Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pJWFxD3wn3WteifUfEbjzBiYlEQ.roa
File: pJWFxD3wn3WteifUfEbjzBiYlEQ.roa (raw, json)
Hash identifier: 7a0Qw7CXNCH5Q6evgFsefv3GQuzY0PX1MuVEpYoqqLM=
Subject key identifier: A4:95:85:C4:3D:F0:9F:75:AD:7A:27:D4:7C:46:E3:CC:18:98:94:44
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C778CC402E7F20348B3469247E630
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pJWFxD3wn3WteifUfEbjzBiYlEQ.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216085
IP address blocks: 2a12:bec0:570::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:8c:c4:02:e7:f2:03:48:b3:46:92:47:e6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a49585c43df09f75ad7a27d47c46e3cc18989444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:60:6a:1e:ad:1e:f6:1c:75:8e:35:d3:57:2d:
d1:e5:5b:3c:90:11:70:fe:80:b5:3f:9e:54:9b:4f:
0d:e0:bc:ab:7c:3d:f1:fd:3f:62:11:38:3a:ce:db:
9b:73:26:4f:a4:cb:21:be:b2:6e:38:24:6e:cc:a2:
d3:67:65:47:09:e2:a4:ac:a5:a6:42:96:45:91:a1:
33:d7:1a:80:62:4a:7e:1c:cd:f6:7a:e1:62:14:c7:
4d:31:6c:a0:fb:e4:c8:f5:f8:8c:2c:34:ac:be:0b:
62:65:49:ba:62:80:b6:ec:48:12:6a:0b:e2:73:d7:
c9:65:a2:af:f0:87:4e:c8:e1:49:5e:0c:67:df:3b:
a5:70:20:c1:25:cd:b0:61:ed:b6:b4:e1:0a:b2:29:
94:ac:9f:dd:79:13:d5:bc:8c:f2:a6:4a:b4:30:a0:
78:68:ad:f1:81:7e:ab:3a:bf:60:35:95:68:c4:7e:
1a:93:d3:59:5c:2a:ff:e2:ef:ab:09:3f:6a:ec:89:
5b:68:fb:41:0e:f1:bf:b9:68:7b:cb:ac:eb:73:2a:
e9:3b:c5:a0:e1:51:71:76:59:7b:d4:b0:7c:cb:6d:
90:30:13:c4:9d:10:4f:49:df:0c:ec:bb:d7:29:b1:
a8:22:31:1b:24:dd:a5:3a:b8:8e:0d:fb:ec:ac:b1:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:85:C4:3D:F0:9F:75:AD:7A:27:D4:7C:46:E3:CC:18:98:94:44
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pJWFxD3wn3WteifUfEbjzBiYlEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:570::/44
Signature Algorithm: sha256WithRSAEncryption
54:35:07:4f:71:e2:24:c6:ef:ad:4c:5f:32:87:0e:94:48:a6:
cb:b4:55:1f:ca:e4:b8:6d:88:59:b8:b1:13:c0:f3:7d:42:de:
04:12:ac:50:13:16:b8:20:c7:98:a2:14:bb:43:d4:cb:c1:63:
38:84:cb:9f:60:fd:4e:0d:1b:27:97:ca:27:ba:22:4d:06:70:
0d:aa:ba:48:63:91:fc:82:89:52:35:bb:5d:12:65:40:38:28:
fa:79:1b:31:b7:8a:a5:67:10:5b:d5:23:86:be:5d:21:a3:a3:
fa:12:c3:c7:b8:2a:68:08:bb:f8:c2:58:55:57:65:f1:ca:3a:
ec:2d:b8:38:5d:c3:74:3a:50:d0:74:cb:d6:94:fb:4c:48:bb:
14:00:f4:34:72:29:37:95:6d:52:2a:0f:3d:c4:c0:7f:e6:b7:
b4:ff:a8:34:96:c5:06:32:a1:c3:5c:a7:59:13:6e:78:30:80:
2a:6d:53:2d:13:71:40:89:66:b2:0a:69:8e:54:57:64:b5:55:
cf:14:ef:13:46:96:50:c4:88:24:64:da:3b:24:e9:8d:2a:b1:
9e:78:f0:dc:aa:2a:5e:c3:83:26:64:90:91:95:a9:ac:df:a6:
8b:69:32:f2:4d:8b:90:39:90:65:14:52:b4:b2:ff:39:60:5d:
a9:c9:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:41:06 2025 by rpki-client