Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0YmpnqSvXT4paEXzJXGRCS83TCE.roa
File: 0YmpnqSvXT4paEXzJXGRCS83TCE.roa (raw, json)
Hash identifier: dYJidCSK1G+0YKWBozXEcPKOrgAqp5fY51KXkbCrNaI=
Subject key identifier: D1:89:A9:9E:A4:AF:5D:3E:29:68:45:F3:25:71:91:09:2F:37:4C:21
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274845859AC2B15FA37EF3CFE470217C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0YmpnqSvXT4paEXzJXGRCS83TCE.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204628
IP address blocks: 2001:4030::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:45:85:9a:c2:b1:5f:a3:7e:f3:cf:e4:70:21:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d189a99ea4af5d3e296845f3257191092f374c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:93:44:50:aa:d5:31:00:d2:8b:45:52:f0:
0b:ef:f6:1c:84:e1:b3:a3:8e:d2:8e:67:de:ca:f4:
b7:db:62:c7:05:2d:fa:71:75:8a:d0:75:f0:fe:72:
31:51:dc:b8:f1:86:18:55:99:2c:e7:de:bb:25:1e:
e0:73:ad:79:0b:34:4b:b1:ff:73:55:07:d1:5e:d6:
ee:cb:64:50:42:c0:a6:3f:45:03:83:7e:08:c9:02:
42:76:72:27:a2:43:ae:ed:04:f6:58:b2:89:1f:7a:
71:75:bf:d0:66:3d:8d:a7:7b:45:5f:d0:73:59:40:
8b:e9:07:12:8b:58:da:0d:c0:e3:7f:25:5b:a3:2b:
f2:b1:54:f7:e6:4c:15:c8:ad:28:e7:43:40:ca:b0:
0c:d1:08:80:69:86:68:1e:96:59:ff:00:44:f9:50:
83:44:77:1b:6d:66:9c:55:4c:61:49:0c:1f:18:d2:
8b:5b:39:89:cf:3d:fc:96:d3:23:17:be:63:1b:97:
80:61:70:c9:71:ff:d0:ac:2d:4e:78:96:39:86:2e:
da:57:ab:d8:89:6d:5a:29:df:2b:4e:ae:b0:89:04:
7f:8f:e8:38:cd:55:b5:53:6a:eb:9d:61:8f:89:20:
44:d4:1b:5e:73:09:86:78:05:66:7b:23:31:e1:32:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:A9:9E:A4:AF:5D:3E:29:68:45:F3:25:71:91:09:2F:37:4C:21
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0YmpnqSvXT4paEXzJXGRCS83TCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
89:a5:dd:f5:e2:a9:22:45:f3:7b:08:cf:a4:fe:92:dc:f3:ff:
0b:d9:6d:88:e9:ff:69:4d:07:2d:4e:0f:c1:16:2a:84:ab:64:
d2:ee:1c:3a:70:91:32:4f:9c:5f:1b:f4:47:a3:39:a3:87:41:
f1:52:ec:aa:cf:72:96:e3:21:68:a8:99:1c:12:0c:6e:ed:e8:
72:7d:45:d6:30:40:04:6f:fd:0d:9e:bd:83:3b:8d:b0:9e:19:
17:42:cd:5b:0d:b6:26:fa:fd:7f:3c:88:58:2f:ed:da:b5:1c:
fa:b9:4f:34:7e:ff:9a:2d:2b:d3:47:5f:6a:5d:39:fb:73:87:
d2:31:08:1a:10:f7:41:8a:51:34:cf:07:0f:2a:96:67:a7:69:
3f:46:c1:33:74:e8:03:be:49:33:7e:59:ab:32:a0:83:ef:d2:
52:46:b0:50:ce:b1:86:d5:83:fe:4d:db:be:79:f3:88:4c:2b:
65:bc:2b:ba:1f:f6:19:40:f6:85:3c:1d:b2:70:bd:11:e3:ed:
16:f7:34:fd:89:fe:b7:93:74:6c:df:ec:63:d9:1d:6c:8f:15:
cb:6f:56:16:4b:5e:b6:3b:a8:12:e8:27:80:f3:e2:88:b4:7e:
60:0c:a7:d6:8a:e5:7f:8e:78:cb:cb:5c:69:ea:36:53:93:d4:
0b:b3:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:24:31 2025 by rpki-client