Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/X4ndwPZxVFoSM5mmzVMfNdptKh0.roa
File: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (raw, json)
Hash identifier: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=
Subject key identifier: 5F:89:DD:C0:F6:71:54:5A:12:33:99:A6:CD:53:1F:35:DA:6D:2A:1D
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 019428271830393F730AF64C23AEB7538CEC
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/X4ndwPZxVFoSM5mmzVMfNdptKh0.roa
Signing time: Thu 02 Jan 2025 17:53:58 +0000
ROA not before: Thu 02 Jan 2025 17:53:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142597
IP address blocks: 2a0e:46c4:2c30::/44 maxlen: 48
2a0e:46c4:2e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:18:30:39:3f:73:0a:f6:4c:23:ae:b7:53:8c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f89ddc0f671545a123399a6cd531f35da6d2a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:b1:57:9e:15:38:1d:83:81:1a:14:c7:dc:
ce:0f:ad:35:95:bf:5b:91:8b:d8:05:13:3f:14:cb:
d4:0d:31:e4:75:be:64:f0:d4:52:d6:7d:36:52:ce:
47:d4:8c:80:10:8b:a0:12:42:ef:2e:aa:14:83:fc:
1d:82:47:68:dc:ec:b0:fc:f2:47:ef:9c:eb:7b:ce:
a7:ba:ce:79:74:8f:c7:80:e3:d5:ec:26:b6:97:25:
c9:e9:68:bf:d0:f6:a5:d8:c3:8c:c3:16:06:6c:28:
73:b2:2d:00:31:1f:d0:6c:1b:0a:86:67:24:ef:cd:
bc:5a:15:cc:6a:c9:bb:5d:32:fb:f4:06:b4:09:1f:
eb:7c:38:40:f3:e4:e7:01:42:4d:7f:3a:78:37:c9:
9e:32:f7:17:d3:4c:ed:3b:0c:fd:1f:f3:81:e3:27:
a6:a5:c3:ca:30:c7:75:40:47:50:64:fe:7c:03:93:
e3:3e:67:52:b2:09:45:8c:db:fe:69:9c:59:3e:de:
8b:ba:7d:e4:e9:04:1b:26:48:46:cf:ed:42:96:49:
b5:af:af:2d:a8:fb:61:81:d3:ed:57:1c:9c:b1:45:
05:7a:a5:dc:e8:83:6e:70:6c:22:a5:08:43:86:16:
c9:91:b4:b3:38:95:22:f0:f8:61:92:65:25:3e:b3:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:89:DD:C0:F6:71:54:5A:12:33:99:A6:CD:53:1F:35:DA:6D:2A:1D
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/X4ndwPZxVFoSM5mmzVMfNdptKh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2c30::/44
2a0e:46c4:2e00::/40
Signature Algorithm: sha256WithRSAEncryption
44:7b:d9:a5:32:7f:e0:d7:cc:1c:88:b2:a0:4e:1e:1a:20:fd:
46:0f:ba:4a:59:7a:96:cc:fa:c2:19:33:e8:70:52:7e:22:b8:
bd:d9:a6:50:9c:85:f5:8d:97:58:96:7f:96:e8:68:04:e9:67:
24:3d:12:f9:b0:32:95:97:b7:af:5f:b0:57:e2:e7:88:35:39:
94:b2:45:53:c6:7c:87:d6:07:c2:5b:c3:0b:77:52:f6:f1:24:
57:0f:92:51:f8:6d:36:59:e8:27:55:60:4b:2f:38:40:6f:1d:
76:76:02:d0:98:f0:30:2b:d4:e3:b5:3f:66:3b:fc:44:ca:89:
9c:77:c0:52:fc:0b:6f:20:8b:2b:06:59:bb:50:d6:8d:4d:06:
b8:be:18:a7:ad:b9:45:fd:8b:59:75:3d:0b:dd:16:62:70:39:
36:86:8f:5c:8e:bb:b3:ad:0a:b4:5f:ae:43:63:14:91:c4:f0:
35:b7:de:51:56:c2:3f:d0:54:0b:d1:2f:a1:98:9c:71:69:83:
05:db:ce:55:0d:64:9a:d1:0f:35:6e:8e:24:33:f0:62:6a:8b:
7f:85:42:7b:a2:2a:00:37:50:ef:26:15:23:d6:dc:5f:12:30:
57:14:bf:a0:81:b4:18:0f:08:8b:0e:0b:14:06:4c:bb:a6:b4:
3f:e4:c6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:04 2025 by rpki-client