Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VTwTBdjABrPr7s-Ij-N8eXwDwU4.roa
File: VTwTBdjABrPr7s-Ij-N8eXwDwU4.roa (raw, json)
Hash identifier: X4lmmcWBA5/Rigrr2hDvJYqpHNBA/8c1SUAx9fNx0LQ=
Subject key identifier: 55:3C:13:05:D8:C0:06:B3:EB:EE:CF:88:8F:E3:7C:79:7C:03:C1:4E
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EEF977B1A55C06B05BF38FCEB2074
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VTwTBdjABrPr7s-Ij-N8eXwDwU4.roa
Signing time: Thu 02 Jan 2025 05:48:31 +0000
ROA not before: Thu 02 Jan 2025 05:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214899
IP address blocks: 2a0e:aa07:e1e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ef:97:7b:1a:55:c0:6b:05:bf:38:fc:eb:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=553c1305d8c006b3ebeecf888fe37c797c03c14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:e3:06:6b:c9:dc:2e:72:97:56:1a:f3:a1:
f3:8b:3c:e2:77:fe:6a:1b:29:fd:7f:58:8a:d0:51:
d9:6f:f7:07:03:35:0e:6a:72:6a:b7:40:06:9d:8d:
26:65:5d:6f:98:ed:b0:05:45:3a:9f:ad:02:fd:79:
82:24:62:83:43:3f:ba:39:f8:b1:63:67:e6:fa:9b:
f6:9f:39:6d:03:9f:53:3e:14:c9:29:57:f5:bb:d3:
6e:f8:f1:74:24:65:44:fa:24:ab:cf:e1:27:3c:0c:
0c:58:a7:72:95:09:cb:84:0f:86:8e:f4:b7:99:cc:
05:a5:37:f8:88:03:d2:ab:56:76:f1:87:f2:b3:aa:
74:0c:62:ca:8f:df:93:76:f9:6b:c8:8e:f7:c1:17:
1b:60:5b:17:d9:50:34:1b:4f:69:b3:b0:02:ea:60:
89:ba:c8:02:b2:de:87:d0:31:02:2c:99:62:a9:db:
69:ce:8a:38:c8:a5:ed:86:ce:e6:bb:ef:aa:e2:35:
e8:d5:0e:e2:83:03:82:2d:24:5d:4b:ac:95:d1:02:
a6:e3:17:7f:54:62:a0:0c:eb:48:4d:ed:19:cc:d6:
01:d4:47:35:b0:83:7e:63:82:be:5a:94:0b:7a:1b:
41:e0:77:34:b7:85:3b:26:67:1f:ca:bb:48:bc:f4:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3C:13:05:D8:C0:06:B3:EB:EE:CF:88:8F:E3:7C:79:7C:03:C1:4E
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VTwTBdjABrPr7s-Ij-N8eXwDwU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e1e0::/44
Signature Algorithm: sha256WithRSAEncryption
c5:3a:27:a0:4e:a3:03:f1:07:94:fc:61:07:70:bc:9f:31:f1:
18:91:e3:ef:6b:0c:33:09:6c:e0:59:ae:37:4f:c5:93:2d:e6:
e6:14:b8:3e:3e:4c:e7:73:ce:2f:ac:27:c8:18:b8:43:74:ef:
a7:3e:65:84:67:9e:eb:ae:33:61:64:af:bc:4d:2d:8c:f0:8d:
c5:84:2c:c8:96:0a:fe:a5:44:4c:e0:e7:4f:2b:14:45:9c:7d:
3c:b9:77:fa:38:6d:b6:fa:30:73:19:3c:9c:1a:6b:fe:f9:99:
4e:65:af:15:43:e6:97:fb:8a:43:29:64:51:00:8c:41:24:01:
db:f0:60:8a:d4:24:16:db:4a:8f:77:fb:f4:0a:86:84:e9:59:
e1:9c:e3:ff:6c:ff:72:d7:b9:3c:71:8d:b9:5f:72:bd:53:b7:
85:57:ab:c7:0d:5b:8d:c9:b0:87:0b:d2:df:68:18:0f:db:3c:
63:a4:99:56:63:e9:c3:02:1a:97:6c:dc:f4:cb:e8:bc:db:97:
55:91:b6:6e:03:d4:1a:66:f4:c5:40:6d:95:c9:53:b9:46:b5:
18:82:3e:23:87:4b:1c:b1:43:38:3a:56:55:fb:aa:31:4b:40:
79:4c:6c:b3:e2:a2:2b:eb:b9:65:ac:45:4d:f7:05:17:79:54:
e8:fc:d9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:15 2025 by rpki-client