Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QffKvUTCtAXj5LCfArTNhklFn_A.roa
File: QffKvUTCtAXj5LCfArTNhklFn_A.roa (raw, json)
Hash identifier: jSv/yWXqPczcnRIc/f9q0LAXB4/47nA3V5C13Agiz3c=
Subject key identifier: 41:F7:CA:BD:44:C2:B4:05:E3:E4:B0:9F:02:B4:CD:86:49:45:9F:F0
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C772DD34599FCC6D1ACE53937EED9
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QffKvUTCtAXj5LCfArTNhklFn_A.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216072
IP address blocks: 2a12:bec0:e30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:2d:d3:45:99:fc:c6:d1:ac:e5:39:37:ee:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41f7cabd44c2b405e3e4b09f02b4cd8649459ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:a4:d6:83:c0:d1:c8:10:b0:49:1e:49:8a:
22:25:f0:c3:04:d3:ff:e0:3b:f8:97:18:f7:a9:cd:
0a:9f:25:c6:c6:95:e2:3a:73:9e:e4:d2:a7:f4:30:
41:0b:be:5d:33:bc:ae:97:66:af:9b:df:aa:73:fe:
84:45:5a:1c:6e:0d:e4:ed:3c:15:66:80:79:49:90:
fd:33:9b:a4:27:14:76:e4:ac:25:67:42:b8:04:5f:
e7:2d:1b:c3:f6:a1:af:11:c2:58:2d:de:a2:a8:32:
f7:fc:71:14:bd:42:65:3f:1f:e8:9c:a6:94:a3:bd:
fc:af:1e:88:87:2c:df:eb:00:7e:c5:28:53:84:f6:
f7:13:56:43:c1:0f:a6:c6:e9:22:bd:e4:80:e9:8b:
48:0a:01:d8:f9:bd:11:06:3e:68:8f:31:0a:80:43:
82:f5:3d:84:cd:b0:f0:1a:d9:83:0b:0a:6b:09:a6:
64:c6:a0:be:81:3f:36:9b:51:7c:87:d2:9c:76:d5:
5b:01:f2:ad:66:08:47:fa:5b:7e:50:7e:55:ae:b1:
89:9d:6f:57:00:79:bd:c4:25:e1:66:6b:6a:04:e8:
fc:09:76:6a:e2:3c:78:b7:9a:7e:13:8c:81:99:a9:
c9:35:9f:bd:62:46:75:9a:00:00:e9:95:38:ce:1a:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F7:CA:BD:44:C2:B4:05:E3:E4:B0:9F:02:B4:CD:86:49:45:9F:F0
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QffKvUTCtAXj5LCfArTNhklFn_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:e30::/44
Signature Algorithm: sha256WithRSAEncryption
4e:d2:a4:f4:1e:6c:b2:20:95:89:01:fa:97:f9:a0:e9:63:5d:
f4:cc:66:6e:43:7a:22:04:45:99:c7:12:60:33:e4:5c:04:ad:
33:ce:20:68:1c:55:0c:6b:84:e2:97:b5:c6:a6:46:e6:0e:f7:
15:54:c3:9e:87:c9:b5:d3:eb:12:48:e6:2a:f8:b7:35:38:42:
48:88:29:97:05:64:88:5f:1d:74:b7:5a:a0:24:c0:a3:4a:92:
d2:c8:6a:7e:2e:f1:6f:e9:5b:df:b4:a4:69:ce:08:2d:e1:88:
33:89:02:b9:e4:5b:6b:ce:cf:ff:52:09:41:56:2a:d1:69:59:
09:f1:7f:ba:a7:42:e8:ad:ee:29:3c:e5:3c:1f:26:fd:b7:c8:
3e:bd:b3:78:45:65:93:f4:83:d4:28:67:0c:27:a5:2d:5b:17:
ad:23:22:14:0f:30:b6:7e:40:d9:b0:18:31:67:8b:5a:cc:de:
ab:ea:12:ef:5e:70:09:9f:b8:37:5a:ca:6b:ee:44:2a:b0:c3:
d2:19:9b:3a:4d:c1:9a:3d:58:bd:dc:c6:8c:80:a1:1c:d9:11:
61:4e:3e:a3:05:72:8a:83:cb:ac:e7:af:e7:3a:08:4e:70:27:
05:05:72:df:df:07:92:70:8e:05:3b:fd:e5:ff:aa:de:fd:44:
30:f9:78:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:45 2025 by rpki-client