Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/Nvgx0NStgiF6lAwa5XAPUa97GUc.roa
File: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (raw, json)
Hash identifier: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=
Subject key identifier: 36:F8:31:D0:D4:AD:82:21:7A:94:0C:1A:E5:70:0F:51:AF:7B:19:47
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 019428255EB50D3691621B1C94C90ED29EB4
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/Nvgx0NStgiF6lAwa5XAPUa97GUc.roa
Signing time: Thu 02 Jan 2025 17:52:05 +0000
ROA not before: Thu 02 Jan 2025 17:52:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205415
IP address blocks: 2a14:5ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:5e:b5:0d:36:91:62:1b:1c:94:c9:0e:d2:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Jan 2 17:52:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36f831d0d4ad82217a940c1ae5700f51af7b1947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:fb:eb:c4:57:70:e5:c1:7e:04:44:d3:74:
73:68:3c:59:ed:19:eb:c2:e1:57:25:66:7c:8a:16:
79:10:69:c2:04:6b:b5:2f:8b:88:a3:45:f6:a3:64:
e1:e7:6d:fc:f4:05:b3:20:f2:8d:49:22:9d:0f:99:
cf:bc:e1:d9:82:1e:09:25:65:51:05:3f:d5:f8:57:
63:d2:ca:c8:35:59:f0:bc:4e:bc:e8:5a:24:eb:f0:
0f:f4:39:e7:56:32:b7:0d:33:c0:d5:22:a2:a2:96:
eb:78:2b:b7:2a:ec:69:c3:4b:05:34:79:cd:35:7b:
fd:ce:5b:7a:a4:36:fc:8c:a6:5a:fb:4d:55:62:eb:
d3:75:a0:c8:97:2e:c5:aa:c0:58:d3:a1:22:42:9f:
c4:44:4f:d7:d1:a9:57:32:2e:16:ff:1d:d4:ce:ba:
33:79:22:47:b1:27:24:6a:a0:ce:6e:e7:b3:3d:37:
41:cf:c8:86:2b:d5:e0:19:81:c8:11:bf:7c:1f:eb:
dc:eb:ca:e5:0b:f7:40:85:89:4a:66:fb:2f:ab:38:
5f:22:97:75:96:cd:97:31:e6:cc:be:94:98:ff:67:
b7:c5:d6:50:02:6b:7b:6b:9f:ec:73:89:73:e9:c4:
e7:5c:4a:49:8a:5e:4a:1c:81:23:ff:a9:5d:00:f1:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:31:D0:D4:AD:82:21:7A:94:0C:1A:E5:70:0F:51:AF:7B:19:47
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/Nvgx0NStgiF6lAwa5XAPUa97GUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5ac0::/32
Signature Algorithm: sha256WithRSAEncryption
63:7d:75:8a:57:c7:aa:e3:0d:3b:50:44:5a:ac:5c:d6:6c:51:
74:14:e8:b2:e1:52:b0:d7:54:59:b1:3e:82:1d:17:e1:df:4a:
2b:c2:24:ce:83:7d:9d:96:3d:ee:e5:92:6f:20:83:60:91:b2:
f5:ce:eb:98:dd:7a:2a:e3:84:60:1b:cc:ae:fc:e4:75:12:b2:
ab:f2:59:c6:54:d9:13:64:30:47:31:8b:90:05:7b:3f:52:b3:
2b:24:6a:81:c4:22:8b:46:a9:0e:e4:fd:3e:a7:88:88:69:b0:
d3:ad:a7:d3:5c:4c:10:da:4a:71:b9:c2:32:64:b4:35:d4:a3:
35:a5:61:55:bc:c2:cc:5a:60:97:ea:11:30:71:96:85:88:54:
0c:de:79:62:7f:89:15:f3:56:52:b8:1e:c6:7a:76:ed:f4:f4:
ab:de:29:1b:f4:60:95:e0:db:1a:23:88:ae:e6:a1:d6:78:c8:
4b:54:3b:05:f8:72:d6:93:89:25:12:1d:22:3a:cb:0f:68:85:
33:64:40:66:15:93:d0:84:d3:ce:0e:f6:73:9b:c7:90:4c:0a:
35:96:06:a9:b4:0e:db:f7:99:d9:00:fe:79:23:fa:fb:1a:9b:
0d:0a:7e:9b:e4:c4:51:65:ec:ce:19:a6:12:a9:75:b6:07:4e:
2a:b0:95:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:42 2025 by rpki-client