Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/OtVBlFkEFwd_I9ffGBy2_aEapJs.roa
File: OtVBlFkEFwd_I9ffGBy2_aEapJs.roa (raw, json)
Hash identifier: Wrm9qjbCM1Ngl1aL2OZUMI0H6OBkDKSqRNqaW0hV4v8=
Subject key identifier: 3A:D5:41:94:59:04:17:07:7F:23:D7:DF:18:1C:B6:FD:A1:1A:A4:9B
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067E5805F3F11BAA5EECAA0D4AE7BFC
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/OtVBlFkEFwd_I9ffGBy2_aEapJs.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60666
IP address blocks: 2a12:3fc2:aa40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e5:80:5f:3f:11:ba:a5:ee:ca:a0:d4:ae:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ad54194590417077f23d7df181cb6fda11aa49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:af:f1:f8:c5:4c:f0:81:d4:63:35:d5:e6:
63:60:ea:7e:ae:e8:7c:69:70:44:bc:18:d4:46:2b:
62:57:15:ad:8a:89:03:12:9c:ec:0d:85:a9:0d:e3:
78:f5:bb:f2:ce:9a:24:7d:b7:90:7c:22:58:95:bb:
27:7a:67:7d:85:bd:52:3a:26:6b:3d:7c:b5:df:df:
45:0e:a3:bb:be:90:88:25:2a:46:67:4e:30:dd:74:
6b:b8:25:3e:72:b8:dc:44:b2:fd:8a:6e:73:a8:72:
54:69:52:3f:87:97:ed:e6:21:06:f1:f7:b7:6d:0f:
09:ae:d2:fc:b9:b1:f1:5f:8b:8a:3c:4f:0d:54:e8:
e0:fd:ed:14:b0:50:41:d5:11:52:bc:52:6a:1f:b1:
a4:65:7d:15:23:79:7a:f9:a6:3d:27:64:d8:59:29:
32:bc:79:bc:1f:b6:df:65:0c:a8:98:53:da:05:f6:
b9:ac:63:ff:5c:93:90:13:34:05:a7:e5:9e:25:06:
04:82:25:0e:59:54:50:2e:f1:82:48:42:04:1a:38:
dc:c5:b2:06:83:2c:c9:58:1f:6d:1c:36:2d:a8:de:
88:4d:e3:b6:26:a6:92:a9:17:a2:3e:30:66:93:ed:
0a:d1:42:56:fe:20:da:74:05:40:42:25:e9:48:95:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D5:41:94:59:04:17:07:7F:23:D7:DF:18:1C:B6:FD:A1:1A:A4:9B
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/OtVBlFkEFwd_I9ffGBy2_aEapJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa40::/44
Signature Algorithm: sha256WithRSAEncryption
a9:f8:25:f1:fa:fd:34:5a:a4:f4:6a:73:8a:ba:78:f8:fb:e6:
ee:ac:fa:65:a6:d5:07:0e:1f:86:e2:61:f0:f9:fc:ed:22:b7:
c8:9c:d4:a4:01:4a:17:a6:6f:c6:f4:15:45:35:0e:2d:fe:4b:
fa:93:25:dc:2a:5f:75:d5:29:9b:32:21:22:df:62:1a:55:c5:
3a:be:4c:0a:f5:3c:12:86:93:24:a9:fc:fa:71:31:44:e8:2c:
7b:b7:7f:45:05:f6:e1:a8:af:18:9c:9f:8d:51:cc:b7:b1:0c:
ba:ef:a2:f6:ea:c2:74:37:97:db:08:e1:ba:53:8d:e6:bf:ed:
40:89:b0:de:c0:bd:e5:d6:f0:93:db:cb:bf:37:d8:56:c4:70:
63:74:0a:b8:89:85:69:13:51:73:4e:48:14:cf:47:0a:11:02:
cf:95:a3:0b:87:7a:e5:ce:07:00:96:b4:a1:ea:37:26:5b:fc:
26:07:cc:77:a7:06:a9:5d:0a:b0:49:d8:c9:a5:8c:fe:c7:db:
c5:82:de:48:e8:9a:b2:83:20:f0:8d:86:4d:2c:93:51:62:49:
d8:ec:d0:ec:38:b7:cc:3d:fa:9f:63:89:68:07:57:30:f2:d7:
9c:1c:5f:5f:64:a3:65:31:a1:a9:ea:59:47:4f:7c:d3:a0:e4:
de:05:2b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:02 2025 by rpki-client