Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/x9dC2s7poumOX7Fyb1pJRfvWUck.roa
File: x9dC2s7poumOX7Fyb1pJRfvWUck.roa (raw, json)
Hash identifier: 4hkKgFGTZlThYX8UktL5gydXSJoUP0UEdhwE5OUeAGQ=
Subject key identifier: C7:D7:42:DA:CE:E9:A2:E9:8E:5F:B1:72:6F:5A:49:45:FB:D6:51:C9
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019422FAEEA3A6B4D4B027990F914A8B116C
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/x9dC2s7poumOX7Fyb1pJRfvWUck.roa
Signing time: Wed 01 Jan 2025 17:47:37 +0000
ROA not before: Wed 01 Jan 2025 17:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41954
IP address blocks: 2001:67c:25a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ee:a3:a6:b4:d4:b0:27:99:0f:91:4a:8b:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Jan 1 17:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7d742dacee9a2e98e5fb1726f5a4945fbd651c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:8c:3d:2d:e1:b5:ad:71:5f:4d:fd:a0:4f:
28:da:a5:61:ed:31:4d:a7:78:c1:31:c4:cc:3b:b9:
c8:85:02:f4:7d:66:e2:ee:e5:8c:28:c4:d8:95:06:
75:79:c4:f7:1a:de:0d:35:5f:7a:21:eb:4f:b2:fd:
7e:4d:3d:34:af:68:26:a4:3c:9c:50:7a:d8:f3:62:
36:d8:18:9b:95:ab:14:f7:cd:34:6d:d8:83:ab:82:
30:00:67:b9:aa:55:84:50:0a:93:8d:5d:a2:69:25:
05:00:74:ff:ff:17:37:20:f0:41:66:0a:77:5d:cc:
6c:c0:1f:db:d3:a5:9b:f2:10:fa:d7:1e:ec:71:2b:
be:1a:b2:c1:8c:a8:94:72:ae:58:32:b2:48:1e:e4:
1e:af:1c:7e:e4:77:db:2f:bd:85:90:7a:e4:7a:b7:
25:b4:2c:44:01:7e:6d:2d:c1:f4:0d:0c:cb:c2:33:
4e:b2:97:08:57:0a:0f:76:c7:a7:99:ed:4d:86:a1:
26:3c:78:3a:4e:43:75:9a:0f:51:b7:91:13:cc:9f:
0c:b6:a2:2d:b1:bf:d1:ed:de:2d:d0:0f:24:f8:58:
9d:78:25:af:15:75:5b:49:d6:04:83:c4:87:b2:a5:
26:ed:43:85:b9:c7:7a:e4:37:8a:95:40:16:b9:5f:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D7:42:DA:CE:E9:A2:E9:8E:5F:B1:72:6F:5A:49:45:FB:D6:51:C9
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/x9dC2s7poumOX7Fyb1pJRfvWUck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:25a0::/48
Signature Algorithm: sha256WithRSAEncryption
04:70:2b:ea:22:b4:46:d4:68:ca:e3:77:39:4a:2a:c3:2b:99:
a2:f0:b8:82:81:7e:8c:10:9c:bf:10:de:40:77:75:2d:fb:4e:
f3:d2:d1:e8:56:f3:a3:17:8f:e7:ab:56:8f:5f:74:00:2b:53:
ac:b3:fa:e8:46:36:77:8e:09:15:ee:44:7d:52:1b:38:d0:9e:
06:49:54:a6:ce:c8:d5:ba:12:c9:2e:d0:f0:36:69:3b:32:00:
22:ee:58:79:1a:f8:f6:20:3c:4e:9b:88:65:7c:66:fb:a3:3e:
96:f3:6b:5f:02:e8:cd:ad:23:65:1c:af:47:75:35:98:7b:4d:
29:f2:4f:97:8d:dd:86:4b:3d:8e:f2:67:25:c4:39:fa:de:78:
38:9d:bb:b2:d6:80:90:a6:9f:a3:0f:19:1b:18:a6:fe:53:6d:
7b:91:8a:19:8e:c7:d7:97:a9:43:a8:4f:f7:e8:32:e6:65:99:
1f:5d:ee:6f:68:b8:5e:5e:77:93:0e:00:32:b2:d0:69:99:80:
40:fe:ac:16:63:0b:1c:53:0d:5f:3c:e4:53:67:9d:98:16:b7:
42:bf:4c:a9:d1:62:98:7a:e1:1a:2f:89:00:eb:d8:bc:c3:70:
02:aa:48:81:46:c9:54:80:1b:da:20:c5:bb:cc:b3:55:cf:a0:
0b:a5:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:58 2025 by rpki-client