Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/314MaBVE3hjtYKkC4-99ME_UBjc.roa
File: 314MaBVE3hjtYKkC4-99ME_UBjc.roa (raw, json)
Hash identifier: 7UXNIyhk1ejIJ/HGQxCr8shkd1oXUhsfxNUgODxpVqQ=
Subject key identifier: DF:5E:0C:68:15:44:DE:18:ED:60:A9:02:E3:EF:7D:30:4F:D4:06:37
Certificate issuer: /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Certificate serial: 019426D8BB066A63321A9AC873F75CFE7F99
Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/314MaBVE3hjtYKkC4-99ME_UBjc.roa
Signing time: Thu 02 Jan 2025 11:48:45 +0000
ROA not before: Thu 02 Jan 2025 11:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210883
IP address blocks: 2a07:1c40::/29 maxlen: 128
2a11:4280::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:bb:06:6a:63:32:1a:9a:c8:73:f7:5c:fe:7f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c
Validity
Not Before: Jan 2 11:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df5e0c681544de18ed60a902e3ef7d304fd40637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:2a:0c:3a:76:fa:c7:b9:4a:5a:43:8f:5b:
2e:75:4c:8f:29:46:a1:b3:70:0d:2b:8f:20:f5:ba:
75:b1:45:da:2a:1d:89:b8:79:fe:13:3a:b9:db:9b:
eb:70:fa:f9:7c:03:a0:e9:02:67:a2:b9:f5:00:61:
ba:94:60:79:1c:97:45:85:90:b5:d0:92:88:03:00:
7b:e5:a2:0a:18:5b:24:d3:6c:8f:98:d8:6b:90:df:
d5:b4:6d:49:0e:60:e6:5d:4f:de:f3:12:ac:47:b3:
27:7c:24:9c:13:4c:f1:07:78:25:e2:92:58:60:8f:
0f:55:b5:6d:f9:b6:6a:93:a2:ad:30:be:1f:35:f4:
de:8d:8d:4b:ec:58:79:61:95:c3:a2:95:a6:84:e6:
b8:f5:fc:82:bf:db:ba:fe:a0:c4:b6:69:93:12:45:
71:6f:a8:99:28:12:5b:c5:9a:ae:a7:ea:3e:d7:71:
ef:d3:7a:a3:fa:2f:06:15:00:f8:fc:91:d8:c9:f5:
01:85:39:3d:b0:a1:23:64:d4:f6:2a:a9:e8:c9:8e:
05:ac:f1:1e:9f:5d:2a:4f:df:9c:6b:ec:9d:95:26:
cd:da:80:f7:eb:7f:fb:2a:3d:19:70:67:2b:ae:97:
13:74:e7:ee:c5:85:92:3c:6c:06:af:5f:f0:ea:8b:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:0C:68:15:44:DE:18:ED:60:A9:02:E3:EF:7D:30:4F:D4:06:37
X509v3 Authority Key Identifier:
keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/314MaBVE3hjtYKkC4-99ME_UBjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:1c40::/29
2a11:4280::/29
Signature Algorithm: sha256WithRSAEncryption
65:fa:a3:32:ae:38:9d:ac:b0:1a:c0:93:30:33:82:49:06:20:
17:15:f8:94:8d:73:1c:8f:60:07:86:5e:3e:76:bf:b5:0c:d6:
5e:3e:cf:62:a4:05:1b:3b:29:90:16:b4:3e:9d:54:b1:db:7a:
6a:63:e7:a5:51:a4:08:d5:9d:80:cd:e0:b0:9f:d9:bf:5d:9e:
29:0a:c8:50:05:c9:44:2f:04:2b:63:5a:6a:94:09:9e:da:a0:
2d:d7:da:29:e6:c6:15:e7:db:59:20:05:ea:15:99:b3:84:7a:
98:82:cf:a3:0a:d2:12:f6:92:a1:98:7a:71:d9:e8:5f:56:37:
7e:0d:33:5b:a8:a8:06:80:d3:0c:54:49:46:f3:da:1d:42:3d:
ad:50:be:e2:e1:a8:6f:ab:48:8b:c9:b9:bb:e4:82:a7:14:06:
45:20:1c:b2:bf:51:72:76:02:82:63:b2:3c:38:04:9b:eb:d2:
61:48:95:ea:a6:0b:c1:17:8b:a5:4d:18:05:4d:5f:c7:13:69:
69:05:17:7a:eb:a5:89:0a:65:e2:5f:e0:c7:c6:ce:16:29:42:
da:e0:a5:ad:3a:23:35:00:ac:d1:28:64:fe:a7:20:bf:51:08:
81:3f:4d:7e:ff:8a:c6:c2:3b:b1:22:55:8e:68:f1:7c:e6:aa:
83:bd:cc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:02 2025 by rpki-client