Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uY-kEgxAW08INht_ttshgxXq9HA.roa
File: uY-kEgxAW08INht_ttshgxXq9HA.roa (raw, json)
Hash identifier: CfwC82tAPZ5rUOyduKlf+Nr7EmM2gBuFnlhI03duTcQ=
Subject key identifier: B9:8F:A4:12:0C:40:5B:4F:08:36:1B:7F:B6:DB:21:83:15:EA:F4:70
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDEDFB58C7DD327D2030C04B389382
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uY-kEgxAW08INht_ttshgxXq9HA.roa
Signing time: Thu 02 Jan 2025 07:49:46 +0000
ROA not before: Thu 02 Jan 2025 07:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214514
IP address blocks: 2a0a:79c0:600::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ed:fb:58:c7:dd:32:7d:20:30:c0:4b:38:93:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b98fa4120c405b4f08361b7fb6db218315eaf470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:7c:e6:cd:db:07:65:ef:d0:df:49:d1:94:
53:53:8e:ab:e8:d3:64:a7:38:e3:ee:59:f8:07:65:
17:52:d1:bd:9e:25:55:28:e6:c5:59:d9:43:29:3b:
c1:84:50:bf:3e:07:66:5e:7f:84:42:60:37:d3:7f:
a5:7e:6b:6f:d9:48:8f:fc:82:5d:62:80:2f:51:9c:
c1:0c:03:ab:dc:fb:b9:bd:3e:44:9d:a8:01:a9:98:
a9:9e:c5:10:64:47:2d:1a:17:ae:ef:76:5f:16:16:
34:36:f8:50:73:d6:83:5c:12:ff:5b:f8:fc:6e:0c:
d0:86:f4:64:a5:d0:b8:5e:39:76:6a:47:e6:52:43:
86:8b:98:e7:91:c0:71:fb:03:ec:f5:54:e6:b3:95:
cf:c8:51:30:f9:e0:f6:d4:7d:67:ab:2f:62:85:d6:
d4:b6:22:16:de:58:9c:3f:c7:4c:ab:8a:f9:f3:62:
0d:77:29:67:e2:3f:53:d7:c5:a7:2f:e8:0b:5e:d2:
7c:f2:fb:9f:1f:47:34:0e:57:e5:ad:25:26:44:0c:
6e:69:89:a4:a2:aa:44:51:53:12:48:f2:4f:69:1e:
59:f8:6c:70:af:2d:7b:93:95:1b:e0:41:40:1b:01:
ee:57:d4:00:32:60:cf:75:f7:f2:4e:c1:8f:6e:b0:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8F:A4:12:0C:40:5B:4F:08:36:1B:7F:B6:DB:21:83:15:EA:F4:70
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uY-kEgxAW08INht_ttshgxXq9HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:600::/44
Signature Algorithm: sha256WithRSAEncryption
ce:32:2a:68:95:78:80:18:9a:69:1b:50:96:67:0a:7d:df:0c:
81:09:9b:b3:44:32:55:fe:d4:9f:b5:bb:ff:c4:b1:35:ae:ba:
2d:29:87:d4:e0:5e:18:d2:ef:8a:5c:6d:8b:a2:8e:72:32:dd:
b0:58:49:d2:da:b1:46:bd:a8:1f:d1:c0:d9:48:17:39:59:b5:
71:50:3a:29:94:3f:e3:a1:f5:2c:78:a6:4d:14:f3:fd:93:fd:
65:d8:6a:ab:14:90:67:ea:61:ed:18:88:44:52:bb:ab:6a:30:
92:2c:84:a8:85:ad:66:18:a3:58:f8:f7:c3:94:4c:a4:88:23:
c0:fb:fb:fe:92:c8:64:1a:59:8a:7a:81:a3:21:b4:ac:f8:e6:
0a:18:db:37:3d:3f:a0:58:a5:35:44:a3:a4:b7:30:31:99:b7:
8f:42:7c:83:49:75:44:ab:2a:39:59:fc:a0:2c:26:b9:da:18:
52:86:65:ef:08:11:e1:7a:08:98:37:d9:61:2f:44:0d:fd:57:
d5:82:11:7a:53:d0:e3:52:54:91:2d:8c:e9:a4:cc:93:b6:7e:
fb:07:26:7b:3d:61:43:7a:4a:7b:c5:2e:86:27:9f:0a:f8:40:
43:d0:78:31:22:48:c3:bd:a8:92:5f:d3:e2:33:c1:67:34:44:
cc:b1:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:40 2025 by rpki-client