Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/TdqltWNYsCkDJcg9oYqYHfFyayw.roa
File: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (raw, json)
Hash identifier: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=
Subject key identifier: 4D:DA:A5:B5:63:58:B0:29:03:25:C8:3D:A1:8A:98:1D:F1:72:6B:2C
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 01941F8C40624476775D8F65814899AB8A74
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/TdqltWNYsCkDJcg9oYqYHfFyayw.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 2001:678:c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:40:62:44:76:77:5d:8f:65:81:48:99:ab:8a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ddaa5b56358b0290325c83da18a981df1726b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:6d:a8:72:d1:79:75:db:f8:18:9d:26:61:
ad:35:ff:5d:7a:8f:0f:cf:49:58:06:f0:85:56:12:
d0:cf:2e:ca:73:8a:1d:aa:b8:70:a6:b9:a2:e7:f7:
2d:98:ab:38:ce:91:47:4e:bc:36:2d:fd:12:46:38:
6f:5e:6c:87:20:3b:1e:cd:df:58:18:7e:86:10:2c:
24:ae:3f:4a:06:f0:f4:04:c1:d4:6c:53:ae:aa:3c:
b0:40:68:41:8a:66:8e:13:8f:e1:41:76:0e:51:57:
17:03:0f:c5:e9:61:e5:3c:a4:03:b6:1e:04:a4:fd:
b8:57:cb:28:99:49:f5:e6:4c:74:cb:5a:ee:b7:48:
9c:b5:83:81:f8:e6:64:f3:98:3b:19:8a:8d:c3:68:
11:ce:8c:1e:e2:6e:f8:64:1c:57:d3:7c:bc:ed:34:
61:cc:fe:ba:44:2c:9e:de:a1:47:d6:10:64:38:1d:
d1:33:2b:33:94:e0:e8:5f:cc:6b:6e:3c:3a:e4:55:
d9:b1:89:4c:3e:46:e8:20:02:94:6f:f7:5f:80:5f:
d4:ee:e9:49:f1:f2:4c:05:1f:c3:64:7b:97:3e:34:
46:71:bf:cb:e8:4a:11:88:e3:aa:94:d7:2d:16:a5:
c3:ae:6f:30:ac:16:2c:52:39:08:d5:4b:d3:da:fa:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:A5:B5:63:58:B0:29:03:25:C8:3D:A1:8A:98:1D:F1:72:6B:2C
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/TdqltWNYsCkDJcg9oYqYHfFyayw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c4::/48
Signature Algorithm: sha256WithRSAEncryption
2d:c3:47:d7:47:fa:14:97:4f:8c:22:0c:3b:b8:fe:4a:ee:bd:
59:8e:49:4b:31:d1:35:cf:bc:b7:69:da:dd:3f:42:18:9e:2a:
00:65:1d:52:b7:e2:0d:d7:c6:d3:c7:8f:84:b0:8a:1a:3d:4f:
27:06:22:d3:7b:7b:2f:b3:3a:53:76:5a:63:9a:1e:1d:67:9a:
42:f9:d1:4d:11:57:bd:62:5e:54:af:f3:ca:64:5b:f1:c1:24:
a7:ff:69:15:9b:f3:68:01:d8:18:8e:fa:57:07:9a:8c:1c:e6:
47:43:9e:a8:0a:be:88:10:90:78:a9:0b:77:a6:79:58:3c:a0:
1f:a4:e7:95:16:9f:66:11:db:6d:cc:e9:a3:c3:b5:fb:49:8c:
b2:3f:ea:42:b5:0b:01:d9:1a:96:13:9e:65:72:c7:11:67:da:
79:a6:a6:ee:4b:7a:43:27:6b:ee:70:2b:a7:67:e7:9f:64:b8:
d6:4e:ba:a6:f0:57:25:c5:74:4a:b5:c8:0f:44:28:66:15:c4:
0b:06:34:c7:aa:94:3c:63:04:43:51:ee:17:46:a3:ae:85:8b:
dc:f2:ab:4e:94:40:fe:33:c6:f3:b4:62:7e:8f:77:11:58:71:
54:74:2d:11:27:a3:eb:61:c5:42:14:5d:a4:a9:86:70:d7:24:
ab:b1:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:52:28 2025 by rpki-client