Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/T8jVRfNtgOkoesNchTYMyWBMejA.roa
File: T8jVRfNtgOkoesNchTYMyWBMejA.roa (raw, json)
Hash identifier: odUOdpKN+tr75AiaB4U/yYO30gvxGiZ+PPW0U2k0wWk=
Subject key identifier: 4F:C8:D5:45:F3:6D:80:E9:28:7A:C3:5C:85:36:0C:C9:60:4C:7A:30
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 0194282599454E23EF448765517C81E596B2
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/T8jVRfNtgOkoesNchTYMyWBMejA.roa
Signing time: Thu 02 Jan 2025 17:52:20 +0000
ROA not before: Thu 02 Jan 2025 17:52:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 2a13:3d81::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:99:45:4e:23:ef:44:87:65:51:7c:81:e5:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Jan 2 17:52:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fc8d545f36d80e9287ac35c85360cc9604c7a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:10:a7:ae:75:e9:71:9c:31:13:a4:33:5d:
66:b2:ac:ee:27:3c:74:f6:72:9f:32:25:52:29:d9:
b6:6f:50:b5:33:31:fc:e7:59:0c:fd:13:fe:4e:19:
85:0d:2a:28:c9:bf:7e:59:e9:92:59:50:02:37:48:
fe:1c:de:ae:4d:83:7b:73:f6:4d:bd:cb:5b:03:5f:
61:d6:68:a2:d4:82:d8:60:fa:c0:fc:0d:89:09:6d:
88:fa:88:66:ec:7c:4a:66:dc:e1:d4:43:8b:c9:f6:
6f:ad:f2:6a:89:a7:60:9f:e5:df:9f:57:59:ce:f1:
db:e9:99:a9:2e:87:a4:c4:c9:52:44:92:33:91:30:
76:a5:6c:c3:9b:cc:a4:07:72:c9:a7:cb:d3:4c:c3:
71:ef:de:2c:7b:0c:26:a9:e8:3e:8c:9a:74:0b:1c:
ca:b6:fa:7a:fa:e3:7c:9a:2e:10:2a:84:90:cc:45:
aa:ed:93:df:e2:b9:29:da:e1:9c:f9:17:3e:67:ed:
6c:82:a8:29:89:fb:af:4f:74:74:3a:22:af:3e:6b:
aa:ab:f5:32:c1:50:dd:a6:b4:56:fc:a2:e4:c8:69:
a1:da:b0:41:fd:ab:a3:a8:21:01:f5:29:6d:93:39:
4e:10:70:c3:93:e6:68:70:85:94:3b:85:65:14:0c:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:D5:45:F3:6D:80:E9:28:7A:C3:5C:85:36:0C:C9:60:4C:7A:30
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/T8jVRfNtgOkoesNchTYMyWBMejA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3d81::/48
Signature Algorithm: sha256WithRSAEncryption
ac:a4:ed:f2:b2:3f:1d:1f:41:5a:f5:39:5a:f8:02:09:7e:b4:
a8:af:34:fe:f3:42:ed:ab:5e:10:42:79:0d:80:ef:b6:ce:49:
80:05:40:cd:bd:93:34:41:05:c8:3f:d0:38:84:83:85:ec:b5:
7c:6c:8d:32:51:6d:bf:f3:59:3e:b2:c5:b7:d6:da:44:21:1f:
a8:88:7d:bd:01:77:cf:f4:c4:2c:b3:4c:3d:48:2a:02:08:dc:
0b:35:f5:73:cc:6c:3a:c7:75:25:16:fb:2a:16:7e:f0:27:1b:
af:44:a4:32:b4:41:e1:6e:b5:30:d0:0e:7f:54:ca:3d:28:f8:
a7:ce:5a:86:d5:25:ad:9e:3c:0a:fb:f9:22:5c:44:e4:f2:85:
a5:61:cc:46:01:02:7b:b6:ed:75:3e:69:e0:5d:da:1b:7c:02:
3c:94:f0:68:64:b9:c2:24:b9:77:c1:9c:d5:36:84:92:ac:c4:
56:21:15:fd:fb:38:f4:24:1e:f3:0f:f7:37:03:bf:ac:5d:29:
a7:d3:0f:e3:b8:cd:48:c4:ad:67:ec:b9:3b:07:53:44:53:2e:
58:b8:25:d6:84:a4:15:7b:ff:87:6a:06:91:e2:64:a9:4f:fe:
9d:8c:a8:4f:ae:f1:a2:14:f9:59:d0:fc:f9:80:ee:77:26:49:
17:dd:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:44 2025 by rpki-client