Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2q2KX720Rr2V36tMG9kc1hWHY7k.roa
File: 2q2KX720Rr2V36tMG9kc1hWHY7k.roa (raw, json)
Hash identifier: w+qzXm5JXph1JlkMHUkZaCL5LkOGE5OVhK1DEpR4R9I=
Subject key identifier: DA:AD:8A:5F:BD:B4:46:BD:95:DF:AB:4C:1B:D9:1C:D6:15:87:63:B9
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5ACE465FE630CDAC9164C0141E11
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2q2KX720Rr2V36tMG9kc1hWHY7k.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200180
IP address blocks: 2a12:bec0:110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5a:ce:46:5f:e6:30:cd:ac:91:64:c0:14:1e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daad8a5fbdb446bd95dfab4c1bd91cd6158763b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:d5:de:46:51:a9:77:fd:af:76:5b:a4:b7:
32:e0:7b:7c:b9:9c:0f:15:e4:f5:e7:99:d8:b9:90:
d3:b6:66:1e:2d:85:d0:af:fd:d5:63:3d:37:b4:92:
da:86:05:22:c8:19:02:49:95:54:e9:46:57:e8:d9:
3e:c6:74:09:18:d6:a3:90:94:02:e5:78:49:d5:39:
10:23:82:86:97:11:27:34:32:7e:31:2d:20:c8:2f:
94:9f:a8:23:c6:a1:c6:f5:5f:4d:1e:f8:3f:de:70:
ab:10:9a:c9:1d:b0:f8:b4:94:da:c6:79:20:9d:e4:
29:7d:f8:2f:b8:77:cf:fc:05:ff:ea:ae:f0:37:17:
63:75:ab:23:2b:7e:31:3c:38:d9:b0:11:a0:e5:b1:
30:53:73:25:09:a4:7b:3c:05:c5:73:4b:09:6a:31:
ef:e6:5c:b9:ea:c1:7c:12:6b:74:84:73:16:af:84:
2c:da:d5:1e:0c:9b:a1:94:29:c2:ab:0f:c2:a2:31:
e3:b7:72:9b:38:c0:d2:74:89:36:70:ec:0e:46:76:
b9:62:96:e6:70:11:8f:e6:5a:b6:c1:94:d0:0a:f5:
4c:4d:e3:0e:b7:25:01:b2:0b:80:e3:9f:90:61:c9:
fe:d2:49:d9:89:d3:25:35:4f:8b:c1:42:e2:14:df:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:8A:5F:BD:B4:46:BD:95:DF:AB:4C:1B:D9:1C:D6:15:87:63:B9
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2q2KX720Rr2V36tMG9kc1hWHY7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:110::/44
Signature Algorithm: sha256WithRSAEncryption
aa:46:1f:67:fa:d1:86:08:78:d5:64:05:b4:5c:98:65:ce:36:
44:6b:20:07:a9:6c:f1:8a:54:5e:a6:3b:80:73:25:a5:e8:be:
4b:ed:55:75:c2:53:16:49:d0:f6:56:7b:8e:b0:28:95:6d:06:
b3:f2:66:b1:42:72:d0:95:bc:28:f3:f9:d9:66:39:2f:b0:59:
48:a9:c6:9f:82:a5:b2:0d:8f:97:47:3c:fc:14:1c:c3:39:10:
b9:c3:27:03:a0:30:cf:d4:0d:d0:94:5e:45:99:96:9b:69:67:
8f:07:9c:98:38:cd:5b:b9:2b:01:f6:5a:63:32:65:f8:93:d4:
91:4d:3a:a7:7c:1e:41:cd:3d:1d:ff:c4:2f:91:dd:ec:ad:87:
3b:18:21:bf:94:4b:fc:d5:41:e9:6a:e8:42:5c:7f:23:c8:27:
26:8b:07:14:f7:72:b3:d7:d1:d3:62:7f:99:8d:e4:6b:cf:84:
db:14:85:21:4e:f1:6f:a6:0c:9e:bb:96:26:b0:98:03:c7:a2:
5d:97:4b:26:aa:e9:2d:90:40:50:88:44:0b:08:70:00:85:16:
c7:3c:bb:f9:8b:4c:29:3d:fb:53:27:06:1c:e0:92:3e:db:dc:
81:e9:ce:32:41:cc:4b:66:ce:cb:a9:5d:c5:1e:c6:77:11:dc:
9c:2b:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:36 2025 by rpki-client