Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/teMwMSwPA3-F4vol9ETLj2WtxFY.roa
File: teMwMSwPA3-F4vol9ETLj2WtxFY.roa (raw, json)
Hash identifier: jRV18qs4Oqvl+5Rg565sSbnD8VZanVlGgbn4N+yFxXY=
Subject key identifier: B5:E3:30:31:2C:0F:03:7F:85:E2:FA:25:F4:44:CB:8F:65:AD:C4:56
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D987BE0B811315E807C238DD969AB6
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/teMwMSwPA3-F4vol9ETLj2WtxFY.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209484
IP address blocks: 2a03:5840:f3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:87:be:0b:81:13:15:e8:07:c2:38:dd:96:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e330312c0f037f85e2fa25f444cb8f65adc456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:74:1f:61:9f:1b:00:c5:30:01:d4:c2:d1:
06:ba:c8:9a:00:12:ca:0a:d2:29:9e:a9:0f:67:ed:
f2:b6:fc:a3:c9:3c:67:7c:ec:e3:c3:7a:60:c0:51:
da:97:44:f3:12:28:73:86:86:9f:30:ea:bf:ff:e4:
f0:dd:a0:34:ab:fd:72:82:47:7c:bc:79:c7:eb:c1:
af:04:e0:e8:cb:5e:ec:9d:01:85:b9:e9:17:1d:84:
42:08:4b:d0:68:39:4a:21:41:b3:63:f2:f0:4a:fb:
19:3a:54:6d:ab:7c:a7:04:09:70:08:d2:fa:2f:a5:
5d:e4:63:80:d8:84:e6:77:59:13:9d:77:59:77:d0:
2b:12:80:31:21:41:cb:68:62:01:53:4d:0c:ef:15:
98:c4:1a:32:bb:db:69:c0:ef:1a:a8:ff:71:80:cf:
d2:52:8d:c2:44:59:f4:4f:73:27:05:32:24:0c:90:
7e:be:56:43:98:11:02:d2:60:a9:eb:04:3a:95:25:
1d:cc:e5:1b:d3:4f:97:15:29:9a:55:43:c5:2d:e8:
57:37:9d:bd:70:1b:f5:44:12:d0:d4:f4:3c:be:cc:
97:51:61:f0:a5:e5:cb:8b:5c:bc:a0:79:9f:d6:64:
2d:13:22:8a:30:a8:c7:2c:05:4b:4f:15:ca:36:1e:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E3:30:31:2C:0F:03:7F:85:E2:FA:25:F4:44:CB:8F:65:AD:C4:56
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/teMwMSwPA3-F4vol9ETLj2WtxFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f3::/48
Signature Algorithm: sha256WithRSAEncryption
57:7b:87:99:06:35:0c:c2:78:92:47:27:8d:15:56:d3:88:aa:
bf:44:c2:d6:90:6e:fd:73:02:08:94:e3:fe:ac:f6:07:94:9a:
07:4e:65:53:b0:4a:df:c2:c2:3f:7a:a1:ea:41:34:a1:39:97:
92:de:ce:aa:05:23:c8:10:be:c7:d5:24:57:7e:ac:69:c2:da:
72:cb:1b:f8:27:fe:e1:50:d4:eb:64:f4:1f:3c:98:43:bf:23:
2a:50:8d:be:2b:8e:f7:f0:c5:68:69:f2:3c:f3:f8:e0:58:aa:
fa:63:fc:05:21:73:1d:26:2e:d9:61:02:68:f8:0f:56:80:1d:
fe:90:7d:fb:07:01:33:39:7e:57:bd:d0:e4:00:12:f9:07:36:
b9:07:01:cc:29:b1:c1:e4:5b:cc:1b:68:4a:d5:e8:10:db:fb:
db:77:18:c5:d2:a8:2c:1b:87:6d:90:13:21:df:27:08:13:5d:
8f:6e:aa:97:8d:d7:55:09:19:74:39:a9:b1:bc:ab:29:5b:75:
de:b1:c2:3a:15:8f:ac:d6:54:b0:b4:4c:52:74:ee:92:6e:bd:
e5:23:45:6b:75:9f:cd:22:f0:57:7c:78:4a:a2:45:a0:d8:f8:
15:55:e3:29:65:a9:3f:bf:ef:31:59:a3:8a:46:76:e6:dc:92:
fa:ac:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:33:24 2025 by rpki-client