Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/Q0coXhksYsiHyus7jkG0H1rCOhs.roa
File: Q0coXhksYsiHyus7jkG0H1rCOhs.roa (raw, json)
Hash identifier: GLAs1yGQZUPoiQEpZ9WyTQNtMvFVhBPCXGqgjPd+Ip8=
Subject key identifier: 43:47:28:5E:19:2C:62:C8:87:CA:EB:3B:8E:41:B4:1F:5A:C2:3A:1B
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 0194228DE3DA4DAA450300D18B946D126244
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/Q0coXhksYsiHyus7jkG0H1rCOhs.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48734
IP address blocks: 2a12:8fc6:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e3:da:4d:aa:45:03:00:d1:8b:94:6d:12:62:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4347285e192c62c887caeb3b8e41b41f5ac23a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:34:df:ca:93:43:72:07:5b:36:53:ae:85:
df:26:e8:3d:ae:03:75:77:e9:56:e0:d9:ad:d7:f6:
06:a5:5d:84:77:74:8d:16:af:20:a7:71:cd:77:99:
30:7b:7c:58:a2:f6:10:0b:2e:58:39:e8:d8:b5:d1:
62:e9:3b:3d:7d:35:b6:16:a8:56:88:73:b8:d3:75:
ea:94:2a:0a:b5:3c:71:c5:e8:fd:9b:d6:42:2b:8e:
8b:79:6a:a8:28:06:af:47:35:1d:7b:52:d2:72:2f:
2f:7f:41:a9:8a:25:b1:fd:89:f3:ab:cb:83:d6:12:
4d:8b:d0:61:3f:98:13:e3:d7:bf:e2:a9:ab:0d:48:
11:a2:ad:51:4c:9e:b9:5c:80:5b:37:8e:86:5f:bf:
97:bd:80:d8:52:47:31:86:8c:9e:fa:dd:2d:d0:d4:
34:55:bb:fb:c4:d4:31:67:2f:e8:3a:de:44:dd:47:
56:eb:63:d1:a6:b0:25:b2:dd:6b:0e:05:8b:60:e7:
0a:b5:26:57:0d:57:e0:1b:33:63:43:69:e8:5e:ec:
c5:b4:93:cf:0f:27:76:ac:da:cc:50:4c:5c:80:52:
c5:8e:13:25:ba:e7:9c:ea:08:f9:d7:10:61:2b:2c:
82:ce:55:e2:1b:d3:3b:47:ce:ae:15:42:7c:a9:5b:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:28:5E:19:2C:62:C8:87:CA:EB:3B:8E:41:B4:1F:5A:C2:3A:1B
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/Q0coXhksYsiHyus7jkG0H1rCOhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:400::/48
Signature Algorithm: sha256WithRSAEncryption
07:46:b6:8f:d8:a3:d0:d1:b4:93:eb:99:8a:f9:cd:3f:ae:ba:
0a:e0:ec:9e:83:49:59:88:42:a1:f6:a2:99:78:a9:d0:3d:5b:
7f:51:c5:b0:74:e6:1e:15:2a:be:da:5c:d7:b1:ad:79:8d:8a:
9b:5a:33:65:02:d3:c0:a4:31:8f:98:f2:ac:69:80:59:f2:50:
93:4d:f4:27:f3:9e:d7:92:fa:ca:37:1a:19:7e:b8:d2:79:32:
ca:24:03:36:71:d2:86:e1:4a:ee:d1:bb:24:f8:24:e1:d0:9d:
13:1a:21:dd:a0:a8:02:32:2d:ee:52:13:39:30:e6:10:7d:5f:
85:96:11:fd:58:3f:22:0d:2a:14:ad:0f:e4:9d:56:b4:60:ad:
80:a9:0c:d5:20:30:25:9e:37:7e:cc:07:3b:56:b3:3a:de:05:
d5:af:57:a9:a3:e1:eb:fb:fa:6d:b4:1a:70:52:6a:32:6e:7e:
1b:a1:d4:ce:f6:3a:a7:20:e4:9a:62:05:22:70:9f:88:e5:f9:
b8:75:75:ef:a9:2e:63:07:3d:ed:2e:9d:13:e0:07:07:a5:0d:
a4:f8:c3:9e:e4:e3:ca:63:65:af:14:87:cf:3c:0e:f0:d7:bd:
a2:fa:65:89:71:a7:e1:42:07:a8:96:4c:79:4a:34:6c:60:20:
73:22:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:13:10 2025 by rpki-client