Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/2Hraw_035LFjMHYSLsx9heu2d1s.roa
File: 2Hraw_035LFjMHYSLsx9heu2d1s.roa (raw, json)
Hash identifier: 1Arlde/+dOG+KuNRrtiQ+Jug7zuSw6YkJDNU3YfLjyI=
Subject key identifier: D8:7A:DA:C3:FD:37:E4:B1:63:30:76:12:2E:CC:7D:85:EB:B6:77:5B
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067EDB743CB30D5A02801AFB6ED04B9
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/2Hraw_035LFjMHYSLsx9heu2d1s.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203631
IP address blocks: 2a12:3fc2:aa70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ed:b7:43:cb:30:d5:a0:28:01:af:b6:ed:04:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d87adac3fd37e4b1633076122ecc7d85ebb6775b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:aa:63:00:c6:11:37:e2:0e:13:72:c4:53:
4d:06:93:8b:97:b9:c0:76:13:b0:15:77:bf:3e:a6:
b8:f4:e3:6b:02:99:13:38:5e:68:02:ed:c0:3b:c1:
a9:0b:1f:e4:df:35:eb:b6:15:d8:ac:99:ca:44:d3:
61:32:50:4f:c8:c2:a5:92:ba:f0:c8:d4:2d:d1:4b:
c6:06:6c:13:3d:b6:83:ec:7a:be:86:08:f0:10:6b:
36:ae:77:9a:d1:d9:7d:06:2e:3c:c0:f5:a9:42:fc:
7c:0f:59:15:e3:ff:7f:04:d6:51:36:82:a0:7b:88:
58:f1:9e:f6:d8:fd:51:a8:9c:d0:ed:39:79:d5:90:
77:78:02:05:fa:b4:65:5c:a0:f8:76:af:af:62:18:
8a:54:49:6b:48:f0:38:46:fc:11:49:a5:e4:96:42:
b8:b3:4a:34:e4:49:d9:3a:e5:7b:9a:43:e8:6e:ae:
b1:da:60:70:70:d4:d4:cf:3a:49:98:68:da:37:f0:
e3:ba:e6:c4:1a:c4:0e:5f:c8:28:cc:4d:1d:61:86:
8d:bd:d2:ab:19:26:4b:90:87:70:a1:7f:2a:dc:b5:
c7:e8:e5:2f:40:ca:84:2b:5c:a5:1e:8c:be:9d:32:
82:04:7c:37:87:42:f7:1c:3f:5e:54:62:01:54:a4:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7A:DA:C3:FD:37:E4:B1:63:30:76:12:2E:CC:7D:85:EB:B6:77:5B
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/2Hraw_035LFjMHYSLsx9heu2d1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa70::/44
Signature Algorithm: sha256WithRSAEncryption
35:3e:65:16:ac:7b:97:42:b9:44:4b:1b:05:84:a9:4c:12:7d:
b7:1a:1a:80:d4:20:c1:18:94:69:e7:2b:35:f7:98:e6:c5:72:
ea:5a:2f:73:b0:0a:3c:34:66:e0:f5:29:59:3d:30:b5:44:ab:
61:46:c9:72:a7:57:ea:b5:91:cf:a5:1e:0e:57:ed:2f:8f:76:
17:e0:8d:46:17:b9:45:09:50:26:e6:56:d5:12:ca:b9:a5:f4:
d4:1d:54:bf:a2:9d:f2:92:66:b4:8d:a9:d3:f7:86:b2:50:6b:
7d:3c:7b:e2:8b:28:15:d9:4a:6b:65:d6:b0:65:48:e3:db:e0:
f3:b0:e4:e2:98:1c:75:10:b2:10:1e:56:c4:57:b1:b7:a6:19:
7d:95:40:39:c0:7e:1d:35:dd:ed:49:79:22:ef:ba:a6:06:d8:
96:98:43:32:ac:90:f2:51:79:71:07:83:62:a6:be:23:58:2d:
5f:c7:57:3d:5c:cc:40:61:9b:5a:39:d6:53:46:f8:52:99:7f:
47:e0:5d:ba:e7:81:23:84:fc:22:a9:a7:9c:70:ac:0f:3e:25:
16:bb:c0:4b:d2:05:ce:46:a7:bd:e7:ff:bb:b9:8b:2f:33:1d:
1c:47:0a:06:d4:e2:7a:08:a3:48:b5:67:b2:15:e2:a8:2a:76:
70:60:a7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:17 2025 by rpki-client