Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa
File: Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa (raw, json)
Hash identifier: hcI8ATUfRYduE8yCuLSr8RsjKUn++KtzCI3lWbIhr1A=
Subject key identifier: 3A:2D:0C:7B:18:9F:D8:85:39:61:68:11:AD:64:43:19:C1:38:03:0E
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 019426D8E166884C9607BD68DB5EEE9C30CC
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa
Signing time: Thu 02 Jan 2025 11:48:55 +0000
ROA not before: Thu 02 Jan 2025 11:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214615
IP address blocks: 2a05:a00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:e1:66:88:4c:96:07:bd:68:db:5e:ee:9c:30:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Jan 2 11:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a2d0c7b189fd88539616811ad644319c138030e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:61:dd:72:56:c0:ab:77:b9:f4:88:72:39:
3f:ff:5c:32:df:f2:41:03:52:9c:f0:f1:5a:b6:ef:
a1:cc:41:e1:b9:f2:66:c5:d1:22:16:78:da:bb:34:
32:9b:ee:11:92:86:58:f6:02:b8:0f:ca:47:59:01:
37:58:10:bf:26:38:a7:fd:83:40:9d:ac:3c:5f:27:
60:6f:61:3a:43:98:cc:a6:85:9b:f9:74:48:45:5c:
7e:f6:ef:a7:9a:31:d8:9c:79:6e:45:1e:b4:b2:3b:
8e:a2:ea:a7:9f:87:1d:c7:00:07:00:7e:b9:f7:12:
cf:99:c1:79:0c:93:45:84:35:7c:f1:13:67:ce:6a:
ab:fe:48:d5:63:49:58:09:86:53:60:89:0e:56:d0:
f5:77:ad:e4:f4:1d:a9:71:c7:89:89:c6:c0:55:cd:
ce:34:bb:7d:70:c0:74:cd:11:93:70:a7:92:ad:39:
bd:6e:d8:e6:7b:ce:b4:ca:23:17:1e:4e:52:0b:17:
05:7d:94:f7:a7:83:e4:1a:a3:cd:18:22:65:ab:34:
99:72:7c:83:db:ae:bd:2a:7b:05:30:d2:da:3d:68:
28:fc:6d:96:b8:23:b8:3b:0d:4d:7f:dc:4a:ae:84:
6a:51:a7:17:40:46:ae:f5:7d:26:eb:db:c3:de:f0:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:0C:7B:18:9F:D8:85:39:61:68:11:AD:64:43:19:C1:38:03:0E
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:a00::/32
Signature Algorithm: sha256WithRSAEncryption
0f:34:a1:43:32:cc:16:7c:50:3b:fe:12:fe:25:c1:6c:fe:28:
4f:c9:dc:04:7d:34:b7:83:4e:62:6f:8c:b5:02:50:8e:0a:1d:
5e:e2:6a:f4:b0:4f:0f:7f:d0:26:c5:2a:42:6d:27:65:f7:1d:
a4:61:06:a9:40:fd:4e:d8:0e:b2:46:04:46:12:99:e9:48:a4:
86:2d:91:d3:9d:39:9f:c4:2c:e2:b4:a7:6b:c5:fb:82:18:ff:
5b:fc:2c:7b:0b:37:91:88:a9:56:00:65:28:77:13:bd:f5:4b:
77:4c:54:ec:05:e9:80:e6:29:8d:bd:0f:61:db:13:d0:06:18:
a6:2c:11:74:d4:e7:35:ef:77:3a:49:4f:bd:1c:d1:79:e6:ec:
54:e5:fd:cb:96:dc:e4:e7:b6:3d:fa:70:1d:87:df:b4:d2:a1:
57:5c:6b:b9:05:25:c3:2f:57:9f:79:08:ca:cc:4d:b6:4d:fb:
68:72:a6:1f:5c:24:76:2f:59:cb:e0:87:bb:12:7c:64:51:27:
a4:08:b5:33:c2:4d:a8:e7:82:d5:08:d5:f9:9e:09:94:fd:81:
94:e6:f1:21:7b:9d:61:b9:16:5a:eb:32:ef:51:69:e2:35:41:
7b:a9:f4:8d:b8:e3:ea:1e:14:81:18:71:8a:45:46:61:b5:66:
e1:94:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:16 2025 by rpki-client