Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/OWnzalrEaHNzu4AsD29DhoKa8Xs.roa
File: OWnzalrEaHNzu4AsD29DhoKa8Xs.roa (raw, json)
Hash identifier: w7GvV8HbETtyhTF6uR9vlKySlaF/SU8e2H/ocdNt7lY=
Subject key identifier: 39:69:F3:6A:5A:C4:68:73:73:BB:80:2C:0F:6F:43:86:82:9A:F1:7B
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 019427486529E6AF2FA571A708BA8AD5071F
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/OWnzalrEaHNzu4AsD29DhoKa8Xs.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57964
IP address blocks: 2001:67c:830::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:65:29:e6:af:2f:a5:71:a7:08:ba:8a:d5:07:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3969f36a5ac4687373bb802c0f6f4386829af17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:57:03:23:3f:f6:62:c8:cb:38:bd:b4:80:
82:81:a7:4f:cb:fb:22:c8:36:cc:2c:73:49:e7:33:
45:fd:a4:6c:fc:07:25:5b:79:8a:08:83:e9:b1:dc:
25:06:d9:dd:92:00:97:bc:e6:69:c3:c6:e8:f3:da:
8a:ba:67:4b:e1:53:2a:34:6d:ae:a2:a5:e9:6f:7b:
2b:8b:9a:1a:3c:1b:7d:23:0e:39:49:e2:7b:19:f1:
e2:d7:95:41:54:11:25:79:31:83:62:b7:00:78:fa:
4e:30:8e:e9:c8:40:af:a9:f6:bc:67:dc:b5:29:be:
19:e6:ee:43:3f:c8:12:98:80:31:56:52:ff:d3:46:
57:47:2a:fe:dd:97:7d:f1:12:ce:81:d6:8c:b8:ae:
c1:ba:ce:6d:44:d6:33:b0:26:6a:e8:bc:c3:77:1e:
80:25:12:a3:ea:2e:3c:4a:42:3b:34:2e:ea:60:8e:
4c:78:96:ca:22:69:b1:ec:45:aa:46:75:04:77:8d:
82:eb:26:25:fd:3e:f9:28:5d:03:3d:50:03:d2:c9:
da:30:4c:51:c1:89:97:00:f7:61:19:1e:55:6f:fb:
84:b8:c3:02:24:d2:94:d6:f4:2f:bc:51:58:dd:83:
8e:6e:76:05:3f:b9:e3:30:18:0a:4f:1c:2f:de:3c:
72:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:69:F3:6A:5A:C4:68:73:73:BB:80:2C:0F:6F:43:86:82:9A:F1:7B
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/OWnzalrEaHNzu4AsD29DhoKa8Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:830::/48
Signature Algorithm: sha256WithRSAEncryption
13:3c:e1:12:81:11:f3:fa:e0:79:10:53:b0:36:8d:26:59:32:
08:94:66:8c:fb:6d:f4:8c:38:41:46:c8:ce:f6:c8:4b:bc:1f:
fe:f6:e9:36:6d:1d:30:f1:1f:0c:1a:21:fb:60:35:73:f1:4f:
4e:74:bb:e6:88:ed:6a:a0:3c:bf:d7:23:9d:ac:65:78:95:65:
f6:b8:60:7c:c4:6b:fb:e3:27:2b:1e:17:97:17:b0:8d:6c:c1:
e8:19:31:27:8a:d3:88:50:87:7e:35:2c:12:78:e2:25:3f:c4:
95:4f:d8:8e:2c:6b:55:6d:99:42:58:c5:7d:cf:e1:57:2f:9b:
69:f1:42:6c:0a:2e:5e:a9:df:f6:f3:e7:d7:c3:57:30:8d:eb:
5e:27:0a:d5:1e:21:ea:b9:99:3e:75:91:af:1e:dd:10:eb:a3:
30:55:39:ce:fd:20:07:13:91:5e:0e:5c:ce:53:6a:4e:77:58:
ef:de:09:7f:98:2a:68:8e:bb:79:6c:24:e5:6f:f8:2e:29:c6:
ac:63:91:4d:b4:28:cb:1e:3e:e0:43:52:8a:36:59:f8:79:82:
c2:ea:7b:83:8e:88:e3:7d:f5:ac:85:e0:7d:e8:0b:de:c3:54:
5e:e4:85:f1:1c:5c:5d:69:57:b8:1e:b5:fa:63:db:95:12:f1:
80:9b:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:56 2025 by rpki-client