Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oiVsCuxjj31EOYKAO_2MgnuMxnI.roa
File: oiVsCuxjj31EOYKAO_2MgnuMxnI.roa (raw, json)
Hash identifier: 1i7Umf3kI5Q4HTXkuZwY2NB1VstwfiV8Mx2Yf8OgnmE=
Subject key identifier: A2:25:6C:0A:EC:63:8F:7D:44:39:82:80:3B:FD:8C:82:7B:8C:C6:72
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01952FD154E3067FD9E9B73330BE703D3155
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oiVsCuxjj31EOYKAO_2MgnuMxnI.roa
Signing time: Sat 22 Feb 2025 22:40:02 +0000
ROA not before: Sat 22 Feb 2025 22:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216402
IP address blocks: 2a12:bec4:14a0::/44 maxlen: 44
2a12:bec4:14a0::/48 maxlen: 48
2a12:bec4:14a1::/48 maxlen: 48
2a12:bec4:14a2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2f:d1:54:e3:06:7f:d9:e9:b7:33:30:be:70:3d:31:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 22 22:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2256c0aec638f7d443982803bfd8c827b8cc672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:da:b0:a1:44:f3:34:ef:2e:06:b2:15:16:
eb:a0:10:e8:a2:6c:3b:f8:3f:47:bc:14:24:cc:46:
ef:fd:2e:8f:7c:32:ca:d1:bd:37:11:5c:dd:a5:95:
41:65:77:e2:83:7b:9f:58:fb:92:fd:90:69:b2:73:
d2:e6:e7:11:55:ba:ab:49:3a:4c:34:1d:96:5e:2f:
c1:fb:66:42:06:db:d6:73:67:80:10:c2:16:b2:94:
dd:bd:18:e4:f6:40:36:85:df:85:af:7f:af:d2:39:
ec:f7:19:0a:1a:ca:1d:a0:78:5e:2b:a8:75:4a:26:
83:50:1e:6f:da:fc:ba:86:8b:47:c7:22:e9:4a:3f:
c3:e0:af:57:86:69:55:62:82:8e:28:31:ca:10:b9:
4f:21:63:12:cd:fb:a1:41:05:7d:58:4b:db:99:61:
b8:32:72:2c:6a:25:3b:57:3c:27:60:e5:79:1f:86:
27:4a:bd:fd:80:7d:cd:c3:8e:8a:b2:c6:a9:37:1a:
80:62:43:dc:5a:6c:f7:8d:01:e1:2f:2e:ed:3d:4d:
e3:75:84:ee:0e:c6:84:82:3d:04:2c:e8:29:63:1d:
a5:d4:bb:e1:af:68:a1:46:18:7f:d9:09:9d:4a:17:
0f:3a:af:b5:44:0e:16:34:ff:b7:e1:46:f7:cd:e7:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:6C:0A:EC:63:8F:7D:44:39:82:80:3B:FD:8C:82:7B:8C:C6:72
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/oiVsCuxjj31EOYKAO_2MgnuMxnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:14a0::/44
Signature Algorithm: sha256WithRSAEncryption
62:0f:d1:76:7d:3b:ea:5f:be:1d:8e:5e:da:44:c7:5b:68:94:
06:5d:14:04:98:5c:42:05:90:86:64:ae:f3:46:54:a8:77:60:
ee:0a:b5:37:60:b7:1c:bf:0b:29:77:77:6e:8e:b6:b5:53:2c:
89:bd:ef:de:c8:89:09:8a:47:94:d9:60:7a:ba:b6:59:a3:c7:
4c:6d:34:21:d1:ad:46:e5:1f:7a:80:a8:49:d9:73:59:f2:31:
a3:86:f0:42:22:0c:03:58:1e:18:cf:32:e8:ae:d5:27:7e:74:
0f:7d:36:c4:58:9e:66:bf:f4:55:2b:42:61:03:19:b6:a7:0e:
8c:64:8e:9e:d6:f6:fe:2f:4c:91:13:10:ba:58:ff:87:36:2c:
60:60:51:4b:d0:38:17:b4:54:2c:f3:23:e1:59:17:39:f4:13:
0a:48:65:91:68:b3:eb:38:fc:38:cd:c0:9a:8f:4b:5b:a9:60:
ca:cf:23:ce:10:c6:66:9d:25:7a:8c:84:c7:9c:31:c2:eb:8c:
26:66:df:03:f2:4b:69:2b:46:e0:0b:51:aa:70:99:df:b2:de:
76:02:7c:07:21:6c:6c:0d:bd:03:74:aa:8a:0a:cc:2c:22:ca:
b3:ea:c8:b7:29:a5:d6:33:9d:95:76:0f:d5:7f:e5:4f:26:1e:
57:58:86:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:02:17 2025 by rpki-client