Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DbT7dpuwRLI1rbOsJlOaJhtCduA.roa
File: DbT7dpuwRLI1rbOsJlOaJhtCduA.roa (raw, json)
Hash identifier: pGArwDZ/CluM4TUrIj9eYcimmiH6s05ivYiuxEUaTeA=
Subject key identifier: 0D:B4:FB:76:9B:B0:44:B2:35:AD:B3:AC:26:53:9A:26:1B:42:76:E0
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C53CA5CB42053BB64764F66CE1F1B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DbT7dpuwRLI1rbOsJlOaJhtCduA.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199423
IP address blocks: 2a12:bec0:1b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:53:ca:5c:b4:20:53:bb:64:76:4f:66:ce:1f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0db4fb769bb044b235adb3ac26539a261b4276e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bf:39:dc:6e:b8:b4:be:66:58:8d:38:5e:2f:
08:76:b2:2b:c3:ad:b7:5d:73:42:2f:63:a7:15:ed:
6c:e2:27:9a:90:c4:6d:25:df:21:3d:0d:ca:e8:6b:
6f:5b:11:c5:17:a9:ce:b9:dc:b4:e1:2a:1b:5d:d6:
5e:f9:f0:7d:7d:f8:3f:48:80:ee:e9:03:7b:b4:75:
a4:f8:06:81:5c:cf:e2:7a:d6:d0:24:cd:03:b2:94:
a7:c4:bf:8c:23:6f:cc:f4:23:69:59:dd:03:1f:53:
a9:1c:aa:54:d1:44:8d:4a:43:ce:25:55:aa:b0:0c:
02:06:b9:21:ca:66:61:2e:9e:f1:b0:a8:60:ad:69:
d5:51:31:63:13:b2:16:b6:ee:36:c7:dd:fe:42:70:
8b:c3:78:c4:42:57:a3:00:d0:e0:4d:87:59:22:fa:
d2:86:47:92:8f:64:c6:3c:e4:9e:56:5f:a6:fb:5a:
29:68:6e:3b:51:ec:ae:fb:58:d8:4f:35:62:d0:76:
07:a1:a4:28:f3:ed:3d:83:cd:4d:e1:7d:77:25:ba:
c2:ab:45:aa:d5:23:52:77:5b:38:b6:46:05:50:6c:
f1:12:22:e8:c9:89:49:44:43:9d:06:70:b1:1b:35:
3f:c1:6f:1c:53:b0:f4:d2:c1:fb:8d:5e:31:4a:91:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:FB:76:9B:B0:44:B2:35:AD:B3:AC:26:53:9A:26:1B:42:76:E0
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DbT7dpuwRLI1rbOsJlOaJhtCduA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:1b0::/44
Signature Algorithm: sha256WithRSAEncryption
7f:da:d3:56:d5:c5:7d:7e:51:ac:d0:9b:a6:7e:c5:9b:34:61:
58:c1:d8:fa:6c:97:a6:a4:da:99:c4:30:76:2d:53:11:02:74:
02:68:f5:16:53:ad:6e:82:be:a9:bd:a3:b1:fd:06:89:2e:a1:
04:18:e5:b0:e3:6f:21:a4:60:7d:4a:3d:3c:ff:51:83:5c:f5:
5f:e3:0a:71:df:88:ae:43:ec:d0:af:52:b1:8e:48:99:e7:50:
3c:19:51:30:13:07:f6:ef:0a:b2:1a:47:fd:03:9b:b5:0d:bf:
48:87:c2:97:1d:5b:ae:95:61:41:0c:ff:be:fe:8a:97:45:7f:
be:63:03:06:85:f7:bb:b3:8f:d4:1f:a3:d1:b5:7d:29:c6:96:
c5:5e:cf:85:e7:a3:42:f4:c1:da:84:3b:83:4f:5d:93:bb:45:
50:60:1e:11:54:ec:29:ce:a0:ed:27:62:a8:06:72:0c:78:97:
d7:4f:f8:18:57:07:86:56:ee:95:64:4b:2f:b6:f1:b2:f5:fb:
1c:bb:fd:ae:ae:ae:86:7b:77:d7:e4:9e:e3:53:c5:4b:0a:29:
01:43:ab:77:4e:f8:0f:f2:9b:f6:69:8d:f4:9c:0f:ce:76:76:
9d:d7:db:98:ee:fd:70:bb:d0:8c:7c:15:a9:f2:4a:bf:cf:0f:
80:d9:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:55:21 2025 by rpki-client