Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4sGUMvmBdCyY6osrLjvQ6dq-ZVM.roa
File: 4sGUMvmBdCyY6osrLjvQ6dq-ZVM.roa (raw, json)
Hash identifier: hk3ZjwYCpvVT7Oseb4PHsbWX8zcrm7u28XtmE7PySCo=
Subject key identifier: E2:C1:94:32:F9:81:74:2C:98:EA:8B:2B:2E:3B:D0:E9:DA:BE:65:53
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C5142C6A61C97F8BEE94D5FDD1C8A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4sGUMvmBdCyY6osrLjvQ6dq-ZVM.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199030
IP address blocks: 2a12:bec0:1e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:51:42:c6:a6:1c:97:f8:be:e9:4d:5f:dd:1c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2c19432f981742c98ea8b2b2e3bd0e9dabe6553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:51:81:4f:f3:57:5d:6f:6c:0f:90:85:40:
07:c1:a9:e9:ab:eb:c8:14:1d:88:14:c6:b2:58:f8:
0c:6d:1c:e5:66:b2:e0:92:d5:8e:78:20:c9:e8:1f:
66:57:c7:a9:e2:f7:e5:7f:7e:08:c8:40:b5:74:80:
19:a3:69:14:bb:7a:e2:64:d5:66:2b:a3:8f:93:b4:
57:0a:c0:66:fa:14:bb:b2:aa:29:69:37:9f:11:c8:
20:3f:e3:cd:e1:a3:dc:d7:51:74:c9:81:54:59:88:
97:e8:63:eb:5f:a6:fc:4c:60:6f:72:c4:cd:26:af:
d3:33:cf:64:08:e7:69:25:0d:e1:92:2e:83:82:97:
52:c7:d5:72:da:0f:5b:78:58:43:05:5d:9b:e0:ab:
6f:2e:6a:a5:47:b6:cc:3b:7e:e9:d3:6b:62:8c:94:
44:79:7b:28:c8:3b:0b:c8:0a:3b:ed:f7:94:36:53:
88:e8:10:3e:3e:a0:fc:c7:f8:d2:84:d8:25:6b:ad:
2c:8f:da:e7:99:05:34:ba:05:96:04:23:4a:62:46:
90:d2:05:c6:a8:da:15:30:d5:7c:4f:c0:89:1a:f7:
42:04:d8:9c:8f:51:c9:87:e7:ce:85:2c:b0:b9:31:
bd:c6:86:b8:a2:6b:df:f3:52:69:69:ba:2b:a7:8d:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C1:94:32:F9:81:74:2C:98:EA:8B:2B:2E:3B:D0:E9:DA:BE:65:53
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4sGUMvmBdCyY6osrLjvQ6dq-ZVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:1e0::/44
Signature Algorithm: sha256WithRSAEncryption
13:6f:6a:69:c4:2b:2d:57:dd:a1:08:a8:6a:06:42:8e:37:54:
d7:5c:04:8c:04:a0:18:78:f9:0e:35:50:ff:a1:aa:a1:5c:67:
14:f1:09:dc:62:1e:7f:65:a5:d5:7c:93:91:49:38:bd:80:c7:
4b:56:55:6f:29:0c:d7:4d:47:07:be:e4:9e:9d:18:50:c5:a2:
c9:4f:6a:39:15:92:c2:f1:21:f4:13:5d:1d:0c:11:30:0a:75:
a1:a1:e2:3f:6c:bc:b6:b3:60:1e:a2:50:7b:f7:77:c9:bc:99:
53:36:28:71:8a:6f:59:9c:20:e5:bc:26:01:47:0b:a0:56:fd:
0a:c4:84:67:8d:4d:9d:20:4f:4e:6b:f6:16:3d:90:81:60:7a:
a4:04:45:83:00:7b:d9:0f:eb:d0:ab:1a:fd:13:94:ec:df:f6:
2b:e4:86:52:92:72:f4:da:0f:84:7e:02:2b:27:5f:c0:d6:53:
37:61:7a:f7:1e:c9:18:44:29:2a:60:7a:88:30:77:0a:89:64:
a4:cd:2c:35:0f:62:83:23:f9:fe:19:74:28:30:e2:16:1f:56:
2e:26:5b:c6:7a:8e:5e:ef:72:89:75:46:fe:cf:fc:df:57:7e:
80:ee:3c:0f:d0:35:a6:fe:22:3e:9b:e6:61:ac:27:b4:fd:ed:
9e:cb:a5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:54:59 2025 by rpki-client