Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/ScAR3uPyATYgU_nmPSEp-uOF-dw.roa
File: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (raw, json)
Hash identifier: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=
Subject key identifier: 49:C0:11:DE:E3:F2:01:36:20:53:F9:E6:3D:21:29:FA:E3:85:F9:DC
Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial: 01962B573D67A29BA287EA824A18537BB64E
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/ScAR3uPyATYgU_nmPSEp-uOF-dw.roa
Signing time: Sat 12 Apr 2025 18:50:59 +0000
ROA not before: Sat 12 Apr 2025 18:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208223
IP address blocks: 2a12:3fc2:df00::/40 maxlen: 40
2a12:3fc2:df11::/48 maxlen: 48
2a12:3fc2:dfaa::/48 maxlen: 48
2a12:3fc2:dfca::/48 maxlen: 48
2a12:3fc2:dfce::/48 maxlen: 48
2a12:3fc2:dfcf::/48 maxlen: 48
2a12:3fc2:dfd2::/48 maxlen: 48
2a12:3fc2:dfd5::/48 maxlen: 48
2a12:3fc2:dfd6::/48 maxlen: 48
2a12:3fc2:dfd8::/48 maxlen: 48
2a12:3fc2:dfd9::/48 maxlen: 48
2a12:3fc2:dfda::/48 maxlen: 48
2a12:3fc2:dfdb::/48 maxlen: 48
2a12:3fc2:dfdc::/48 maxlen: 48
2a12:3fc2:dfdd::/48 maxlen: 48
2a12:3fc2:dfde::/48 maxlen: 48
2a12:3fc2:dfdf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:57:3d:67:a2:9b:a2:87:ea:82:4a:18:53:7b:b6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Validity
Not Before: Apr 12 18:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49c011dee3f201362053f9e63d2129fae385f9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:c8:5e:fa:d1:0c:81:64:06:3e:22:48:19:
69:c1:89:2a:86:92:2b:d9:71:1e:62:46:a9:49:21:
01:de:8d:58:65:42:28:c0:3c:77:65:d9:88:48:86:
ea:10:ed:5b:84:85:f5:c4:19:1d:fc:30:74:18:d3:
50:ca:67:c0:a6:ad:37:9d:68:12:74:11:81:3d:45:
da:1d:bd:4a:85:15:20:27:b9:63:6d:15:74:e3:88:
ea:09:62:e7:c6:56:b5:59:52:f7:9a:99:62:4a:a8:
fb:21:ea:8a:8a:e2:5f:32:34:6a:33:c6:af:09:6a:
b4:94:29:af:5f:cd:3c:d7:be:ee:49:dc:f0:bc:70:
05:20:5c:61:0b:50:9b:71:be:c8:52:74:76:91:36:
4a:5e:93:ee:67:84:33:fe:2c:98:6c:dc:5a:23:0b:
80:0d:1a:b0:96:14:b9:19:c8:48:06:b0:af:02:2d:
e4:da:3c:c7:d9:ac:cf:de:33:f6:77:b7:ff:3d:d4:
31:25:1d:9b:fa:8a:c3:39:c3:3c:17:72:bf:a5:8a:
c0:47:6f:3f:f3:d0:45:46:53:ea:ec:58:dc:a1:be:
54:38:20:06:8d:ce:47:51:30:55:7b:02:d6:13:45:
18:5f:c6:e0:79:08:bf:6f:1f:58:53:c2:86:1e:c8:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:11:DE:E3:F2:01:36:20:53:F9:E6:3D:21:29:FA:E3:85:F9:DC
X509v3 Authority Key Identifier:
keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/ScAR3uPyATYgU_nmPSEp-uOF-dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:df00::/40
Signature Algorithm: sha256WithRSAEncryption
0f:2e:3b:11:90:0a:da:24:79:ae:26:1a:c1:cd:19:ba:fb:47:
01:b4:21:19:96:89:34:29:9e:38:b1:a4:96:c8:7f:ba:8b:97:
62:fa:7c:ca:58:59:0b:86:13:b0:b8:ce:ec:1c:dc:f8:60:10:
57:27:b2:ef:ac:90:cd:ed:84:f8:36:69:4c:ef:ef:f4:79:5a:
f9:67:64:48:7f:e4:a2:f8:5a:40:e1:62:c1:58:67:28:05:08:
b5:01:ff:66:f4:a0:9e:d9:6f:e4:cc:e8:b2:bb:86:c0:56:79:
9c:bc:63:84:b9:19:c4:c9:16:4e:11:8d:c2:bd:9b:5d:a2:85:
dc:50:de:f3:c7:fd:05:d9:ad:03:15:3a:69:b0:c7:4b:71:11:
ad:ed:b9:95:36:e1:44:26:1b:15:0e:88:3a:00:ac:77:2c:1c:
e1:17:2a:0c:be:63:f1:cd:90:0a:c3:12:23:ac:dd:09:1d:fa:
9d:d1:7f:c1:00:d7:78:84:45:e6:8f:51:f6:84:9b:27:9f:57:
ad:af:89:39:1d:2c:52:61:d1:14:de:82:50:c6:d6:8e:0d:46:
e8:1b:b6:51:4e:c1:67:07:e0:0e:04:47:b4:31:cb:88:84:a6:
80:fa:82:b6:df:66:f4:56:8f:ed:43:01:20:49:b2:3f:7d:2b:
4c:31:ad:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:05 2025 by rpki-client