Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/AT0dJX8We-n1OQnzvfJggA9FrB4.roa
File: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (raw, json)
Hash identifier: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=
Subject key identifier: 01:3D:1D:25:7F:16:7B:E9:F5:39:09:F3:BD:F2:60:80:0F:45:AC:1E
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 01942747D71CD62FC472391BBEA348FB46A3
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/AT0dJX8We-n1OQnzvfJggA9FrB4.roa
Signing time: Thu 02 Jan 2025 13:50:06 +0000
ROA not before: Thu 02 Jan 2025 13:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200549
IP address blocks: 2a00:5ac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d7:1c:d6:2f:c4:72:39:1b:be:a3:48:fb:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=013d1d257f167be9f53909f3bdf260800f45ac1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:14:7f:4d:7f:32:c2:61:a5:0d:e9:9e:74:
a4:3c:1a:71:74:25:cd:5e:2b:33:a5:56:6b:67:5b:
f7:ee:89:52:d0:66:e5:ec:87:52:95:4d:5c:00:75:
d4:ed:75:76:14:d4:26:9c:db:7e:69:af:80:6a:0d:
2d:05:64:0b:55:b1:41:4a:4a:df:13:24:d0:5f:63:
8e:5f:1f:52:a5:62:77:f7:9e:d0:a7:a7:9e:20:e9:
7d:98:33:84:b7:db:7b:df:bc:03:0f:16:74:cb:dd:
51:b5:d0:cd:cb:52:73:52:3d:44:6f:89:3a:c3:53:
79:f3:32:30:72:67:c1:16:11:16:03:5b:db:11:c9:
2c:e7:32:82:7e:7a:20:c7:56:1b:cf:df:80:96:e2:
ca:38:bf:e6:1e:cb:61:1f:fa:e9:29:2d:7a:21:59:
41:af:84:7e:cf:37:dc:0c:5c:59:f6:d3:9a:5c:fc:
02:b2:9d:ac:6d:3f:48:d0:fc:1e:c7:94:df:02:db:
19:16:31:8f:45:3b:65:9e:17:e3:45:14:32:35:69:
9d:31:f3:a2:62:d5:e6:71:cc:65:b5:84:78:a9:33:
00:bd:1f:8a:b6:69:a1:6e:a8:41:5e:55:6b:d2:51:
1c:59:6b:3d:5f:e5:e1:44:d7:98:7d:bb:55:3c:cc:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3D:1D:25:7F:16:7B:E9:F5:39:09:F3:BD:F2:60:80:0F:45:AC:1E
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/AT0dJX8We-n1OQnzvfJggA9FrB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:5ac0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ac:3a:8c:d9:ca:d7:cb:99:62:6e:32:a9:9b:cc:a2:75:5f:
a1:f9:6b:34:a4:c2:da:1a:9d:bd:8a:38:13:33:91:08:ed:e3:
0f:82:13:cb:be:05:4b:64:bd:d1:92:a1:e4:54:0d:77:e5:9c:
e7:03:ed:ba:22:de:1f:82:5c:18:44:ed:ee:55:7a:15:c3:df:
92:29:ac:c1:a7:bc:74:15:05:df:d2:be:ce:43:48:f3:96:6d:
cc:66:e7:94:7c:45:0f:57:f8:37:18:5a:21:5c:29:47:48:15:
8d:98:cd:89:c6:22:6f:26:32:29:9e:d3:b3:70:07:fa:97:b3:
af:90:95:83:bb:d8:a2:b1:ef:b4:c5:8c:2a:87:5e:25:c8:19:
eb:ae:61:0e:5c:bd:14:48:1d:b6:69:cd:be:12:e4:8c:87:a9:
ce:89:42:98:64:5c:ab:35:a3:fa:49:44:d3:71:a3:e1:9e:9d:
b5:88:bd:b1:a0:8c:54:03:1b:17:4c:9b:79:7e:70:2b:9f:6e:
44:d9:d5:5e:b6:fc:03:01:47:73:7c:50:e9:c8:be:b9:3d:59:
62:d9:ab:48:d3:e3:bf:86:c7:19:16:7a:04:e4:ad:cf:cd:a3:
43:77:70:5c:b6:64:7d:65:f4:60:12:a9:40:12:35:99:52:b2:
68:98:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:13 2025 by rpki-client