Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_Z8p4eWB9fJwwlLSNRv83y13-zQ.roa
File: _Z8p4eWB9fJwwlLSNRv83y13-zQ.roa (raw, json)
Hash identifier: gTobWMO/u26bjdQ5QzcPCYCQiycKV7lRDHQDhou0pbE=
Subject key identifier: FD:9F:29:E1:E5:81:F5:F2:70:C2:52:D2:35:1B:FC:DF:2D:77:FB:34
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C6451B4DCA13D328879C32DAC76DC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_Z8p4eWB9fJwwlLSNRv83y13-zQ.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213898
IP address blocks: 2a12:bec4:15e0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:64:51:b4:dc:a1:3d:32:88:79:c3:2d:ac:76:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd9f29e1e581f5f270c252d2351bfcdf2d77fb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:41:3c:67:87:76:a4:e0:c5:c7:59:05:f0:
89:b6:df:e7:11:99:53:fe:41:bd:a3:40:87:e5:1e:
e4:a5:05:d8:fd:f7:ee:cb:ba:fd:ac:1a:3f:d5:bb:
18:5a:82:ce:90:b4:5b:08:46:98:73:aa:aa:5d:e3:
36:78:0f:67:e9:aa:58:3f:91:1a:49:7e:d2:91:55:
02:c7:0a:21:bb:5f:e8:26:62:d6:54:29:94:be:8e:
61:eb:06:0a:16:20:ea:f3:de:ec:2f:b5:3d:c7:b2:
a2:88:37:83:5d:0b:a8:2b:f0:5c:f2:1e:0e:9d:bd:
4a:f2:2f:ba:dc:80:87:fe:3c:50:70:58:c2:7d:70:
f8:cc:66:20:83:99:92:cf:46:5c:f1:cd:3e:f3:29:
05:54:49:92:3c:2a:de:17:d0:b6:0e:9a:ff:bc:88:
d4:17:ad:bf:95:92:10:b7:d7:73:11:69:30:c2:7f:
0d:92:c3:27:24:7d:60:16:e2:04:ff:82:a0:c1:d1:
29:a7:c2:1c:b1:2d:1a:44:c4:24:8e:e1:be:00:27:
ad:8d:1e:88:44:d9:98:74:fb:91:54:10:24:2d:0a:
76:c8:2c:9e:16:c5:83:fa:b4:ef:8c:e4:9b:c7:cc:
b9:20:48:80:3d:73:79:59:d5:33:ed:b2:24:1b:96:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9F:29:E1:E5:81:F5:F2:70:C2:52:D2:35:1B:FC:DF:2D:77:FB:34
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_Z8p4eWB9fJwwlLSNRv83y13-zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:15e0::/44
Signature Algorithm: sha256WithRSAEncryption
8a:b3:7c:e4:04:f7:7d:a6:74:40:69:38:ef:0d:4a:27:6a:a0:
77:cc:19:72:5f:0f:a9:f5:53:f8:00:d5:40:75:13:6f:63:ed:
8b:fd:0a:ba:d0:f3:18:cb:cd:b3:c0:e6:29:66:b1:e7:c4:93:
b7:97:e3:26:c3:19:f9:71:02:44:f3:8c:15:20:bf:68:83:ea:
4a:d5:b2:00:8e:b7:f8:67:0c:e6:eb:d4:f7:78:eb:0e:7e:1e:
aa:01:a3:d1:82:ff:c8:3d:e2:07:9b:bb:50:91:21:e0:71:36:
6d:c1:69:14:e7:76:65:84:90:36:96:75:26:2a:8f:95:bc:d5:
b9:73:99:96:9c:d2:ca:d5:cf:ce:f4:c1:93:8b:05:a9:a6:29:
19:6a:09:e4:6a:ae:8d:c2:2b:52:26:f7:6a:ce:8c:ee:36:8a:
68:7a:ac:af:f9:56:12:d0:b4:ba:84:0a:77:2f:1e:94:36:1b:
b8:7e:00:6b:b3:6c:06:58:6a:13:99:fa:b7:83:15:b1:e6:78:
cf:a2:bb:5d:bf:91:6b:f9:99:64:ec:59:48:53:37:85:7b:1f:
ad:bd:31:67:21:31:81:47:cf:2d:7e:38:f3:4d:b4:cf:e1:1c:
a2:6d:cd:63:3d:c2:e8:1f:43:1e:e7:8c:f6:4d:79:dd:99:19:
bf:56:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:13:49 2025 by rpki-client