Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aWBe9eCw2gp0B5vT3Ws8eZgLfBE.roa
File: aWBe9eCw2gp0B5vT3Ws8eZgLfBE.roa (raw, json)
Hash identifier: DpooEa2cJotWi0AmFNaGo4CAVx1ErnNeu9wBrSn3G40=
Subject key identifier: 69:60:5E:F5:E0:B0:DA:0A:74:07:9B:D3:DD:6B:3C:79:98:0B:7C:11
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C4F94884E7281EBEE3B41A9A6029E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aWBe9eCw2gp0B5vT3Ws8eZgLfBE.roa
Signing time: Wed 01 Jan 2025 01:47:56 +0000
ROA not before: Wed 01 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198590
IP address blocks: 2a12:bec0:330::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 06:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4f:94:88:4e:72:81:eb:ee:3b:41:a9:a6:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69605ef5e0b0da0a74079bd3dd6b3c79980b7c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e5:75:57:d7:f3:f5:3a:2c:3e:72:12:ba:a2:
66:8f:e6:2e:f0:0c:41:3c:e4:61:29:80:a2:e9:30:
60:dc:88:06:9c:eb:7c:d4:bd:21:9c:cf:ab:9e:b2:
61:99:ea:a7:90:7e:b0:ca:f4:e3:bd:d6:51:15:93:
ae:ed:f2:a8:ea:89:78:b8:9a:7e:cd:c9:c6:c1:5c:
77:bc:7d:fe:ed:7e:f4:55:37:dc:25:8a:62:cc:66:
f8:e3:46:c1:9e:54:89:89:c9:a6:17:73:d3:59:c9:
ab:cf:08:c5:bc:75:1e:14:7d:7d:4a:eb:18:3f:19:
64:75:45:72:28:2d:3d:5f:99:c6:c3:a5:1a:74:09:
bc:cd:31:09:c6:6d:fb:29:5b:27:db:07:8b:7b:74:
aa:5d:27:77:d8:a3:9c:ab:87:0b:8b:77:91:bb:8c:
ba:af:9e:ab:07:22:be:2d:36:b4:ca:a5:83:50:76:
56:ed:a8:71:c8:a0:e0:b1:b4:be:85:0f:2f:4f:b2:
c0:ae:77:c4:06:44:9c:ef:9f:e5:4c:0e:00:87:ce:
30:10:6d:c3:68:f7:91:ae:69:42:2a:f9:af:6d:19:
4c:a1:37:f8:b0:0b:fd:0a:de:f6:2d:c7:a8:b5:13:
a3:cb:d9:08:4c:25:0b:2f:19:4e:b3:19:e7:f9:2f:
ae:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:5E:F5:E0:B0:DA:0A:74:07:9B:D3:DD:6B:3C:79:98:0B:7C:11
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aWBe9eCw2gp0B5vT3Ws8eZgLfBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:330::/44
Signature Algorithm: sha256WithRSAEncryption
21:cf:cc:49:2f:d2:10:15:ba:b5:24:0f:e6:7d:8d:04:72:68:
8e:81:1b:e5:f9:03:9a:f6:28:a2:c0:1f:35:5a:2f:1a:cf:28:
cb:0c:3e:e3:41:79:dd:de:51:5e:79:27:e4:bc:67:27:b4:d7:
d6:55:ed:fa:49:fb:11:eb:08:47:01:a3:4a:62:55:45:4a:e1:
13:e7:12:84:32:9c:07:fc:12:ef:4a:0b:09:22:16:7e:0e:3e:
d6:7d:13:91:4d:5e:df:27:82:71:8f:b8:9a:59:c0:68:7c:ca:
73:6e:d7:a7:10:08:04:d8:2c:c2:77:13:e7:c3:12:99:e9:38:
98:e5:d6:f6:b2:72:ef:54:07:19:be:33:57:3b:ca:47:79:03:
76:2b:6d:c0:d0:dc:e7:94:13:da:40:d8:c9:82:ce:dc:f3:08:
2a:5a:b1:ee:7b:b6:0c:e1:10:8c:24:07:d4:c3:c1:6f:97:6f:
1a:8f:14:74:b3:a1:8d:72:24:dd:b0:80:3b:11:27:9c:05:f5:
cd:aa:a3:84:81:fb:9e:b4:f9:dc:b2:f0:c4:e9:6d:22:01:2d:
d2:f7:30:bc:fe:1e:65:0b:d4:23:ca:29:8b:80:15:8b:b4:0e:
3e:43:c4:3c:d1:b6:8a:29:64:6d:0d:5b:4d:e0:ed:d7:bd:28:
98:e7:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:45:47 2025 by rpki-client