Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa
File: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (raw, json)
Hash identifier: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=
Subject key identifier: 4E:7B:43:57:C1:F4:73:1A:CE:1A:40:D8:5A:22:79:BF:06:17:33:A5
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 019427479CA4EAE40DFA28C49CF7D75BC759
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49689
IP address blocks: 2a10:8b40:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9c:a4:ea:e4:0d:fa:28:c4:9c:f7:d7:5b:c7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e7b4357c1f4731ace1a40d85a2279bf061733a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:c9:7e:aa:9c:25:46:e6:84:33:67:54:b4:
ed:5f:82:ac:3d:8c:a6:60:9a:af:e0:91:c9:0f:1a:
01:7a:ed:dc:67:70:53:f3:bc:2b:30:30:6c:f8:95:
50:ec:74:87:c5:87:1b:19:eb:48:46:ba:23:46:64:
a6:e7:14:7e:e4:8b:71:5c:7a:01:6d:d3:80:e2:c8:
9c:bb:64:99:c9:32:1a:7a:5f:54:d1:90:ad:d7:5c:
27:0c:e3:70:81:98:00:41:2f:85:bf:57:d6:73:32:
19:b0:a5:ca:21:33:ed:cc:19:48:cb:99:a8:db:a0:
ef:81:48:f0:16:57:ef:19:c3:14:ae:6c:f8:95:55:
53:9c:0f:c9:8e:91:4b:71:a2:27:34:e8:8d:1d:82:
00:b1:c7:59:9e:64:35:81:90:b3:dd:22:77:36:58:
55:47:5d:f3:fb:f6:13:20:53:9d:63:76:bf:0b:03:
d1:24:4d:5f:63:7c:44:d7:00:89:e7:ad:83:df:c4:
e9:95:10:72:21:a2:e8:64:4e:3b:cf:99:4f:3c:93:
27:99:9a:af:8a:2f:78:6c:fa:cb:74:f4:ce:26:ca:
b1:2e:82:a8:65:00:89:24:c6:44:e3:f0:ee:26:de:
36:ac:93:bb:12:46:d3:9c:0d:2b:e9:c5:25:0b:27:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7B:43:57:C1:F4:73:1A:CE:1A:40:D8:5A:22:79:BF:06:17:33:A5
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:8b40:1001::/48
Signature Algorithm: sha256WithRSAEncryption
4d:2e:78:50:22:22:e7:5c:44:d2:fc:9d:b7:2e:2b:82:59:ca:
d4:4f:db:fe:d6:6d:f2:02:d2:3f:d3:2a:be:69:42:9f:08:d6:
7b:7e:a0:36:a8:63:f9:63:76:a2:ff:37:e0:d7:12:6a:06:02:
22:e4:85:5e:ae:11:1b:26:08:b3:4f:1a:56:85:c1:2c:0d:d3:
31:73:75:6f:fd:aa:71:cd:b7:c6:cd:7c:1d:15:4c:b3:22:bc:
8f:26:ee:95:e0:21:43:a3:b1:11:e9:3d:c0:79:f7:8a:92:28:
d5:a8:c6:75:1f:92:82:df:28:11:58:a5:f2:04:be:fd:13:8b:
d0:d2:b0:2d:5b:a8:dd:7d:81:f5:b1:a1:ab:b5:f7:e0:aa:95:
33:a3:f3:4f:58:2f:e2:a2:e3:58:41:67:b5:de:27:79:f6:bf:
7a:50:21:1b:9d:05:f7:a8:4f:f3:05:b1:98:ae:7e:63:c2:ef:
3c:94:d4:db:18:59:36:5b:40:8f:7c:44:e9:ea:d5:21:ff:1c:
bc:b4:b7:b0:30:df:d3:e9:98:54:8c:d1:c0:f9:9a:c7:c0:b0:
29:47:f0:93:7e:00:01:46:18:0c:33:e3:db:60:af:e6:b3:84:
3e:ed:48:7d:dd:67:8b:f4:9d:b1:3a:9c:69:e6:cf:e4:32:67:
67:24:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:37 2025 by rpki-client