Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/agadNAkdL8gZSJjhebbq78b-GQQ.roa
File: agadNAkdL8gZSJjhebbq78b-GQQ.roa (raw, json)
Hash identifier: AWs3/nEl7KZJPMZNEu10pqsOCcoVUqcD7DcXZsQJMg8=
Subject key identifier: 6A:06:9D:34:09:1D:2F:C8:19:48:98:E1:79:B6:EA:EF:C6:FE:19:04
Certificate issuer: /CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Certificate serial: 019423D6E4C87485D31ECCFB911609C7425D
Authority key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/agadNAkdL8gZSJjhebbq78b-GQQ.roa
Signing time: Wed 01 Jan 2025 21:47:53 +0000
ROA not before: Wed 01 Jan 2025 21:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12625
IP address blocks: 193.29.64.0/19 maxlen: 24
2a00:7440::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e4:c8:74:85:d3:1e:cc:fb:91:16:09:c7:42:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Validity
Not Before: Jan 1 21:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a069d34091d2fc8194898e179b6eaefc6fe1904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:14:3b:0a:dc:86:33:08:ba:5b:5a:1a:ea:
8b:bf:c0:10:f0:5f:ba:be:03:6b:41:d8:80:0c:95:
a0:f8:59:13:7a:1f:e0:9a:06:23:c2:53:ef:6b:ec:
cd:46:0d:b9:2c:33:f4:d5:68:58:9c:b4:de:dd:fb:
f6:63:14:93:ae:28:4d:fa:b6:b9:11:83:c1:b7:e4:
8b:37:2e:3d:73:58:1b:6c:0d:87:f9:f1:43:7b:08:
d3:ef:9e:d5:56:85:51:7c:e9:c6:b6:d1:bc:ed:8e:
bc:9f:b4:2c:74:ac:13:b8:83:63:a1:13:1e:38:ed:
89:18:40:fe:9c:2e:b0:45:d0:8f:25:8f:e6:0f:a0:
1d:dd:73:8d:68:03:2b:7f:36:33:43:3d:1c:9e:81:
bf:b3:6e:d9:dc:90:29:a0:47:8b:4b:d3:94:e3:94:
c1:73:b3:03:34:ac:09:b3:1e:95:0c:2d:92:69:a3:
49:b4:ac:48:a5:87:be:24:ba:60:af:6b:fd:8e:00:
9e:6e:c4:77:14:cf:75:f4:e7:c4:67:26:23:cb:fd:
8e:01:d1:25:30:92:63:ab:04:2b:34:70:5f:ed:7b:
20:e7:93:f4:a8:b5:ce:7b:54:3c:0f:7b:c1:cf:32:
40:df:71:dc:7d:62:e3:a8:d0:e0:f3:40:29:dd:61:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:06:9D:34:09:1D:2F:C8:19:48:98:E1:79:B6:EA:EF:C6:FE:19:04
X509v3 Authority Key Identifier:
keyid:54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/agadNAkdL8gZSJjhebbq78b-GQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.64.0/19
IPv6:
2a00:7440::/32
Signature Algorithm: sha256WithRSAEncryption
b1:ad:9e:02:51:9d:ed:06:51:65:fa:a1:ad:11:49:5b:68:c6:
37:f4:c2:aa:74:78:e9:62:66:5d:f2:2f:0a:ce:14:a1:1f:a1:
9f:b9:b2:43:77:3b:49:fd:b6:2b:fa:4a:4a:ec:65:3d:e9:f2:
63:87:95:cf:fa:70:16:d2:ba:6e:99:8c:44:18:84:0d:33:aa:
92:8a:50:aa:9d:40:85:cc:66:24:51:e6:b6:ba:3e:9c:f5:d2:
b7:13:98:7c:c0:41:39:33:9f:8e:ed:cb:c1:15:1c:c2:2e:89:
42:b3:62:43:94:f3:8c:39:91:6d:7f:41:f5:27:89:84:5c:12:
e3:4f:b6:fb:c6:28:7e:90:bd:ce:bf:6e:27:4a:8a:d6:29:0c:
74:c6:82:30:48:38:e0:b6:33:da:2a:9f:87:68:06:c4:1d:89:
3a:a4:4a:75:7d:f5:43:ac:b3:70:3f:4d:3c:7f:81:c9:80:08:
e6:15:05:c7:ef:e4:83:7a:11:ae:99:78:b9:0f:47:b2:af:33:
32:0a:b6:e6:ce:fb:ab:1b:8a:53:f3:ad:aa:90:3a:de:59:05:
3b:c1:e1:46:a6:85:1b:fe:04:b3:61:f7:2b:04:1f:dd:0f:50:
7d:e6:56:52:c1:11:d3:f9:44:b2:b5:de:7a:96:32:f8:0d:8e:
9d:6a:d4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:22 2025 by rpki-client