Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa
File: RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa (raw, json)
Hash identifier: a99rlpRHuLbwwwhP8DmXyZr4TiQSJ2/sdHfuj/shU7Y=
Subject key identifier: 44:92:1A:3D:FC:3E:95:E9:6C:49:8C:41:8E:49:C5:AF:84:6D:EE:84
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 019422FC42EB1B9AB53F21DDE495431D4DFA
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 2a14:5200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:42:eb:1b:9a:b5:3f:21:dd:e4:95:43:1d:4d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44921a3dfc3e95e96c498c418e49c5af846dee84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:65:d5:89:e2:40:8d:0c:5b:ec:13:fd:e7:
fa:09:2d:5a:a6:fb:db:1e:55:3c:07:04:1f:60:71:
a9:61:ee:ee:59:bc:4e:35:a5:01:97:d0:66:c2:6c:
19:34:e6:33:46:6f:d6:f9:6b:54:f6:68:5e:48:07:
50:fb:78:36:e9:7e:3b:d4:aa:dd:cf:75:ae:48:91:
98:41:f4:57:08:77:cc:84:5a:cc:b5:38:f5:a9:fc:
83:6e:ea:24:f4:1c:fd:57:e0:cf:1b:52:4c:2b:5c:
21:bb:d6:2d:bd:3b:24:52:d3:1a:41:03:a8:b3:7a:
a9:70:41:98:09:f4:6f:45:84:2c:77:58:65:bb:5a:
3c:de:37:84:83:2d:99:21:bd:07:98:35:90:7e:49:
de:3b:78:3f:70:e4:28:f3:48:68:18:59:a5:bd:23:
4d:a6:6f:ff:18:af:9d:6a:15:b5:1d:a3:02:72:6e:
d2:25:ec:0e:56:a1:88:f2:47:d4:66:c7:11:1f:24:
26:67:25:1c:b3:13:66:6c:32:e9:c9:cf:68:a5:89:
b7:e1:c0:5c:48:c3:d8:59:a2:36:35:36:cc:91:c5:
95:e5:2b:a0:20:91:5e:d7:17:64:c4:68:ce:7f:12:
1f:e6:d4:f9:37:f3:b5:d9:7e:75:92:29:54:1c:93:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:92:1A:3D:FC:3E:95:E9:6C:49:8C:41:8E:49:C5:AF:84:6D:EE:84
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/RJIaPfw-lelsSYxBjknFr4Rt7oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:5200::/29
Signature Algorithm: sha256WithRSAEncryption
5f:b7:b3:76:38:29:40:ce:c5:09:a3:dd:19:fe:67:92:cb:71:
2a:ab:99:b6:1a:94:fe:9c:19:9e:65:6e:7f:36:4f:c5:16:d8:
36:bf:61:34:47:4c:ac:e8:a3:ef:d6:09:b4:fe:65:99:85:4f:
86:67:26:b9:74:b2:0a:27:69:c1:05:97:db:a0:67:81:9a:d2:
4b:8d:75:a8:34:52:03:bb:3f:79:4a:fa:ef:ec:09:2b:02:cd:
f1:0b:eb:85:c0:15:19:fc:18:cd:c7:78:17:2e:7d:33:08:fe:
a2:5f:51:f3:76:cc:32:2e:bb:43:8c:f2:26:e5:58:e0:14:7c:
7a:b0:8e:96:f5:76:33:f1:a9:09:27:85:59:2e:65:81:09:dd:
93:7e:95:e8:fa:e4:da:87:93:c9:d5:8a:85:93:ed:98:61:9a:
e2:eb:a6:59:f9:04:ae:fe:b3:d1:95:25:c4:dd:d4:a8:20:98:
89:8a:c0:ac:ac:93:0e:0f:95:fe:66:f5:2c:72:40:7c:74:6f:
94:b2:0c:c6:d5:05:e2:9d:4f:4c:ad:cc:89:78:3a:30:ef:3c:
c6:70:8c:e8:ee:18:24:bc:6f:44:13:3d:8f:91:e9:ef:66:2d:
4a:09:2d:7d:b5:dd:5d:1b:5f:db:63:2e:9d:94:15:e7:32:ca:
cf:96:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:37 2025 by rpki-client