Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Ry70HmPREvPtdWqDVxMkB919Y3A.roa
File: Ry70HmPREvPtdWqDVxMkB919Y3A.roa (raw, json)
Hash identifier: fpERAjApGjwtkHRzgeuo0sa3h19V8tyt2wbu/yF6puA=
Subject key identifier: 47:2E:F4:1E:63:D1:12:F3:ED:75:6A:83:57:13:24:07:DD:7D:63:70
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDD4C524F4ACF1DF4C2D244109AB33
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Ry70HmPREvPtdWqDVxMkB919Y3A.roa
Signing time: Thu 02 Jan 2025 07:49:39 +0000
ROA not before: Thu 02 Jan 2025 07:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13852
IP address blocks: 2a0a:79c0:a00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d4:c5:24:f4:ac:f1:df:4c:2d:24:41:09:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=472ef41e63d112f3ed756a8357132407dd7d6370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:31:61:55:ff:ec:51:1f:b9:0c:e0:0c:2d:
52:b7:ec:a6:0e:79:37:7d:45:03:6e:e9:c5:0e:52:
61:03:52:1a:86:8b:6d:c5:9c:cf:8a:d7:95:d8:cc:
90:73:3f:65:17:28:e3:08:fe:e0:da:d7:26:ac:36:
0e:5f:ad:f7:bc:e7:14:97:e2:15:b4:79:fd:62:5a:
d0:d4:76:5b:9d:33:56:7f:56:a8:01:72:35:f0:43:
5f:bb:b1:d7:31:ec:c9:85:0f:be:80:a3:cb:4e:0e:
bc:06:e8:5d:d5:ca:66:2a:b3:18:8e:7b:e9:f9:bf:
06:46:ed:97:27:7f:4b:80:d8:08:f3:97:5b:b6:ff:
27:6f:dc:be:37:bf:31:e4:70:76:3f:4a:b0:00:cf:
c1:af:12:3b:79:ab:3e:95:56:f5:f7:bb:3c:d1:7d:
ad:41:61:95:5b:ba:e7:98:ff:a2:cb:10:2f:e2:6d:
64:c3:54:32:18:37:98:2a:70:8a:49:79:6f:aa:7d:
1f:f9:c1:b4:dd:4e:d2:17:48:c1:51:02:a2:b6:52:
c9:32:6c:c9:47:09:b6:37:86:e5:05:08:f4:bb:2e:
57:c7:59:1b:d6:0e:b4:49:0c:6c:f6:b6:7f:53:73:
24:c0:c7:02:49:6a:14:5b:58:57:21:7c:87:0d:c8:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:F4:1E:63:D1:12:F3:ED:75:6A:83:57:13:24:07:DD:7D:63:70
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Ry70HmPREvPtdWqDVxMkB919Y3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:a00::/44
Signature Algorithm: sha256WithRSAEncryption
54:0c:be:85:78:6f:dd:b8:e6:c1:2f:c8:f3:ad:50:f3:b6:f9:
53:b1:cc:f3:7e:79:61:58:b0:54:c9:40:04:66:bd:e8:e8:f0:
05:59:ff:14:9e:5e:bc:84:05:28:b2:f9:2a:97:75:73:c8:31:
fc:cf:72:10:53:92:76:da:4d:b4:7d:79:21:3f:f4:5a:c5:70:
7f:13:d2:82:5d:7e:4f:2f:2d:a8:30:8a:7f:00:b9:84:f7:b0:
ac:92:77:3b:4d:6c:6b:96:7d:f9:e8:b3:e3:dd:47:e5:8c:02:
d2:7d:ff:89:ba:7a:78:22:00:e0:e9:39:c6:41:26:7c:14:89:
4d:70:f6:a9:43:fd:8d:d0:6b:20:6e:09:24:be:c4:44:46:14:
49:be:70:6e:bd:df:79:3b:15:0b:38:8e:0e:6f:03:20:64:64:
95:84:eb:1a:04:60:ef:35:81:5e:d8:df:e6:d4:14:43:f5:0b:
4a:09:3a:69:ca:23:37:d2:9e:f6:71:4d:4b:77:87:f0:33:c8:
49:07:b7:d3:10:f3:7d:a4:22:f8:01:57:ab:52:95:09:1f:55:
32:12:9c:40:10:6c:e9:93:6f:77:c6:ca:ed:ff:12:4c:fb:59:
d7:a2:d0:35:28:04:1d:06:f4:7e:3d:66:39:5a:53:71:63:c2:
a1:a6:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:15:04 2025 by rpki-client