Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/SVqYet6gqafuP93fvR-cXcD_lZE.roa
File: SVqYet6gqafuP93fvR-cXcD_lZE.roa (raw, json)
Hash identifier: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=
Subject key identifier: 49:5A:98:7A:DE:A0:A9:A7:EE:3F:DD:DF:BD:1F:9C:5D:C0:FF:95:91
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 0194258F63BA332694160F5134A9B910EA42
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/SVqYet6gqafuP93fvR-cXcD_lZE.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1257
IP address blocks: 2a11:cd40:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:63:ba:33:26:94:16:0f:51:34:a9:b9:10:ea:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=495a987adea0a9a7ee3fdddfbd1f9c5dc0ff9591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:48:ab:0e:88:a3:28:09:75:c5:fc:20:d3:
6c:c3:0c:40:60:fb:c3:99:0e:18:57:74:5a:55:3a:
7d:09:f5:6e:28:2c:f1:29:ce:5d:5c:ca:fb:07:1b:
4b:ef:7d:f7:94:f0:69:b4:2c:9c:f8:40:24:b7:09:
e2:8b:c4:f3:8c:e0:f6:04:cd:63:71:4b:25:30:82:
b5:e6:8e:76:53:b1:77:aa:2c:e4:33:34:19:66:de:
75:50:9f:37:85:dd:84:04:8d:b7:ce:3b:2f:37:e0:
cc:f9:d8:1b:6a:c2:ff:fa:96:5e:31:da:3b:2b:c0:
fc:6e:89:f5:9b:6d:8b:98:d2:d1:61:31:79:9d:1a:
22:e5:ea:5d:70:0f:ad:0f:a4:fd:2f:a9:f3:d6:55:
83:2b:22:66:56:80:67:cf:c3:98:ab:7a:01:8a:8e:
ea:c6:ce:d2:f3:7c:d2:2b:63:5f:8a:73:ef:0c:71:
a5:99:c9:a9:09:a7:04:4d:bb:f0:b7:d3:52:f5:ef:
17:dc:c6:10:56:9d:b1:23:20:13:c6:e8:de:ec:2e:
91:9e:cb:83:82:05:f8:57:7a:7b:b9:7d:36:1d:3a:
59:dd:7e:3a:c6:bf:47:15:5b:16:77:a5:e3:d9:e4:
ac:f1:3a:e0:aa:9c:bf:20:5a:76:c5:09:22:a5:fc:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5A:98:7A:DE:A0:A9:A7:EE:3F:DD:DF:BD:1F:9C:5D:C0:FF:95:91
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/SVqYet6gqafuP93fvR-cXcD_lZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:cd40:1000::/48
Signature Algorithm: sha256WithRSAEncryption
3d:73:54:8d:0e:d6:4f:0a:d5:cf:8c:49:4e:9d:c6:9f:90:15:
a1:9f:45:eb:9c:3f:63:a4:25:39:ca:8d:26:e3:db:94:08:95:
2d:34:3c:a9:87:26:ac:98:a1:f5:c7:46:ae:04:e4:ff:8c:35:
c9:3c:0e:a5:55:64:37:30:26:34:6a:e2:3c:cd:c2:bd:47:44:
e4:4e:02:00:0e:e3:14:a1:8e:ec:2b:39:97:31:97:30:e8:8d:
39:d0:69:bc:a5:30:c8:9b:f6:f3:bb:7b:cc:1c:2d:30:a2:39:
e5:80:fa:e2:fc:f1:b3:ba:d7:17:cc:96:ac:4d:49:46:63:fb:
8c:b8:57:63:ed:2c:65:07:ba:15:2c:1e:a9:3c:df:55:96:0b:
a4:f8:c9:fe:ca:84:5d:4a:53:6a:c5:9f:8e:d0:ee:8a:83:b7:
56:79:8e:78:30:9f:2d:4c:0a:07:94:54:fa:cf:42:62:b0:6d:
50:51:dd:58:5c:8b:1d:ea:7e:31:4f:dc:74:9c:cc:7e:08:d0:
4d:a5:8e:59:1e:99:5c:25:69:43:c6:4e:3f:26:52:86:87:83:
23:f1:6d:c0:e3:b2:2b:bd:1b:df:90:84:00:98:d6:a6:97:79:
01:09:57:43:b2:ea:c8:26:fb:26:77:43:71:f8:4e:fe:6f:77:
aa:3e:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:30 2025 by rpki-client