Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/0JGiKje1faw9lacGbk5NhV2XAbU.roa
File: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (raw, json)
Hash identifier: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=
Subject key identifier: D0:91:A2:2A:37:B5:7D:AC:3D:95:A7:06:6E:4E:4D:85:5D:97:01:B5
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01942143E27F1D7B83EC7D4B562483ED6BC9
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/0JGiKje1faw9lacGbk5NhV2XAbU.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199491
IP address blocks: 2a00:1908:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e2:7f:1d:7b:83:ec:7d:4b:56:24:83:ed:6b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d091a22a37b57dac3d95a7066e4e4d855d9701b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:d5:71:93:ae:d0:79:67:d9:b0:17:ef:0d:
9a:9e:47:79:65:bf:2b:a1:84:dc:28:94:7e:e7:8e:
3f:e4:58:4a:bc:2a:53:dd:12:64:77:e9:b9:4e:da:
ba:fb:de:c4:d3:40:d8:ce:07:10:77:1f:a4:bd:d4:
62:f6:49:04:4e:d3:5b:a2:9d:bb:84:e6:5c:51:4b:
fa:aa:66:66:ef:64:ca:06:93:1e:1b:83:af:4e:7d:
2f:88:d3:d2:f7:ed:55:a5:05:52:6c:68:ba:57:00:
ee:5d:7a:55:5e:85:fc:bd:5e:89:aa:be:50:29:ee:
3c:b6:e8:73:41:62:b6:fc:b0:75:77:69:ef:9f:91:
7a:b5:97:73:11:fa:1f:fe:18:4f:98:49:73:93:ec:
f7:c3:d8:18:4b:34:21:1c:6a:a9:ad:3e:4a:1e:fe:
fe:33:22:e3:6e:08:80:eb:f5:42:f0:3c:66:05:64:
a5:a7:83:f7:5d:da:d4:25:cc:ba:96:d1:e0:94:01:
4f:d3:1a:83:44:6a:d0:87:72:da:4c:80:84:b9:d3:
0e:28:6e:68:75:8b:b5:87:0c:e7:51:38:fd:5a:c1:
e1:83:44:b4:dd:3e:ff:9f:9f:2e:e1:3f:c0:65:00:
7c:b9:dd:7b:7c:49:ff:54:a2:b6:3e:86:e9:ba:34:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:A2:2A:37:B5:7D:AC:3D:95:A7:06:6E:4E:4D:85:5D:97:01:B5
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/0JGiKje1faw9lacGbk5NhV2XAbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1908:e000::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c4:06:17:72:71:10:67:cd:a6:2d:18:b0:17:05:ca:3d:73:
9a:80:19:46:6b:13:62:60:76:26:ad:2b:6e:b1:2c:17:37:03:
71:56:4f:ad:81:20:8b:72:d0:7b:bc:16:9f:d3:ca:72:aa:2d:
17:cd:23:e2:80:fd:76:e9:98:77:b9:52:74:f1:23:a1:75:21:
11:86:ae:ef:20:4a:ab:78:d1:2c:fb:6a:39:23:a8:fe:c5:13:
11:a0:59:ac:38:ce:69:ea:74:d4:bd:73:6a:45:5b:9c:16:2a:
92:ac:23:af:24:1e:3c:9f:b7:a8:5b:4e:af:d7:07:6b:79:b3:
28:93:82:ed:f0:ca:ed:a7:dc:1a:9b:1e:23:60:81:c9:05:45:
d9:c6:f7:64:44:e8:df:e8:c9:d5:28:2b:b6:39:6a:cf:b7:53:
f6:bd:3a:f8:c7:33:92:be:2f:08:8e:2b:b9:14:8a:29:f8:69:
d9:e5:22:42:28:d8:ac:83:c6:a3:b2:80:a3:78:64:a1:89:9c:
bc:f2:d7:36:fc:7b:90:94:af:29:bf:4a:ae:48:a1:64:ff:3c:
42:75:7a:15:d3:cb:ed:17:55:f1:9f:3f:df:f2:c3:08:41:ce:
84:ad:63:48:9e:e1:27:b6:65:d4:8d:b5:7d:c4:7e:26:f1:39:
7b:74:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:31 2025 by rpki-client