Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/UXFnULRGQ9zt1V-SkMYjnZH0aX8.roa
File: UXFnULRGQ9zt1V-SkMYjnZH0aX8.roa (raw, json)
Hash identifier: hvtnqOC4PJ7xkfHCQl1PdGQcbPT0pkEqxG9iEFd/GZI=
Subject key identifier: 51:71:67:50:B4:46:43:DC:ED:D5:5F:92:90:C6:23:9D:91:F4:69:7F
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 01947FD0A061150FCD5767FA7A20C2F1137C
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/UXFnULRGQ9zt1V-SkMYjnZH0aX8.roa
Signing time: Sun 19 Jan 2025 18:26:06 +0000
ROA not before: Sun 19 Jan 2025 18:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204508
IP address blocks: 2a13:aac4:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7f:d0:a0:61:15:0f:cd:57:67:fa:7a:20:c2:f1:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Jan 19 18:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51716750b44643dcedd55f9290c6239d91f4697f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:9c:57:66:46:21:39:1e:2c:6c:2d:e1:68:
53:2b:82:f3:a3:1c:e8:27:6f:90:9e:ce:72:f9:47:
d4:16:11:88:05:31:75:56:b7:b0:57:6b:50:59:4b:
fa:9d:ea:9c:2c:19:80:28:57:fb:2f:7a:68:7b:db:
e8:98:13:10:f6:ac:29:71:61:1f:14:7c:1b:a4:0b:
5b:66:f6:44:90:47:c4:14:af:15:2c:42:07:15:a8:
61:36:2f:10:10:74:aa:65:77:f1:1c:d0:73:78:b0:
d7:38:5f:7e:81:e5:3e:4a:84:dc:71:7c:a5:1c:f8:
c7:e8:08:1b:a1:11:7c:a5:e0:ba:c6:49:27:3f:68:
8d:18:87:26:5b:d6:4e:9c:a2:87:a2:8d:4f:e9:21:
af:7d:19:07:51:20:bf:f5:66:4d:9f:de:95:94:20:
6b:db:40:0d:43:9d:be:35:93:84:1f:9f:39:aa:cb:
28:76:6c:9a:03:a4:15:84:21:23:ca:36:f1:ca:06:
d5:53:b0:64:2f:a6:68:36:e0:5d:89:35:e9:2a:17:
23:69:11:02:30:ce:f4:57:8e:3b:47:e7:d8:6c:e9:
15:db:25:a2:a0:19:e5:fe:95:98:f5:7c:6b:4b:ad:
15:94:e1:28:61:86:7c:df:71:b5:a9:b5:20:4f:a6:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:71:67:50:B4:46:43:DC:ED:D5:5F:92:90:C6:23:9D:91:F4:69:7F
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/UXFnULRGQ9zt1V-SkMYjnZH0aX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:aac4:1000::/36
Signature Algorithm: sha256WithRSAEncryption
ad:1a:d8:8b:7e:eb:31:ad:f6:61:8d:aa:3d:1a:3f:f0:2c:2a:
f6:93:e9:75:12:cb:15:0e:cc:63:92:d9:aa:bb:2c:2d:28:68:
e3:2c:e2:f7:4a:19:8c:0f:23:90:17:c0:7e:54:e1:74:fd:80:
a9:72:15:19:81:83:8a:2d:d7:f3:81:3c:d7:7a:0d:a6:05:68:
b3:d8:63:16:c9:cf:41:e1:16:bc:66:26:e0:b8:e5:ca:da:b7:
b1:d7:f0:dc:88:0c:ed:2f:d6:74:ac:4d:2b:ee:79:ab:90:77:
15:6a:af:56:68:ef:f2:c6:e7:60:83:0b:58:a2:c1:dc:69:9c:
6d:63:af:6d:4a:f2:a0:7e:b3:4d:4c:64:53:d7:45:2b:46:1a:
04:f7:ba:50:90:ed:a0:d2:38:0c:3b:68:62:37:8e:e5:44:cc:
47:17:00:48:3e:05:cc:ad:d6:63:2c:51:fa:95:a3:80:92:f5:
a8:89:0e:e1:e4:ea:af:71:aa:85:5f:f6:33:74:05:30:5e:39:
f2:4e:50:ab:ab:77:f2:38:fb:8e:d7:ce:6c:11:96:10:64:63:
2b:c8:df:d9:b7:7c:ea:54:14:4b:04:72:fc:3b:ec:fe:f4:ce:
21:8f:77:96:8e:47:de:6c:47:59:63:df:92:0f:bc:5a:23:5c:
3e:87:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:35 2025 by rpki-client