Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/NzO5JHHrowrlOrfRmJ6rlCKWAiI.roa
File: NzO5JHHrowrlOrfRmJ6rlCKWAiI.roa (raw, json)
Hash identifier: mEn+H0KcivRIVdMWKafr2JpXW+KPhxm6nmi6vgCsBn4=
Subject key identifier: 37:33:B9:24:71:EB:A3:0A:E5:3A:B7:D1:98:9E:AB:94:22:96:02:22
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01941F8C86C5B1BB34F64B01FCB1A6F56ABE
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/NzO5JHHrowrlOrfRmJ6rlCKWAiI.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30788
IP address blocks: 2a0a:f8c0::/29 maxlen: 29
2a0b:2a80::/29 maxlen: 29
2a0f:a380::/29 maxlen: 29
2a12:5640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:86:c5:b1:bb:34:f6:4b:01:fc:b1:a6:f5:6a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3733b92471eba30ae53ab7d1989eab9422960222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:3d:7d:dc:02:6c:29:db:53:1e:93:1b:64:
ca:c0:46:25:fe:f2:71:2b:c8:df:bd:e3:05:e7:d0:
d0:08:79:9c:03:da:07:ac:81:5f:9c:c7:6c:f8:f4:
da:d7:aa:47:11:5f:e1:89:4a:54:ab:61:6c:16:46:
29:01:8e:30:61:63:95:3b:53:25:51:35:d5:c8:2f:
00:65:83:04:a4:66:0a:5a:0f:b8:52:a8:b9:26:71:
1a:9f:57:8c:23:57:57:b1:75:a1:e0:d3:cc:39:35:
d9:e7:df:16:93:bf:8e:98:b0:87:d6:70:33:6e:c1:
ff:aa:1b:f0:83:ad:5f:1f:a2:21:50:35:80:52:92:
0f:11:07:da:ff:d5:6c:55:98:81:1d:0c:1a:1e:e9:
4e:5c:52:58:d5:49:f8:88:92:4d:f1:fb:80:61:da:
84:ad:91:b3:39:9a:bf:92:1d:23:58:a3:82:62:70:
e5:26:6c:a5:ed:eb:6b:0b:7b:53:4c:a4:81:69:13:
60:ec:03:83:fc:20:c7:30:ab:80:64:34:b1:36:9e:
4c:d3:d0:e2:c6:ca:1f:e7:1f:02:89:d4:b6:f2:0a:
5c:d8:56:bc:13:96:72:72:13:53:67:eb:e9:74:a2:
ea:8d:d5:53:33:fd:49:5d:9c:6b:d5:7d:0e:58:6f:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:33:B9:24:71:EB:A3:0A:E5:3A:B7:D1:98:9E:AB:94:22:96:02:22
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/NzO5JHHrowrlOrfRmJ6rlCKWAiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:f8c0::/29
2a0b:2a80::/29
2a0f:a380::/29
2a12:5640::/29
Signature Algorithm: sha256WithRSAEncryption
96:46:eb:49:53:0f:ab:31:42:a5:be:fb:72:b5:1c:a8:e8:5a:
d8:2b:59:46:9a:e7:50:f4:34:d8:ad:0c:0d:3b:fa:cf:2d:93:
82:f0:ba:9f:5f:49:50:58:54:ec:ba:ff:0c:4e:c5:03:d7:35:
10:9d:14:f9:87:41:a2:a3:6f:6f:19:5d:9f:10:ed:c4:bd:f7:
97:7a:33:0c:0c:6c:41:a7:db:ec:d8:56:fe:43:dd:7d:b2:28:
63:a2:15:a9:4f:d0:21:a2:77:09:54:f5:64:0f:e8:c9:17:de:
a4:be:ad:dd:74:db:50:68:a6:17:c7:54:36:16:9c:48:fe:f0:
86:04:d3:42:37:57:b4:82:e9:ca:98:02:83:7e:5f:2b:00:9e:
26:f1:f1:d2:fa:38:23:52:f2:50:96:82:6e:03:f7:9c:c6:2a:
29:b3:3f:8c:8c:20:7f:25:b9:a3:ce:97:79:1a:cc:d3:33:9a:
0c:4c:f0:83:b6:32:36:59:32:e9:19:4e:60:e7:0a:85:d7:83:
38:75:14:51:64:c6:34:f7:fd:9e:15:7b:e9:74:49:04:a7:a1:
16:e1:9d:d8:8a:ad:dc:a5:fc:9e:37:34:b0:18:60:f0:06:ab:
06:3d:d7:8c:ea:15:d4:a4:4a:c9:a8:07:0a:48:11:15:7c:9b:
06:8e:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:12:14 2025 by rpki-client