Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/NYJYw1BTKJV56akoY5ZQRJna-MA.roa
File: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (raw, json)
Hash identifier: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=
Subject key identifier: 35:82:58:C3:50:53:28:95:79:E9:A9:28:63:96:50:44:99:DA:F8:C0
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 0194222017D9F33AE82EF8D8682B745EBD4F
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/NYJYw1BTKJV56akoY5ZQRJna-MA.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64105
IP address blocks: 2a02:9b0:1e::/48 maxlen: 48
2a02:9b0:1f::/48 maxlen: 48
2a02:9b0:20::/48 maxlen: 48
2a02:9b0:21::/48 maxlen: 48
2a02:9b0:22::/48 maxlen: 48
2a02:9b0:23::/48 maxlen: 48
2a02:9b0:24::/48 maxlen: 48
2a02:9b0:25::/48 maxlen: 48
2a02:9b0:26::/48 maxlen: 48
2a02:9b0:27::/48 maxlen: 48
2a02:9b0:5c::/48 maxlen: 48
2a02:9b0:5d::/48 maxlen: 48
2a02:9b0:5e::/48 maxlen: 48
2a02:9b0:5f::/48 maxlen: 48
2a02:9b0:60::/48 maxlen: 48
2a02:9b0:61::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:17:d9:f3:3a:e8:2e:f8:d8:68:2b:74:5e:bd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=358258c35053289579e9a9286396504499daf8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:7a:b1:31:64:1a:a2:54:09:5c:75:80:4a:
b6:93:5a:6c:cf:07:06:e5:83:ce:90:ef:bc:a1:27:
9e:59:c2:98:47:4e:67:6b:19:ee:41:90:80:30:39:
bd:60:c5:cb:04:bb:55:77:fa:8c:9b:29:1e:29:2a:
ee:1c:40:36:7e:18:9e:34:b3:48:82:57:2f:d4:eb:
b8:1d:87:05:50:e5:f9:30:42:be:dc:22:d1:0e:7e:
20:3e:35:72:a8:ad:82:11:fb:e6:f7:7d:58:0a:31:
fd:d8:e8:dc:2d:a2:67:57:1d:cd:49:21:57:2a:a0:
1b:ad:bb:33:42:97:46:44:9a:16:7f:df:07:1d:d1:
23:f5:7d:1c:d1:34:9c:ae:e3:09:3a:af:e1:98:30:
4b:d1:38:99:1c:72:da:67:ad:0b:ff:a0:8b:b3:68:
2b:fa:b1:4e:4a:b5:ee:f9:bb:6f:66:92:21:a0:e9:
46:0d:6f:90:aa:8d:c5:8b:d4:48:79:9d:45:42:11:
7e:2c:6e:38:4e:9a:95:14:bc:c8:fa:b8:1b:a3:43:
5f:03:c5:da:80:e4:d5:94:2c:be:d1:ea:c4:b9:44:
7f:cc:2a:1d:70:ae:a1:b0:63:f2:ad:d0:be:e1:f6:
de:2c:01:0a:1d:76:ec:5c:25:53:4b:43:46:fe:b1:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:82:58:C3:50:53:28:95:79:E9:A9:28:63:96:50:44:99:DA:F8:C0
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/NYJYw1BTKJV56akoY5ZQRJna-MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:9b0:1e::-2a02:9b0:27:ffff:ffff:ffff:ffff:ffff
2a02:9b0:5c::-2a02:9b0:61:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:73:bb:c5:de:48:c1:d3:52:92:eb:f0:48:6b:09:74:97:5e:
c3:44:40:b0:74:7e:b2:cb:14:38:25:2b:6f:52:d0:db:58:da:
ae:b1:b0:56:32:48:ec:40:e1:51:78:08:22:1b:2c:79:dd:4a:
ca:ff:9e:4a:8b:40:93:80:61:6c:fa:1a:88:d1:74:ea:0d:47:
5b:e0:c2:88:4f:f6:39:22:cd:af:6c:47:92:0d:38:02:59:99:
f2:b1:44:84:5b:40:39:0a:df:84:5f:fd:2d:12:e3:0a:fa:65:
e0:3f:4b:e4:04:9d:a8:61:47:88:d3:59:91:f3:c9:7e:b3:13:
ad:36:03:aa:a4:0e:9f:d3:9b:96:c2:9e:b5:9f:85:da:c8:8c:
8d:f7:f4:72:23:ee:59:5e:b0:97:4c:92:96:4c:6b:a3:9d:90:
ed:24:a3:58:1b:44:e9:d6:99:82:41:e2:ed:1a:cc:c5:c0:81:
fa:36:e4:ef:66:e3:a9:de:ac:fc:9e:f1:c7:0f:fb:e7:cb:86:
9e:e1:9a:f1:42:b3:e9:69:f4:42:fc:c3:b6:e4:6d:4b:5f:75:
87:5f:f7:e5:f1:3e:8a:2f:eb:65:1a:49:1a:38:3a:27:d4:24:
54:49:52:a6:2c:3f:7c:ca:4f:be:37:a0:66:0c:8f:e4:76:09:
6f:3a:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:28 2025 by rpki-client