Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pSOuvhRg8lgLnk0vdGYElPMdCpQ.roa
File: pSOuvhRg8lgLnk0vdGYElPMdCpQ.roa (raw, json)
Hash identifier: dotuR4hFJuxNKM/g2fauBB4nu7Tgk78ZaMjhMkBhRvE=
Subject key identifier: A5:23:AE:BE:14:60:F2:58:0B:9E:4D:2F:74:66:04:94:F3:1D:0A:94
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0194FBA352FB8D4F1E7CC1040F990F325BB2
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pSOuvhRg8lgLnk0vdGYElPMdCpQ.roa
Signing time: Wed 12 Feb 2025 19:29:32 +0000
ROA not before: Wed 12 Feb 2025 19:29:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 2a12:bec4:1520::/44 maxlen: 44
2a12:bec4:1758::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fb:a3:52:fb:8d:4f:1e:7c:c1:04:0f:99:0f:32:5b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 12 19:29:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a523aebe1460f2580b9e4d2f74660494f31d0a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:d0:ed:e3:46:3f:d7:81:04:01:dc:14:19:
12:eb:56:a3:d8:12:ba:39:4a:70:1a:88:98:66:e5:
55:47:a8:b5:0b:e1:4d:85:a6:14:10:2e:61:0f:33:
ad:0c:af:7a:82:57:75:a5:b4:0f:1a:6d:7c:db:0c:
9d:8d:17:1b:bd:68:e1:02:96:1f:1c:e6:17:bc:f0:
0c:94:98:06:5f:ec:f2:f8:cb:93:29:05:16:bb:9c:
ab:9e:95:0a:bc:1f:5a:44:b8:7a:27:f9:5e:f1:26:
9b:6b:eb:e4:1f:9b:f3:28:16:85:e7:32:2c:25:a4:
44:9f:67:40:b0:d8:85:d3:4e:93:0a:f7:3e:23:4e:
ec:d7:74:5d:34:8b:a3:f3:96:c9:11:88:ce:34:a7:
2b:b5:60:eb:b7:eb:c6:61:a4:b9:48:fd:5e:8d:11:
68:57:5e:75:17:61:c1:f1:65:83:62:bd:a5:a6:54:
6c:94:c5:3c:9d:a3:e0:51:04:07:fd:ec:9c:c6:c0:
b7:7f:43:9d:f1:84:7e:8f:21:e1:a1:bd:0e:9b:a1:
4f:d9:58:c8:97:ed:68:02:1d:79:3e:11:49:a5:1d:
0c:23:c4:90:30:90:58:b1:6f:bb:cd:a4:07:31:e0:
47:fd:45:4b:2b:cd:8e:97:2a:b4:9b:ee:36:af:6b:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:23:AE:BE:14:60:F2:58:0B:9E:4D:2F:74:66:04:94:F3:1D:0A:94
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pSOuvhRg8lgLnk0vdGYElPMdCpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::/44
2a12:bec4:1758::/45
Signature Algorithm: sha256WithRSAEncryption
a8:71:8d:a1:b4:1c:ac:9e:b8:a5:e6:01:9a:a0:f4:5d:d2:78:
34:06:87:23:f8:e3:1c:79:03:85:3c:3f:36:ad:59:47:4f:2e:
1f:ef:59:05:6f:fd:0c:22:08:88:af:1f:90:f0:c0:14:2b:13:
49:56:83:af:aa:c6:e5:07:c7:07:b3:9a:4b:0d:92:37:cb:fd:
ff:73:c0:a2:c7:70:7a:a6:8a:b5:a9:b2:a4:ec:13:12:e1:be:
36:f8:a6:13:fe:1e:13:0b:10:db:c1:22:aa:45:63:6c:a2:88:
92:41:ca:d0:71:64:d4:3d:7b:90:64:e7:cd:f5:34:49:b1:ce:
da:fe:6e:43:5f:0e:68:5e:8e:bb:76:c7:ca:16:53:63:44:12:
40:96:c3:e1:2b:23:fb:86:88:ca:a2:8c:b3:dc:9f:c9:4c:f5:
d4:e1:e9:6f:61:a8:6b:08:91:49:cb:21:a1:7a:ac:b2:62:2c:
55:62:20:22:bf:2e:42:ef:5f:07:45:61:cd:43:c9:19:d1:d1:
af:fa:64:0d:6d:06:c9:2c:e3:7c:22:29:51:c8:c0:50:56:a2:
b6:64:b5:c1:05:cf:dd:34:a4:7b:0b:85:81:0c:4b:9f:d1:85:
74:88:88:00:99:fe:94:e6:1d:3f:36:fd:8c:16:04:f3:13:12:
cf:a3:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:41 2025 by rpki-client