Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/S5EvGcwDHH7zGUGD1TsxliOQ844.roa
File: S5EvGcwDHH7zGUGD1TsxliOQ844.roa (raw, json)
Hash identifier: 9ucAO/aS27/vji8pCgT0q2aazFzXGf3O5LSygR5bboY=
Subject key identifier: 4B:91:2F:19:CC:03:1C:7E:F3:19:41:83:D5:3B:31:96:23:90:F3:8E
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 0194228DE796FB50CDD96E176B1BFA66D083
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/S5EvGcwDHH7zGUGD1TsxliOQ844.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200132
IP address blocks: 2a12:8fc6:600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e7:96:fb:50:cd:d9:6e:17:6b:1b:fa:66:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b912f19cc031c7ef3194183d53b31962390f38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:12:79:17:47:be:3c:7d:95:33:38:bd:a9:
f4:61:3e:e3:20:3f:63:ec:0a:7d:4a:3f:86:e4:b7:
64:cf:d5:f3:f8:59:c1:8a:98:9c:be:fd:fe:56:e9:
7a:5c:50:29:69:59:fc:2d:8f:d9:50:6c:9f:06:58:
04:3d:51:dd:5f:5a:15:6c:19:9e:ac:83:c7:8b:56:
98:52:46:75:33:83:48:ab:fe:77:27:ee:4b:c9:cf:
79:2e:7b:f5:30:c5:d7:0c:16:87:1c:15:5d:bc:6e:
56:79:bf:1d:a1:0b:5a:1d:81:82:c2:00:86:26:26:
f5:fa:8c:8e:d5:11:a4:1b:74:7b:21:21:13:e6:3d:
a6:96:c4:8a:5a:ac:68:1c:a9:cc:80:98:cf:66:c8:
41:0d:a0:6a:68:d0:ca:c3:54:a9:f6:2c:dd:b0:ad:
4e:b5:3a:b7:2a:94:4a:37:84:22:e0:0e:81:9b:1f:
9a:a8:4a:14:3e:1e:59:c9:2c:51:43:8e:8d:8f:6f:
ed:43:f1:3f:af:82:4e:6e:f6:88:7e:94:50:42:b4:
6e:15:6f:73:c3:37:0c:cc:b4:53:2d:d6:3a:8f:39:
78:96:64:32:45:70:3b:f3:51:b0:4d:d2:41:db:b0:
c6:62:58:cd:49:5b:d0:b7:51:e7:62:d1:c5:b9:e7:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:2F:19:CC:03:1C:7E:F3:19:41:83:D5:3B:31:96:23:90:F3:8E
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/S5EvGcwDHH7zGUGD1TsxliOQ844.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:600::/48
Signature Algorithm: sha256WithRSAEncryption
88:d2:f3:7e:75:03:49:77:fa:c2:eb:ed:6b:6d:c3:19:dc:b1:
b8:a5:4a:3e:94:b4:fe:25:44:18:06:52:fb:39:e2:01:09:35:
d9:24:d0:8f:bb:17:db:71:f1:80:0f:c4:0c:cd:62:7c:c5:cf:
a7:66:b8:d9:13:37:ec:99:a7:87:f6:25:72:5c:01:22:c4:21:
3a:a9:25:b9:af:33:c4:89:87:f1:25:5e:4c:f1:8b:91:f5:97:
8c:c1:2f:61:54:c6:cf:99:5f:61:72:7e:aa:8c:af:ec:5c:b2:
db:40:76:cf:ca:a7:f2:cc:3b:85:3f:53:57:db:71:52:37:64:
1d:af:1d:92:e9:2c:ca:f8:77:5f:81:f7:6d:b3:d5:27:a3:5f:
98:93:50:8c:60:16:44:f9:43:6a:7a:0c:dc:fd:21:ec:33:dd:
46:0e:2c:0f:ef:17:86:f6:36:a4:87:c8:76:9a:75:e7:ad:c4:
ca:31:e2:1d:87:15:3c:e5:a2:46:bf:60:02:ff:02:de:ea:33:
a6:2a:66:97:6a:44:2e:fe:cb:32:6d:cc:13:bc:36:07:10:9b:
ba:ea:9a:1e:1d:e1:dc:62:23:4d:dc:26:f6:b9:2e:cc:3c:a4:
28:16:2b:d7:37:f2:76:8c:a4:84:2d:2c:a9:8a:d7:ff:31:90:
c0:4a:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:11 2025 by rpki-client