Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/x9qgtwMUU_-nMY5SDajHYEXNiCY.roa
File: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (raw, json)
Hash identifier: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=
Subject key identifier: C7:DA:A0:B7:03:14:53:FF:A7:31:8E:52:0D:A8:C7:60:45:CD:88:26
Certificate issuer: /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial: 0194258F9E281A27B1A73ED0CE38627E2B60
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/x9qgtwMUU_-nMY5SDajHYEXNiCY.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5409
IP address blocks: 2001:678:584::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9e:28:1a:27:b1:a7:3e:d0:ce:38:62:7e:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7daa0b7031453ffa7318e520da8c76045cd8826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:ee:11:5b:80:dc:d0:aa:43:e9:b5:3d:b5:
dd:b4:5c:0e:73:03:0f:cd:58:4f:7f:14:3c:6a:de:
c4:88:e7:54:3a:10:74:38:2d:62:0b:f4:a5:f3:f6:
df:ca:8a:00:15:88:21:9a:5a:53:a8:5f:2e:32:5c:
28:3d:0f:12:4e:9e:8c:e7:e1:1a:5d:74:9e:e6:06:
d0:2a:aa:49:69:19:7f:f9:a2:57:2b:36:c8:5e:ca:
24:63:8c:f4:05:87:6c:c9:98:ee:b6:b7:61:f1:80:
d0:4b:06:f7:01:20:7e:31:e4:6a:db:b9:50:8b:2e:
74:ee:99:91:6d:bf:a4:39:0e:da:f5:b0:17:f0:72:
f4:aa:03:fb:83:2e:33:5f:6b:9b:9d:31:75:44:b5:
99:c9:ba:a8:53:d6:14:67:9f:68:d9:b3:4a:28:73:
b1:eb:5e:62:67:38:32:89:a1:be:90:06:9d:aa:8e:
2a:a5:ed:6c:a1:26:13:22:ac:b2:e7:8a:96:9b:71:
df:38:a7:e4:a2:66:27:48:14:9d:90:17:dd:b3:b7:
4b:8e:99:ef:0a:7d:dc:db:cc:47:dc:9e:0d:3c:47:
0b:69:01:42:f6:ce:30:3a:75:81:8d:50:ff:41:43:
e8:a5:34:e8:01:3c:9d:5f:91:79:19:b6:7e:ba:be:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:A0:B7:03:14:53:FF:A7:31:8E:52:0D:A8:C7:60:45:CD:88:26
X509v3 Authority Key Identifier:
keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/x9qgtwMUU_-nMY5SDajHYEXNiCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:584::/48
Signature Algorithm: sha256WithRSAEncryption
88:e0:88:53:74:80:71:bb:c1:43:48:1a:3b:c0:10:f5:7b:ef:
68:b5:d4:a0:d9:64:c0:39:16:e8:42:eb:7f:69:36:27:86:32:
42:ca:49:c9:15:ee:22:e8:67:01:33:3a:41:27:ee:fa:d9:8b:
c4:99:bd:28:d6:f3:63:b8:31:77:9c:81:1f:6c:fc:48:be:ed:
d7:99:00:76:90:d6:90:7a:3e:19:75:00:8c:29:f6:5b:d1:38:
65:8f:a7:71:22:c6:25:48:b8:cc:36:30:96:21:4f:12:71:1a:
de:49:26:27:d4:8f:47:21:65:b9:a1:be:99:e8:0a:08:ac:2f:
2d:09:f9:8d:89:c6:30:9e:09:fe:1f:77:22:cc:56:ba:5b:3a:
b6:c4:c2:82:4c:87:12:5b:a7:8f:59:17:ed:2b:3c:98:e8:a5:
0d:8d:83:07:35:9a:f7:f9:84:89:56:3f:07:45:c3:52:05:fc:
82:a4:7d:ec:b7:d9:9b:3e:2e:4f:01:81:bd:d7:44:fd:38:6d:
fb:6d:52:6f:38:9f:d6:c2:36:ae:00:83:3f:4a:2f:d4:30:46:
b5:c6:b5:de:76:eb:6e:5f:d7:7b:ea:6a:9d:fb:a0:ec:83:35:
62:03:20:67:44:95:8c:30:6e:c2:6a:82:77:bb:69:41:9c:c1:
e0:ba:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:32 2025 by rpki-client