Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/K5vbAl_H3B87djRm_AqpMSGgebs.roa
File: K5vbAl_H3B87djRm_AqpMSGgebs.roa (raw, json)
Hash identifier: Fe41AX22b8kKGMiquA7Aakj+0l+wq87HyZLc6RPvrEg=
Subject key identifier: 2B:9B:DB:02:5F:C7:DC:1F:3B:76:34:66:FC:0A:A9:31:21:A0:79:BB
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 019421B221AF49CAA48E405AEE70BD628450
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/K5vbAl_H3B87djRm_AqpMSGgebs.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398826
IP address blocks: 2a02:7080::/48 maxlen: 48
2a02:7080:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:21:af:49:ca:a4:8e:40:5a:ee:70:bd:62:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b9bdb025fc7dc1f3b763466fc0aa93121a079bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:a8:43:f7:38:0f:c5:49:f4:5b:76:3e:92:
82:ae:97:ac:17:29:49:1e:6d:83:60:8d:69:b6:25:
48:ca:04:46:fd:ec:03:e2:d5:52:d0:b7:71:8f:f7:
30:46:53:5f:94:98:30:9b:c9:74:96:94:8c:b5:e3:
be:ed:5c:42:ea:95:52:9b:65:65:cc:7b:b6:7a:70:
30:fa:67:d3:71:d6:71:b7:01:af:14:d3:a6:b0:78:
09:19:1f:c1:5e:f5:2f:c5:09:99:fb:f2:ee:fd:ae:
70:65:92:e9:dd:64:5f:17:bb:49:08:46:43:cb:2a:
b1:9a:c5:8e:4a:83:db:0a:7a:a0:2d:ce:38:85:41:
b3:b1:45:f6:42:eb:8d:1c:bf:a1:37:44:8b:de:f3:
44:be:85:d6:fc:6b:d4:86:ee:2c:8a:57:44:df:ce:
36:32:3e:3e:3c:55:af:15:57:60:00:93:60:ca:50:
10:32:ba:05:c2:88:be:fc:92:09:b6:cd:d5:17:e7:
09:81:16:dd:73:2c:17:c4:4c:85:c2:ab:d8:d1:01:
74:ae:c3:08:a2:af:bb:9d:ac:bd:3a:2b:b8:02:6a:
6a:45:52:77:f6:95:a6:57:ee:78:b4:8e:31:55:00:
6e:51:24:c6:40:97:aa:44:59:b9:5a:29:29:3d:e2:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:DB:02:5F:C7:DC:1F:3B:76:34:66:FC:0A:A9:31:21:A0:79:BB
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/K5vbAl_H3B87djRm_AqpMSGgebs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7080::/48
2a02:7080:1000::/48
Signature Algorithm: sha256WithRSAEncryption
cf:27:39:27:cf:b1:0b:98:c5:ba:aa:80:90:a5:89:fa:f1:d7:
cb:bc:29:93:87:3d:cc:31:d2:b6:2f:2a:49:b0:82:7a:63:42:
f1:ea:f4:c7:16:f1:e0:18:45:79:df:24:e4:0e:31:00:14:8a:
b3:29:be:23:cc:17:64:3e:99:d3:06:1c:e9:09:a0:90:f8:e5:
35:d3:fc:bd:53:0c:0f:cd:00:2d:26:4c:bf:ea:97:db:f1:45:
3b:e3:3e:77:17:f5:d7:ee:03:d7:a9:30:7d:85:a0:26:2c:a5:
70:fc:15:f7:f5:e3:3f:c1:b6:88:13:0c:41:d7:e1:7c:7d:5e:
83:19:c1:c9:b2:4e:b8:5e:1d:26:db:18:fc:60:7f:3c:e5:53:
fb:8c:b0:10:e6:a4:e2:78:33:ee:ac:20:fd:5c:f4:da:de:96:
ba:9e:79:06:8e:4e:3a:9e:32:b8:98:4e:96:8d:ef:cc:c0:6a:
81:4e:e8:11:4f:25:70:ad:02:f8:21:3b:a5:6e:17:67:00:19:
e4:08:0f:2e:4b:d8:e8:c1:35:f3:ba:85:fa:f9:1a:81:df:8b:
a7:84:d4:ea:b7:31:1c:94:7a:16:62:04:fe:06:78:25:f1:6c:
07:5f:18:48:e6:98:0b:9c:a6:c2:09:e4:44:74:d6:1c:e8:25:
9d:ed:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:28 2025 by rpki-client