Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/i10NWUSGAIWexuZ8PjNhBDIKbUs.roa
File: i10NWUSGAIWexuZ8PjNhBDIKbUs.roa (raw, json)
Hash identifier: 1db21KiR5bFTQidbbCI1S4Ch0ZkfRZfQJSvHB/2+tIw=
Subject key identifier: 8B:5D:0D:59:44:86:00:85:9E:C6:E6:7C:3E:33:61:04:32:0A:6D:4B
Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial: 019425FBF3BFAAA0C6396B00DB1BF7CED46F
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/i10NWUSGAIWexuZ8PjNhBDIKbUs.roa
Signing time: Thu 02 Jan 2025 07:47:36 +0000
ROA not before: Thu 02 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61969
IP address blocks: 2a01:bb20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f3:bf:aa:a0:c6:39:6b:00:db:1b:f7:ce:d4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Validity
Not Before: Jan 2 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b5d0d59448600859ec6e67c3e336104320a6d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:15:96:56:86:24:89:3d:72:d5:e2:e7:98:
84:9b:eb:fb:7f:8a:0a:95:7f:00:83:84:0a:0d:68:
a2:35:c0:e1:0d:bc:fa:c4:1f:a6:6d:c6:51:9e:db:
90:12:07:88:30:52:16:b6:6d:a8:a1:95:b1:dc:c3:
69:35:dd:d7:fc:d6:76:46:51:46:ae:e7:b3:b1:34:
a9:36:ef:6c:02:8a:5f:77:29:6f:b2:b3:65:4f:a3:
e7:30:df:2a:23:58:6b:6d:ac:30:45:a9:81:ff:07:
99:9f:81:28:fa:0b:1a:c0:5b:ff:a0:3f:a1:74:e4:
a0:17:3f:bf:67:32:56:91:d4:f2:da:54:18:31:84:
48:76:b0:62:54:ce:3c:9d:29:72:be:ef:59:18:c4:
63:d8:54:47:eb:6a:7b:fb:eb:0c:9d:7b:93:db:c9:
a6:8d:39:84:04:30:ad:e1:32:83:fa:4b:a2:5d:83:
37:b4:2f:eb:7a:51:05:6e:93:62:1c:01:03:fd:8a:
37:4c:3e:62:e2:a9:ab:c3:69:f4:96:12:63:a0:59:
26:a1:e9:4c:a8:bf:62:83:ac:66:77:7d:cb:df:38:
e5:7e:a2:15:29:23:9e:ff:eb:71:41:80:58:a4:aa:
8e:c9:eb:2a:c0:4d:58:61:17:b8:cc:24:46:38:aa:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:0D:59:44:86:00:85:9E:C6:E6:7C:3E:33:61:04:32:0A:6D:4B
X509v3 Authority Key Identifier:
keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/i10NWUSGAIWexuZ8PjNhBDIKbUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:bb20::/32
Signature Algorithm: sha256WithRSAEncryption
79:db:0f:a0:f1:f7:40:47:f5:e6:83:cf:4e:6e:62:d5:59:32:
ea:d5:67:a4:4a:82:4c:a1:44:aa:c9:9c:f3:ba:75:1e:d3:bc:
92:32:0a:6b:ef:f4:81:50:28:5d:dd:2f:dc:db:f2:c5:ec:8f:
68:de:a6:63:39:e5:15:6c:39:06:e1:d7:07:0e:0e:16:d6:f2:
fe:b2:49:fe:42:5a:04:e4:d6:02:df:be:e0:7f:ec:49:06:be:
c4:bb:1c:ad:12:4d:5b:48:ac:40:f0:a6:2f:48:a4:ae:db:40:
84:14:17:30:fc:c0:69:b2:98:6e:0d:61:4a:44:cc:d2:bd:78:
fb:42:6d:69:f1:3d:6f:fa:df:b2:bb:79:45:dc:24:e6:25:1c:
fc:57:4b:93:de:4e:b4:e8:62:5a:da:80:c7:14:98:89:fb:1d:
8f:4d:23:22:79:cf:64:02:bf:de:d3:62:f2:90:8c:5a:1c:b5:
38:a5:7c:b8:f0:a9:a3:af:4c:2c:c2:11:c4:3c:04:9a:6f:c7:
16:ad:65:c3:28:29:a7:56:db:af:0e:14:d0:65:c4:59:cf:3f:
e0:2a:ff:62:ca:3f:8e:0f:ba:f5:46:73:7c:16:fb:b0:b5:5a:
d3:1a:6b:1a:5f:8a:75:88:34:75:d3:fa:e5:aa:16:53:1c:6c:
c4:b5:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:06:03 2025 by rpki-client