Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/cbtDU2QhUAaEdfn79ud9d1retQE.roa
File: cbtDU2QhUAaEdfn79ud9d1retQE.roa (raw, json)
Hash identifier: zIapCEP1U16iRYVZKfI5rkQeutzKrMtnN/VL2r5jtgA=
Subject key identifier: 71:BB:43:53:64:21:50:06:84:75:F9:FB:F6:E7:7D:77:5A:DE:B5:01
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 019422200A56C27DBD19767884C01C203320
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/cbtDU2QhUAaEdfn79ud9d1retQE.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30788
IP address blocks: 2a07:5340::/29 maxlen: 29
2a12:c0::/29 maxlen: 29
2a12:23c0::/29 maxlen: 29
2a12:2940::/29 maxlen: 29
2a12:3540::/29 maxlen: 29
2a12:4340::/29 maxlen: 29
2a12:b580::/29 maxlen: 29
2a12:e580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0a:56:c2:7d:bd:19:76:78:84:c0:1c:20:33:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71bb4353642150068475f9fbf6e77d775adeb501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:81:59:b5:c3:cf:cb:85:14:52:d4:8f:fb:
5f:d0:ea:2d:17:7e:7f:e5:98:13:60:9b:8c:db:ed:
ec:7e:4a:46:80:dc:5d:b1:75:c0:01:62:17:f6:d9:
0b:38:7f:c7:14:ae:ec:6d:7a:d8:79:ed:e3:01:db:
bc:48:ae:2f:b5:f8:98:11:c6:21:56:92:e1:fb:89:
80:24:4f:d8:0f:15:9d:46:e2:a7:8a:ba:c2:c6:95:
42:bc:29:d9:f3:83:94:62:e4:aa:48:b5:97:16:e0:
4b:56:85:ce:60:f5:21:c8:39:dc:ff:70:e1:86:8f:
7c:d0:36:a8:81:85:39:78:ab:87:6a:6a:17:70:88:
49:c2:5b:08:d0:9f:95:a3:d5:d5:c9:7c:31:68:91:
33:4c:30:58:c6:dd:bb:b8:64:55:b3:77:ed:28:b9:
d1:a1:93:5f:ec:e2:97:b8:d3:dd:96:ef:0f:a0:b9:
2f:33:6f:5b:02:71:89:b4:a0:46:68:49:b2:96:26:
95:77:f0:ff:30:f3:de:3e:51:ad:9b:f4:74:15:2f:
5d:51:45:1e:ac:7d:95:19:cc:1b:ec:7f:8a:0f:30:
28:c6:dc:8b:54:3a:bf:94:12:20:cc:d5:f0:f9:94:
d5:0f:56:84:f7:6a:44:56:92:08:82:a9:24:ab:03:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BB:43:53:64:21:50:06:84:75:F9:FB:F6:E7:7D:77:5A:DE:B5:01
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/cbtDU2QhUAaEdfn79ud9d1retQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5340::/29
2a12:c0::/29
2a12:23c0::/29
2a12:2940::/29
2a12:3540::/29
2a12:4340::/29
2a12:b580::/29
2a12:e580::/29
Signature Algorithm: sha256WithRSAEncryption
8e:c2:29:52:e5:24:b6:ea:81:c8:2c:ca:2a:e8:27:01:01:f3:
9f:88:96:be:70:2a:32:64:1e:87:e8:d5:56:ec:7d:56:37:1d:
30:60:7d:8c:bc:e1:a8:d5:24:76:31:bd:d6:b1:e4:a1:95:ed:
29:c3:18:7c:59:ca:2b:38:a2:aa:63:9e:90:85:7d:d4:d5:2c:
7c:e1:2e:af:de:a9:17:cf:62:65:8b:bc:61:49:de:32:ee:4d:
14:8b:95:35:c2:38:59:13:17:ca:14:d2:42:53:14:19:8c:78:
18:ea:84:00:fe:f7:67:2d:af:82:f5:91:75:1c:e2:37:23:b2:
f6:7d:9a:f5:b8:98:ef:47:4c:47:89:05:b7:87:3c:03:fd:09:
74:ca:9c:ba:0f:fb:12:6c:57:a6:1b:e0:80:3b:d7:5d:78:fa:
dd:4d:ac:77:ab:2a:58:89:4d:7f:8f:c6:91:74:60:77:87:c2:
82:df:5b:5e:6a:e8:65:60:b5:00:56:c8:41:aa:ea:1c:99:8b:
58:b0:c3:21:cf:bb:16:ae:08:9d:ee:e4:c4:a4:b1:3f:dc:a4:
3a:29:d9:91:64:1b:58:b4:0f:69:62:f0:bc:86:f0:b8:f6:1f:
a8:c3:9d:0e:0c:73:f0:ca:b9:78:04:12:56:f4:c0:9b:a3:dd:
b7:a9:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:02 2025 by rpki-client