Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa
File: dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa (raw, json)
Hash identifier: 4Fft0psn/kwpjVEKZgVhKcfKwufV2SXuxRSuxxvAa+k=
Subject key identifier: 74:D3:97:59:CC:A3:07:05:1C:5D:5E:68:21:A3:61:2D:55:6F:48:45
Certificate issuer: /CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Certificate serial: 01942068337EFF1D09C3A478F45981FB1740
Authority key identifier: BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205969
IP address blocks: 2001:67c:12f4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:33:7e:ff:1d:09:c3:a4:78:f4:59:81:fb:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74d39759cca307051c5d5e6821a3612d556f4845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:10:65:8c:99:eb:fe:19:be:be:7e:1c:3f:
ca:90:3a:17:87:96:2c:93:ef:69:f4:4c:9e:54:19:
79:a6:e2:ff:70:62:6a:6c:7d:34:b4:40:34:ad:6d:
a4:4b:bb:03:03:17:ae:3f:3b:3a:20:9e:f2:af:f1:
88:9b:ce:3e:1c:f6:22:49:6c:46:4e:da:6d:54:94:
bb:a2:0c:bd:d9:8f:d0:a7:2f:5b:21:3e:5b:03:96:
0f:89:f7:93:ff:f9:28:98:f0:0c:68:3d:35:34:04:
f9:87:49:04:c9:54:47:ab:fe:db:33:1c:c4:d8:0b:
1d:55:1e:d9:ca:7d:6b:d5:99:3b:e0:55:4e:68:66:
92:34:c2:84:a0:5e:ba:48:2d:71:e8:f1:51:c3:f1:
16:e9:f1:22:0c:61:c7:4d:b2:41:36:63:d3:42:2b:
35:76:4d:d3:d6:2f:13:21:2b:e4:c3:27:bb:07:83:
fc:db:0b:d6:0b:f1:71:00:5d:f2:7d:78:68:21:23:
0e:04:3e:a5:1b:4b:83:d2:c1:fa:46:ee:3b:9b:63:
60:e6:a3:e3:3f:ed:a7:14:d7:f5:29:ea:7d:f4:a8:
e9:36:1c:4c:b4:b5:e6:e5:27:4c:e6:8c:94:76:9e:
39:81:be:fe:c3:54:18:4f:2a:91:dd:6e:0b:85:8b:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D3:97:59:CC:A3:07:05:1C:5D:5E:68:21:A3:61:2D:55:6F:48:45
X509v3 Authority Key Identifier:
keyid:BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12f4::/48
Signature Algorithm: sha256WithRSAEncryption
05:99:66:3c:b8:38:c1:2d:a9:0a:f6:f3:ca:9d:c2:6c:54:97:
8d:39:04:ea:8f:51:e6:0f:a7:d1:6b:66:1a:ec:da:43:f9:45:
96:7d:4f:43:5b:9d:14:a1:66:e4:05:b6:aa:4a:17:c9:68:6d:
6c:17:76:68:1e:1b:eb:37:cc:64:fc:73:24:e9:37:03:2f:de:
6b:29:b8:b4:64:61:fc:5e:9f:e7:ed:3e:e9:87:43:ad:f9:c4:
b5:d5:48:23:17:ef:0f:0f:6c:fd:5a:02:30:dd:56:40:46:70:
42:a5:d3:11:17:10:b5:2d:96:67:07:eb:e0:a1:7f:87:99:64:
e4:40:97:ee:8a:7e:ac:73:51:e3:eb:dd:c5:77:7b:53:25:98:
5c:7d:20:0b:98:73:39:8d:ce:aa:16:82:43:7e:98:7f:8d:f6:
33:10:c7:9a:72:a8:e1:16:a0:e3:28:d3:b8:77:71:68:0a:37:
96:2b:f3:29:a6:44:97:10:cc:6e:33:69:b1:07:25:db:3a:80:
d6:1a:6c:5e:01:79:c0:3d:f9:7e:11:d5:15:7c:e0:a0:68:dd:
a6:98:a9:27:39:73:8a:3f:df:65:f0:6c:7a:2f:67:0b:4e:d8:
56:3e:86:38:b9:da:84:40:b5:25:ea:03:c6:ed:ec:d0:b4:a3:
10:d3:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:21 2025 by rpki-client