Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/aVM2JRPGoP421g9oSUNGjf9qD-0.roa
File: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (raw, json)
Hash identifier: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=
Subject key identifier: 69:53:36:25:13:C6:A0:FE:36:D6:0F:68:49:43:46:8D:FF:6A:0F:ED
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 01942067C10333A5721EFCDE748C03E16BD3
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/aVM2JRPGoP421g9oSUNGjf9qD-0.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15169
IP address blocks: 176.116.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c1:03:33:a5:72:1e:fc:de:74:8c:03:e1:6b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6953362513c6a0fe36d60f684943468dff6a0fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:08:44:b0:b0:c8:04:1d:08:52:f9:ff:40:4a:
ec:63:8d:b6:13:3e:c5:d1:3e:e1:29:d6:8f:33:41:
bf:34:db:66:97:ca:8a:10:f8:57:0b:2a:c1:ba:90:
a7:30:7d:a4:45:a3:fd:2f:38:74:09:30:5b:a5:8d:
89:a6:7b:73:13:0e:d6:2b:9d:81:38:82:7d:2d:ec:
b4:29:19:cf:d4:98:f7:0f:70:79:f0:42:1c:c5:0e:
e1:43:b7:3f:4d:5c:ac:47:43:21:14:ef:d6:9c:00:
1f:78:c8:c3:2f:5c:f6:87:dd:23:e4:11:ab:1c:d9:
2b:81:5e:80:2e:aa:c5:3b:5f:f0:dd:ff:63:27:11:
35:f8:06:10:69:17:ea:44:df:00:8b:90:d9:85:56:
3b:6f:21:f6:49:76:b2:d3:04:91:b8:0a:f4:08:04:
27:8a:09:a9:a2:91:7c:99:b6:a7:e8:c0:c1:b3:60:
85:81:bd:65:e0:81:1b:88:42:62:42:46:95:89:17:
5e:81:20:b8:80:25:ac:86:32:c4:99:c5:16:58:44:
df:53:f5:bd:e8:2a:93:a1:5a:53:01:8e:36:b4:1d:
63:ef:dd:de:2d:6b:96:69:34:72:bd:55:06:ef:54:
4a:da:c4:ae:f3:c6:a4:6b:78:b2:94:e0:fc:d1:c3:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:36:25:13:C6:A0:FE:36:D6:0F:68:49:43:46:8D:FF:6A:0F:ED
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/aVM2JRPGoP421g9oSUNGjf9qD-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:42:5a:ec:74:86:b0:40:cb:12:ed:59:8b:ca:5f:db:79:60:
11:9c:e1:f7:ca:00:a8:fb:e3:4c:b4:59:a1:49:9f:a4:1c:6d:
18:da:c7:da:5a:3c:59:71:2c:9b:9d:69:1a:1e:ce:94:7a:53:
21:dc:32:72:81:6f:ec:6c:af:3d:e3:f7:81:92:8f:df:80:b4:
50:aa:b1:7a:25:40:69:08:a1:50:0c:08:ac:b3:5c:28:b4:98:
d5:d2:da:12:b2:a5:d4:28:ab:91:a1:78:f1:e8:f9:05:85:ad:
f8:37:b3:e8:b0:90:b3:d0:61:9c:36:e9:33:e8:04:dd:dc:f9:
f5:99:dd:ee:9d:ce:c7:17:cc:e8:ad:b1:98:50:c6:8e:e6:46:
0b:19:03:03:53:06:45:86:f4:52:c3:63:36:35:fb:82:93:2b:
4e:d4:a3:24:57:c0:a5:79:bf:53:1d:ab:18:e2:bf:52:b9:a3:
9d:07:55:35:b7:93:71:c5:fb:ec:a5:b6:6d:e4:50:57:f9:18:
7b:1b:65:d6:af:b3:72:9b:6a:16:98:d6:59:50:18:9d:08:63:
7a:70:38:43:c4:0f:51:28:8d:22:88:4f:6d:28:2b:da:33:b1:
36:a8:94:70:80:ea:d6:4a:95:62:60:68:97:dd:b4:7e:85:c5:
fa:fd:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:03:00 2025 by rpki-client