Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa
File: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (raw, json)
Hash identifier: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=
Subject key identifier: 37:1F:0A:79:66:21:D4:79:CB:E6:20:09:FC:F0:94:ED:82:6E:9F:87
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 01942369F030B3F6EDDAE99C18CDA24AB2C2
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa
Signing time: Wed 01 Jan 2025 19:48:52 +0000
ROA not before: Wed 01 Jan 2025 19:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50967
IP address blocks: 2001:67c:2140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f0:30:b3:f6:ed:da:e9:9c:18:cd:a2:4a:b2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Jan 1 19:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=371f0a796621d479cbe62009fcf094ed826e9f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:39:33:44:48:c8:97:2e:63:c6:07:5a:0a:
59:93:19:79:7d:76:52:44:31:a9:0a:d5:66:e8:69:
b3:a9:52:78:38:47:23:44:68:ce:40:b6:cf:0c:57:
0c:30:a2:c8:0c:c7:83:af:18:bb:1c:f9:33:cb:1b:
38:de:ff:ff:c5:9f:7c:00:48:93:49:da:72:58:7b:
32:a4:e0:00:7f:7c:97:1e:e2:57:e8:7b:e5:b8:ed:
58:f5:09:6d:28:bf:34:bc:63:f1:73:df:66:3c:75:
97:f8:5b:2f:4a:53:ce:d3:92:16:c1:76:50:5f:57:
15:10:79:f0:66:16:96:77:a2:31:0d:e6:38:09:5e:
51:6d:95:ef:12:81:a4:49:b0:24:1f:ad:c3:c8:63:
14:2c:b8:6c:75:7d:a3:2a:7d:8b:f7:ff:1f:fc:4c:
60:7c:fb:08:b1:10:c8:43:37:48:af:70:38:af:15:
f3:72:e7:de:ca:4c:84:e7:b5:25:22:d6:2e:af:bc:
4e:f7:55:c7:a7:e8:b0:cd:85:ae:37:58:52:a0:c7:
d3:25:12:b2:ca:4d:00:89:e7:ac:5a:f7:fc:f9:6f:
84:84:b9:bf:52:81:f1:95:fd:e8:f1:64:04:88:4f:
ac:b5:3f:c1:d8:de:9e:73:d4:d5:92:59:99:4a:7f:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1F:0A:79:66:21:D4:79:CB:E6:20:09:FC:F0:94:ED:82:6E:9F:87
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2140::/48
Signature Algorithm: sha256WithRSAEncryption
33:55:82:29:4f:df:d6:1d:2d:f9:84:2c:da:53:a2:78:b5:1f:
74:ed:2c:9e:e0:61:b3:ae:10:66:7e:2b:2c:c5:3a:64:9c:0f:
77:ad:0a:b1:d4:51:bb:50:64:63:87:50:6e:6f:24:cd:d7:12:
c5:06:da:31:ef:96:92:78:c6:c0:4d:6a:33:ce:0a:09:65:43:
21:49:6c:af:b5:e4:9a:4a:a5:45:43:f1:b7:3f:79:96:f6:99:
13:df:7f:0c:09:c2:f7:cd:b5:61:ed:1e:b0:eb:80:00:2c:97:
2d:72:4e:bc:06:05:2b:f0:6d:78:2b:0f:f8:02:9a:0b:6b:48:
6c:54:a7:48:d0:71:1b:83:26:dc:19:9c:f1:80:4c:cb:39:5e:
d1:c8:1d:ea:a3:da:8a:14:9a:e5:37:c1:b3:25:d8:52:b2:ce:
0c:0b:17:04:a4:ba:50:dc:c5:bb:16:7c:fa:75:0c:60:0f:92:
a0:c8:c0:c9:e9:08:8a:91:cd:0a:3b:77:92:71:8d:6a:c4:6b:
52:a2:fa:d5:cd:2e:f0:87:b1:34:43:fd:c7:3c:d8:28:90:2c:
bb:ca:8d:15:68:88:89:ef:18:dc:fd:33:c1:06:a3:f4:1a:df:
94:5f:73:85:b6:2b:51:94:0d:7e:7e:ba:34:66:53:f0:fb:49:
cb:11:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:31 2025 by rpki-client