:6b:fa:38:99:13:78:ff:d5:8f:4b:b8:
e0:d7:13:ed:ff:6d:25:e6:2c:c7:5d:76:f1:a7:fe:9b:99:1b:
bc:e6:ec:d6:41:25:2e:6c:86:b8:7c:2c:d0:93:8a:8c:20:39:
f5:96:b0:5e:29:06:07:b2:65:8b:60:5c:de:63:3b:91:90:2c:
4c:f3:30:4c:a0:f1:63:47:08:58:d0:79:68:52:59:5a:7f:ec:
bc:27:46:76:3e:a0:b7:11:bf:dc:c8:db:5b:10:64:ac:3f:4e:
05:cd:a1:e3:c9:ed:a1:7c:46:47:f8:42:92:e6:0c:b3:4d:41:
16:3c:41:08:33:0d:40:bb:22:b2:8f:d5:0e:b8:0b:c0:e9:a1:
f0:7a:aa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:41 2025 by rpki-client