Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa
File: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (raw, json)
Hash identifier: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=
Subject key identifier: DA:D5:75:4F:94:81:B1:29:0A:6A:BD:6A:5D:7E:45:62:54:3F:07:D4
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0194266BDEE8C62F8F3BCFE1BA786F39DA51
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214784
IP address blocks: 2a04:5b81:21c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:de:e8:c6:2f:8f:3b:cf:e1:ba:78:6f:39:da:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dad5754f9481b1290a6abd6a5d7e4562543f07d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:28:56:a0:5a:94:0b:65:47:71:e2:b8:1e:
f5:e6:b9:95:99:dc:71:52:6d:31:b7:ac:21:37:fe:
39:a0:8c:75:74:e9:0e:9d:e7:96:59:04:8b:23:28:
83:16:ea:c0:77:39:e5:0c:fb:68:f8:12:57:e8:b7:
f3:ab:65:97:73:db:dc:94:93:fb:c4:fd:f9:09:ba:
69:00:9e:e3:68:a1:96:6e:1c:40:64:02:0a:1c:7a:
29:f3:f0:3e:65:ce:bb:47:37:0e:e7:7f:6a:8e:0a:
a0:04:3c:c4:2e:3c:fb:25:3c:58:97:9e:18:f1:11:
da:5c:21:ce:9c:04:70:84:99:6b:9c:7d:35:84:ef:
3e:d0:75:c5:78:6d:2e:47:b0:62:e0:25:a5:53:34:
f1:72:e1:2c:83:5e:c1:65:3c:99:b4:39:70:77:f9:
2d:e8:c0:8f:1d:8f:fb:01:37:1e:fa:ba:59:a1:29:
8b:e2:5f:d3:0b:8d:65:f4:80:c8:52:23:2b:ea:95:
82:c3:02:89:6c:88:55:da:4e:00:46:3d:cb:ff:ca:
85:48:35:0e:46:db:6c:41:cd:e8:8c:85:d0:3b:80:
56:9c:37:72:b6:74:5f:c2:2c:fa:2d:ed:96:83:09:
a4:f1:e5:5d:12:bf:d6:a3:c4:d0:2b:8f:4d:e8:a8:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D5:75:4F:94:81:B1:29:0A:6A:BD:6A:5D:7E:45:62:54:3F:07:D4
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:21c0::/44
Signature Algorithm: sha256WithRSAEncryption
9c:2d:72:bc:78:dd:90:23:a5:ed:73:c9:fa:5a:12:56:d5:86:
c7:45:36:2e:eb:c6:8f:d0:e1:97:82:9e:a4:d8:3d:20:b7:68:
02:2a:ab:91:6c:2e:51:49:fc:15:36:fb:e4:10:9a:95:76:4a:
04:1f:0b:f1:49:17:e9:d9:f1:81:76:a4:6d:e6:8d:4d:f0:74:
28:cc:f0:aa:9a:3b:03:2b:75:ea:8a:79:9b:b7:12:b6:5d:d9:
b1:8a:9b:69:fd:af:a5:13:74:fe:bf:43:9b:e6:36:0a:68:a6:
1d:31:5c:f7:c4:43:8c:09:89:cd:4a:47:ee:64:34:f4:2e:f5:
59:3e:9c:67:7a:e5:a1:10:56:06:29:db:23:21:89:e4:7a:37:
14:4d:93:54:f1:90:c3:e6:82:ce:9d:68:06:a9:4a:07:3a:64:
98:57:b0:a6:e4:34:ad:cc:0e:4a:5f:80:3a:95:0e:85:c5:69:
7e:7e:14:37:f7:30:4a:19:da:18:f6:7e:94:18:19:a9:64:e2:
86:96:3a:b4:7c:4a:63:c1:44:ea:a9:31:bb:7e:6f:9a:e1:86:
35:7f:31:d2:1c:6c:7e:87:26:ca:e9:56:ba:8c:64:e1:51:25:
df:e7:6d:2b:06:89:41:fb:2e:73:3c:62:4c:bd:1c:72:bc:24:
26:9f:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:33 2025 by rpki-client