Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1A2X4ap9icgXvQyrMWTau688kH8.roa
File: 1A2X4ap9icgXvQyrMWTau688kH8.roa (raw, json)
Hash identifier: Gtp2tKdD2iKH6iS+Mlp+LqZDj+28uVT/G/5wlkL4ycU=
Subject key identifier: D4:0D:97:E1:AA:7D:89:C8:17:BD:0C:AB:31:64:DA:BB:AF:3C:90:7F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C4A6362B348003D827A8C3D2CD499
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1A2X4ap9icgXvQyrMWTau688kH8.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52181
IP address blocks: 2a12:bec0:300::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4a:63:62:b3:48:00:3d:82:7a:8c:3d:2c:d4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d40d97e1aa7d89c817bd0cab3164dabbaf3c907f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:9e:8b:df:00:b5:81:73:06:a7:8b:ea:e3:
b6:d9:4b:76:8f:82:95:10:29:a1:23:89:dd:85:20:
07:69:e7:57:83:fc:2a:3c:bf:32:e3:59:0c:bb:f6:
f8:2f:6a:2d:6a:4a:dc:5a:94:9e:7e:3a:f7:5b:96:
d0:12:a7:a8:78:b6:72:97:a1:6e:9e:ef:e3:0c:a8:
51:80:43:dc:62:c7:85:5b:22:8a:0c:6c:79:f1:6e:
d3:6a:63:14:c2:33:f5:c5:07:9e:e6:f6:94:6e:4c:
4f:3f:90:1a:92:11:d0:8d:8f:0f:fd:de:b4:b2:fa:
5a:17:34:71:b2:d8:ff:33:10:36:f6:5f:21:4c:9d:
0a:9d:71:65:63:b1:90:1f:de:27:10:01:f6:22:ec:
81:13:06:f0:25:3e:b3:43:1b:41:54:e7:e6:13:65:
80:a1:6d:53:21:7a:87:08:a0:16:b4:00:6f:af:93:
98:37:aa:2a:9d:a8:40:f0:62:ba:e4:15:5a:63:fa:
99:61:cc:95:d5:29:56:8d:5b:dd:5e:39:50:12:44:
9b:7f:06:4a:4a:3c:ca:32:30:af:c4:f6:47:83:21:
55:64:41:42:5a:f1:9f:3e:2b:a7:1a:6b:d2:d5:ed:
43:05:3a:71:84:36:1c:81:00:5a:75:fc:f7:b4:f4:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:97:E1:AA:7D:89:C8:17:BD:0C:AB:31:64:DA:BB:AF:3C:90:7F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1A2X4ap9icgXvQyrMWTau688kH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:300::/44
Signature Algorithm: sha256WithRSAEncryption
86:c6:5f:77:72:52:4b:b5:c4:97:e3:82:96:09:9a:5f:56:e3:
d4:53:68:c7:24:ba:52:11:cc:de:d9:32:8e:5f:9f:63:37:b4:
cb:b1:4d:ca:df:07:24:3e:43:7a:05:09:ee:1f:f3:e9:12:fb:
25:9a:81:bb:1a:85:7d:af:86:a2:33:ad:96:f3:5e:6b:93:95:
7e:f6:58:1e:9b:8d:86:dd:4d:f4:9d:22:90:b2:7f:7e:47:b7:
eb:90:1d:94:6a:d3:85:73:4e:4f:68:3a:37:7a:00:71:d8:ae:
59:68:65:2c:ea:a6:bc:a6:89:67:4e:49:69:16:db:4b:b1:77:
d6:b1:f5:d8:d4:aa:53:2b:bf:da:89:69:d2:d7:fa:77:78:42:
0a:5f:63:6b:3b:a6:73:7f:49:29:96:28:ea:42:57:b3:82:87:
75:40:20:f0:9d:1e:b5:0b:90:72:65:82:c4:b2:46:85:fc:b5:
b7:ee:1f:9c:9b:c4:57:9b:f3:4e:4f:19:2b:d3:9a:b5:cb:09:
ce:21:a8:c8:61:d7:46:d2:8f:b8:04:c6:50:bf:21:0b:f4:81:
d7:73:e8:79:c0:b4:fd:46:28:67:e3:33:73:bd:3e:d2:f2:f7:
5b:bb:af:d2:04:71:e1:83:69:94:9e:c3:1c:c1:7f:bf:54:60:
3f:ef:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:28:13 2025 by rpki-client