Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PTJJDovHbz9IvFYCHOwopi-IbWk.roa
File: PTJJDovHbz9IvFYCHOwopi-IbWk.roa (raw, json)
Hash identifier: 5zdaivb0xpV06oL58whv3JZwo323JAevwoMvHD2fsmU=
Subject key identifier: 3D:32:49:0E:8B:C7:6F:3F:48:BC:56:02:1C:EC:28:A6:2F:88:6D:69
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C75ABAB9436D5B25D1AC657B4AF59
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PTJJDovHbz9IvFYCHOwopi-IbWk.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215965
IP address blocks: 2a12:bec0:600::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:75:ab:ab:94:36:d5:b2:5d:1a:c6:57:b4:af:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d32490e8bc76f3f48bc56021cec28a62f886d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:3b:bf:8f:cb:68:96:9d:8b:72:ee:a2:63:
8f:0c:28:54:aa:15:2a:c5:42:be:1b:43:d9:9f:f8:
df:11:02:d1:cf:80:31:25:c9:c9:10:dd:31:5f:f4:
ff:9c:3a:f6:1f:c6:6f:f2:f2:e6:d2:0f:ff:bd:74:
57:77:6c:2e:35:d9:7b:ee:5c:a4:13:50:02:bc:f9:
03:34:2d:df:44:89:ac:d4:3b:63:2f:ac:64:24:b5:
51:f7:78:54:3d:1a:bb:17:ea:47:4e:ef:d5:da:40:
85:3e:1a:2f:55:9b:52:f7:6d:2c:2a:0c:5f:92:db:
10:39:0a:8b:ba:39:26:c0:19:05:05:1e:c8:07:ec:
b1:66:52:44:6c:08:7d:15:78:47:31:d2:9e:d2:93:
04:e9:6b:aa:35:c2:e6:6c:9e:60:09:0d:cb:c9:06:
bb:bd:b1:1c:85:d6:76:ae:79:8b:0e:49:04:04:05:
17:79:9f:81:eb:04:5c:b5:8c:f3:c5:3c:15:87:58:
13:21:94:d7:6c:ae:1d:b0:4a:b3:7b:18:c1:db:5c:
3d:1c:f7:d6:cd:01:74:89:be:54:fc:73:c9:6c:6d:
73:f7:04:c3:c3:28:6c:8e:de:39:6d:ad:cb:d2:44:
b6:d1:85:3c:bc:01:24:cd:bc:4f:52:a0:bb:c8:27:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:32:49:0E:8B:C7:6F:3F:48:BC:56:02:1C:EC:28:A6:2F:88:6D:69
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PTJJDovHbz9IvFYCHOwopi-IbWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:600::/44
Signature Algorithm: sha256WithRSAEncryption
6c:e7:70:9c:28:5f:dd:18:ed:6a:6e:58:eb:56:54:1c:a8:3b:
60:a3:a2:e5:ee:87:22:0c:4f:6e:a5:a9:0a:2e:2e:17:63:a5:
1a:9b:44:86:e5:b1:9b:d3:fd:24:b4:30:9b:b0:c0:ca:94:4c:
85:11:2a:04:4c:68:46:4a:ac:7e:e9:ff:db:11:e9:af:ea:f0:
02:9e:6d:2d:79:bd:6c:19:ff:78:cb:9c:23:06:3b:6c:7d:3e:
80:86:4a:6a:fc:c8:21:43:5e:c8:61:9d:f7:e0:bc:84:5d:95:
10:d9:74:38:92:b8:9f:61:9c:9c:07:07:f9:f5:b3:82:58:6e:
51:e2:fb:f5:4b:05:c2:bc:1e:52:df:0a:b1:5e:17:72:52:b6:
ac:51:58:64:0f:c3:b6:b3:07:88:0b:03:0e:d2:46:e4:e0:dd:
db:37:57:2e:1d:db:a5:97:b0:db:c5:77:6d:76:de:9d:e9:34:
24:13:02:9e:13:4e:39:22:6d:24:a0:af:39:3f:19:c1:5a:94:
67:48:80:aa:93:33:8a:b7:80:00:93:41:28:ea:45:71:b4:7b:
e9:cf:ef:93:43:00:50:bd:25:d2:e0:46:7c:72:9d:76:2c:83:
bf:e4:fb:c9:f2:9c:fd:b7:89:1c:92:0d:89:af:1b:80:28:7e:
a1:ed:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:54:06 2025 by rpki-client