Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/SAAncdb2H87xzD0WkojsMdkjI9E.roa
File: SAAncdb2H87xzD0WkojsMdkjI9E.roa (raw, json)
Hash identifier: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=
Subject key identifier: 48:00:27:71:D6:F6:1F:CE:F1:CC:3D:16:92:88:EC:31:D9:23:23:D1
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 01942067C2FF9C17B44230EEB4FC8A0095AF
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/SAAncdb2H87xzD0WkojsMdkjI9E.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202685
IP address blocks: 2a10:7dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c2:ff:9c:17:b4:42:30:ee:b4:fc:8a:00:95:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48002771d6f61fcef1cc3d169288ec31d92323d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:c7:4b:f3:31:29:91:30:d2:2c:fe:e8:a4:
03:6a:24:20:8c:1b:b7:36:a7:89:b1:c7:1b:66:7b:
a2:ad:c6:cc:3d:e9:36:4e:8d:b4:11:8a:e2:e3:52:
4c:cb:12:42:c4:5b:f7:32:27:17:2b:a6:df:fe:29:
96:c8:a5:d2:71:5b:e1:3d:3b:87:5f:fa:9e:c4:3e:
b3:ec:dc:58:1b:38:a5:0a:61:14:71:6e:82:5d:ad:
9d:2f:ea:19:24:89:7a:72:9e:6b:79:92:6c:23:f6:
ab:f3:5e:7b:60:f7:40:7c:d2:b2:9b:c7:79:41:76:
ac:f1:fe:c6:b2:cd:77:eb:65:66:d5:3b:55:b7:e2:
19:e4:e0:ca:70:46:2f:c6:03:c8:4a:04:34:c0:a3:
f7:b4:f4:f7:88:5a:d6:55:d6:e0:cc:31:52:3d:e4:
aa:22:77:2d:87:dd:80:9e:3e:a1:75:a3:62:8c:66:
02:aa:bc:db:cd:6e:7b:35:e3:35:de:e9:14:e4:6b:
e8:70:c4:e6:4d:8a:77:85:82:0e:88:92:94:44:26:
f9:bb:38:a9:1b:25:28:0d:f4:a4:23:f7:09:bd:ab:
e2:ec:e0:d3:32:3f:64:7b:a2:4d:d2:fb:96:50:6c:
cc:90:3d:e4:c4:79:1d:0b:e8:24:14:d5:20:f4:af:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:00:27:71:D6:F6:1F:CE:F1:CC:3D:16:92:88:EC:31:D9:23:23:D1
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/SAAncdb2H87xzD0WkojsMdkjI9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7dc0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:20:8c:b1:c3:f4:12:4e:45:5e:8c:06:37:c4:f1:c0:6a:ac:
0d:c2:e4:0c:79:0a:a3:64:55:2b:1e:ec:93:93:ef:27:b8:97:
76:7c:cd:19:39:38:00:0e:a9:99:e0:45:9e:34:70:a2:fd:db:
dc:5a:f6:41:12:d6:57:02:34:ab:e1:bc:2b:de:8a:7f:2e:56:
1a:a5:c2:eb:10:97:48:f1:28:5d:6d:95:37:24:cc:b4:8b:18:
5d:00:3a:61:1d:0d:fb:b6:67:0c:01:f4:a0:ca:05:6b:16:31:
70:7f:08:59:2e:bb:75:d5:f8:64:5c:d1:02:1e:a1:cb:49:8a:
65:ef:04:ac:a1:6a:9b:43:67:a2:d8:73:0d:2a:f9:2f:f9:e1:
74:24:fb:bc:49:42:ed:b4:1f:d4:fc:ab:6e:ee:cf:58:44:48:
10:83:f3:c9:ca:f0:cd:93:35:08:7a:5a:59:df:5a:50:3b:13:
d4:08:41:a3:ab:bc:a2:df:5c:c7:ec:c3:f2:3d:f0:04:b5:bf:
1c:49:38:5f:15:87:a5:f5:23:bf:cd:45:23:d0:1b:fb:3b:75:
d8:70:38:0e:43:d5:c8:a8:0f:a9:23:79:7a:9a:af:8d:bc:08:
10:25:9e:d9:29:3f:87:62:ef:25:b7:45:5e:c6:9b:54:d4:62:
d6:d4:26:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:15:54 2025 by rpki-client