Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fax-Kt080-nz_BDytVBISBvZppo.roa
File: fax-Kt080-nz_BDytVBISBvZppo.roa (raw, json)
Hash identifier: Y4KAgLMIgOmzotIp2Ad3Z8aRA9YINykdJg3zAlUMChA=
Subject key identifier: 7D:AC:7E:2A:DD:3C:D3:E9:F3:FC:10:F2:B5:50:48:48:1B:D9:A6:9A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C4D221D0690EB534F3AFEFBF83697
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fax-Kt080-nz_BDytVBISBvZppo.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197963
IP address blocks: 2a12:bec0:380::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4d:22:1d:06:90:eb:53:4f:3a:fe:fb:f8:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dac7e2add3cd3e9f3fc10f2b55048481bd9a69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:c1:06:00:76:89:b1:ab:4e:37:30:41:75:
9c:5b:06:c2:f7:0e:12:75:1e:69:0e:59:d8:e9:5b:
d5:a0:1e:4c:9e:f3:d8:6d:fa:b6:2c:cf:f0:00:ae:
aa:9c:14:8d:7d:53:a1:07:c8:78:8f:f9:b7:bf:32:
0c:d4:23:25:0b:a3:e1:16:68:ce:71:cb:59:b8:d4:
ac:26:70:d8:15:f9:58:74:44:0e:16:7e:e0:25:9c:
91:4e:b8:a7:81:9d:bf:ff:f1:fe:c8:60:e7:ab:91:
5a:70:71:80:a5:13:ad:f8:ab:70:a2:d5:7b:43:9f:
41:6b:5e:7a:4a:42:75:3c:cb:c7:24:35:58:42:08:
8c:41:a1:22:b5:4f:68:8f:c4:57:00:bb:d1:e6:ee:
de:fe:83:da:ed:5b:5a:77:5f:92:d8:29:ce:88:7b:
90:15:dc:ad:6d:06:62:05:94:db:50:92:64:f2:89:
ee:4a:f0:52:c7:05:c3:c9:0e:59:ad:de:6d:f2:82:
63:da:ca:13:46:17:7c:ef:2a:a1:e4:4e:3b:91:a4:
37:98:c3:93:1b:3b:c3:8c:f3:47:9e:9f:1b:66:14:
e2:98:81:49:48:fe:0b:e1:2c:0e:51:72:54:47:49:
b9:87:4f:f5:7d:19:09:aa:7e:7f:80:73:bb:c8:53:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:7E:2A:DD:3C:D3:E9:F3:FC:10:F2:B5:50:48:48:1B:D9:A6:9A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/fax-Kt080-nz_BDytVBISBvZppo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:380::/44
Signature Algorithm: sha256WithRSAEncryption
81:2f:59:4d:41:9b:c1:5e:ab:b0:4f:bb:51:4f:73:49:d8:b9:
4a:90:11:65:0c:bc:b0:e4:76:a4:3b:b0:ce:9f:73:56:c1:c9:
87:00:3b:17:ac:35:c3:65:0d:bb:21:85:be:63:45:b9:19:d4:
5f:9c:d6:22:80:f5:f8:98:27:d7:c3:5a:77:07:56:28:db:a1:
0c:ba:f8:1f:b9:44:a4:52:08:16:0b:0e:ed:d8:ee:28:db:b8:
70:a6:ad:8e:d1:31:d3:9d:34:fb:87:89:d6:fe:b7:41:3c:13:
ff:d9:5a:1a:c1:8d:87:bd:d8:20:73:1e:02:7f:e2:fe:5d:61:
9d:99:45:3c:44:fa:2e:dd:81:30:41:93:06:d5:ed:f5:a5:2f:
26:a4:57:de:95:dd:38:d1:b5:e8:09:ac:38:a0:5a:95:51:ff:
44:49:f2:59:77:46:c2:ef:88:c6:51:73:f3:a1:e9:e4:00:7a:
ce:f1:4b:00:83:44:1c:47:fd:f3:3e:84:6c:1b:46:5d:a1:26:
a6:99:67:38:74:a6:94:39:26:1c:08:c2:08:f0:13:15:ec:7e:
5b:86:e7:6e:40:bf:2a:a0:74:65:50:c5:24:c1:5f:22:e7:e3:
aa:0f:31:a8:0d:5a:7b:09:04:59:70:67:8e:73:4f:cd:8b:3a:
12:e7:27:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:54:29 2025 by rpki-client