Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ug2fdy-bg0w0m17NCrDQQhhL6MQ.roa
File: ug2fdy-bg0w0m17NCrDQQhhL6MQ.roa (raw, json)
Hash identifier: jPxkkp93/BHBjAOEl/rj++1hF3RjCGJ26m9/M+dKsek=
Subject key identifier: BA:0D:9F:77:2F:9B:83:4C:34:9B:5E:CD:0A:B0:D0:42:18:4B:E8:C4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C70AA76F2B2DB9D29C4C8A58B593C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ug2fdy-bg0w0m17NCrDQQhhL6MQ.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215538
IP address blocks: 2a12:bec0:6b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:70:aa:76:f2:b2:db:9d:29:c4:c8:a5:8b:59:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba0d9f772f9b834c349b5ecd0ab0d042184be8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:1c:2b:a4:48:a1:47:08:93:44:6a:eb:b9:
dd:43:7d:ff:6b:06:63:73:e7:c0:cb:d8:09:da:86:
d2:f1:be:e1:f8:ae:92:15:a8:27:cb:05:6e:e2:27:
0f:e7:21:70:a1:50:32:a9:e4:19:03:8e:ad:50:54:
ab:68:36:9d:97:b4:b4:ba:f8:e2:26:68:b1:2e:0e:
f5:53:38:df:ed:e6:f7:bf:ed:78:5d:2c:60:62:d0:
8c:0e:38:ab:6d:ab:f2:77:0b:dd:e0:27:ca:05:ce:
6d:71:53:60:f0:96:03:25:17:84:b2:dd:4a:1b:a2:
ef:7a:47:8b:cc:27:79:89:e4:81:a4:36:d1:87:d5:
ec:cc:c9:3f:c2:2c:fc:f6:4b:eb:e9:25:c9:c2:98:
92:c1:94:61:f6:fe:86:e6:ab:f3:ff:5d:a9:db:51:
55:54:5f:57:e1:ef:6d:8e:40:7b:f8:e8:a4:f5:30:
1b:a0:40:c5:0f:c2:f2:f6:b8:99:82:0b:1b:d3:bd:
31:75:b9:b8:88:ee:20:66:eb:5c:d8:c6:92:0e:4e:
60:44:a0:07:3f:9f:9a:bf:64:2a:5c:1b:bb:a5:d1:
8a:cd:51:d0:c6:24:3c:91:91:db:b2:56:1f:a6:a2:
60:26:e1:c1:a4:13:46:ca:c7:c9:a7:f7:55:86:6f:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0D:9F:77:2F:9B:83:4C:34:9B:5E:CD:0A:B0:D0:42:18:4B:E8:C4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ug2fdy-bg0w0m17NCrDQQhhL6MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:6b0::/44
Signature Algorithm: sha256WithRSAEncryption
26:cf:3a:4a:e1:89:01:b8:13:5e:ce:ad:08:d2:fe:f3:bc:dd:
66:57:7a:0b:d1:f9:b0:27:1d:7a:3a:6e:bf:be:e8:01:7d:e4:
89:c8:f0:ec:51:0e:87:6f:ec:2d:89:84:77:91:69:ce:77:13:
a8:12:44:fe:a0:1f:c4:5e:a2:0e:0d:89:9f:ee:fb:3f:50:b3:
9b:8c:c7:69:87:36:24:6f:c7:4c:5a:9a:7e:56:f0:17:be:e9:
92:61:cb:d1:0d:d1:25:fe:7c:26:7a:b0:9c:17:c2:7c:33:7f:
d9:0d:ee:d5:d3:19:f7:14:2b:5b:e6:58:05:00:b8:b7:ed:68:
18:e7:b1:a3:f3:d0:38:cc:b2:b5:e1:6d:8b:36:c0:97:66:1a:
73:a7:12:35:1d:65:83:7d:65:eb:cd:44:10:ee:a8:7d:55:c5:
89:bc:7f:5c:03:09:2a:a2:a1:0e:d3:5d:73:7a:ff:e7:6c:c8:
a7:b8:95:78:99:4f:70:51:f6:76:9e:6e:1d:88:cc:f3:17:e9:
85:3f:32:0d:9a:e9:05:61:02:70:fa:9a:29:32:52:16:41:5a:
41:5e:95:eb:7b:e4:c7:46:56:d3:cf:f9:b1:9d:4b:d1:30:cd:
f7:d8:a4:dc:41:6f:c9:cc:15:0b:cc:00:b4:2d:ad:b1:46:95:
26:bc:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:10:52 2025 by rpki-client