Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/l5UxA-12CCT2e2hUreuNp9hu2UQ.roa
File: l5UxA-12CCT2e2hUreuNp9hu2UQ.roa (raw, json)
Hash identifier: AGhNPtWgChSl0EHeYh3JOTcK/OsuAG5xZH1zJYs2SOc=
Subject key identifier: 97:95:31:03:ED:76:08:24:F6:7B:68:54:AD:EB:8D:A7:D8:6E:D9:44
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3956B277DEA684726F727E0E926AF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/l5UxA-12CCT2e2hUreuNp9hu2UQ.roa
Signing time: Thu 02 Jan 2025 15:47:48 +0000
ROA not before: Thu 02 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:f42::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:95:6b:27:7d:ea:68:47:26:f7:27:e0:e9:26:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97953103ed760824f67b6854adeb8da7d86ed944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:16:56:f0:f0:3b:79:98:e7:41:b9:e6:6a:
6e:aa:a0:84:7a:69:9d:b0:35:ce:2a:74:6a:84:0e:
f6:fe:3f:e7:8d:73:66:76:1d:11:79:77:c9:fd:9f:
a3:fd:b2:77:df:6c:a9:0a:20:ac:08:61:3b:9b:53:
f3:fe:9d:22:43:3b:e0:20:1e:59:2e:de:93:14:7a:
81:e9:61:e2:ff:05:1b:47:1f:c1:68:44:04:26:e1:
2d:85:7b:96:2f:3e:ad:82:b4:bb:50:8e:c5:33:e3:
ba:2a:04:27:c7:74:d4:95:f5:9a:2e:de:ee:17:46:
c6:5b:81:a1:55:4f:e8:2b:03:e1:13:14:3d:37:ba:
13:21:d2:ef:8f:b3:33:a5:c0:4c:7d:9f:f5:56:df:
69:3d:cf:53:42:c2:b7:24:ce:f1:b3:0f:5c:53:3f:
f2:a7:94:22:ca:f1:4b:0c:66:8a:16:c3:2e:02:51:
dc:fe:c3:cc:a4:1c:90:9a:c8:2e:54:09:c6:dc:32:
04:44:24:7c:f8:40:3f:ee:98:ab:60:04:73:bc:24:
f8:bc:dc:e4:67:3c:fb:88:4e:77:05:84:f8:ce:6a:
ab:65:ea:5e:5c:b9:cf:6e:6d:4d:b7:c1:ec:20:9c:
0a:0a:0f:fd:de:4e:84:25:40:41:a9:a1:49:41:6e:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:95:31:03:ED:76:08:24:F6:7B:68:54:AD:EB:8D:A7:D8:6E:D9:44
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/l5UxA-12CCT2e2hUreuNp9hu2UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f42::/32
Signature Algorithm: sha256WithRSAEncryption
83:ed:f6:47:31:fb:27:56:20:25:1b:7b:53:7c:6f:da:8e:7c:
12:ea:70:62:71:67:8b:9e:5d:fd:6f:fd:fd:3b:13:2c:48:49:
bf:e8:7b:b0:a5:de:f3:7c:f6:8b:37:dd:63:77:bb:9f:d5:99:
94:f4:04:11:f1:96:b2:4a:8b:38:13:ff:64:36:bc:3c:d5:06:
5d:c8:88:47:71:e4:7b:31:43:79:59:e5:ea:36:41:72:49:57:
23:8f:6e:70:31:fe:27:32:36:5d:c9:30:67:0e:a1:47:cd:43:
79:8a:b7:e6:a3:19:d6:5f:8e:62:35:01:e2:ba:12:04:da:ee:
b4:8d:79:a5:d2:5b:0a:b8:2a:09:22:25:8c:70:c3:6c:12:cf:
9e:dd:c7:e9:59:3d:0d:6f:5a:8b:15:2e:2a:c7:72:48:50:7b:
6e:f7:10:65:91:59:5a:20:5c:c5:ba:2e:f2:d3:60:eb:32:9e:
c8:ba:5e:99:d4:54:13:61:56:1c:ff:76:a2:a8:bf:84:7c:c9:
19:2e:a7:69:46:0c:28:8d:cf:32:43:d1:5b:b4:3b:4f:1b:27:
8c:da:5f:15:8c:be:24:d8:60:1a:1a:aa:16:cd:c4:62:cc:7a:
de:0c:7b:f1:6e:b7:87:a2:2e:31:fe:49:f3:b9:9b:83:a5:e6:
f6:e2:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:48:27 2025 by rpki-client