Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/29zMSF3w66sUntVbm7zafoqxL7A.roa
File: 29zMSF3w66sUntVbm7zafoqxL7A.roa (raw, json)
Hash identifier: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=
Subject key identifier: DB:DC:CC:48:5D:F0:EB:AB:14:9E:D5:5B:9B:BC:DA:7E:8A:B1:2F:B0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 019424B3DE0BD7BFE6C56600EE4418DA12DD
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/29zMSF3w66sUntVbm7zafoqxL7A.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3097
IP address blocks: 2a02:6a0:ffe::/48 maxlen: 48
2a02:6a0:fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:de:0b:d7:bf:e6:c5:66:00:ee:44:18:da:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbdccc485df0ebab149ed55b9bbcda7e8ab12fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:95:f2:93:76:0f:bf:85:74:71:89:cd:00:
05:e2:1d:24:9a:43:d1:3f:1f:b0:eb:00:4c:79:d1:
7d:45:2b:10:e3:54:4a:74:52:ac:33:6d:db:3d:64:
99:4b:ca:0a:8c:ad:6f:dc:66:cc:ea:33:39:8e:4a:
e7:ee:84:0f:51:aa:c5:01:5c:54:e6:eb:ef:20:c5:
ab:71:f1:8e:a5:67:75:3b:2c:4e:c0:28:df:62:d1:
35:df:e7:5a:84:95:cb:be:0b:05:e6:8e:b2:19:80:
25:44:f8:8b:68:da:3f:2f:af:e5:b3:da:91:5d:27:
97:6f:0d:bf:8b:e5:86:30:04:85:f8:9d:29:b8:9c:
bd:4f:30:90:26:eb:66:ea:0f:57:19:1b:22:1a:15:
5c:ab:89:47:b5:56:21:87:6e:20:02:ed:50:82:86:
54:f0:00:10:68:c3:4c:5d:49:a6:e3:04:91:d7:e8:
63:79:74:f1:7a:d9:14:b9:7a:e2:60:ab:3c:d0:f3:
4a:8c:99:e4:87:d8:b3:3c:54:95:14:45:35:f9:12:
44:7a:76:75:0d:25:fa:b0:8a:73:c7:20:e0:89:e1:
f6:72:87:fb:ee:6f:11:ba:56:42:44:49:0b:76:73:
a2:49:88:62:97:7c:25:45:9f:72:d7:d0:33:a0:b7:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DC:CC:48:5D:F0:EB:AB:14:9E:D5:5B:9B:BC:DA:7E:8A:B1:2F:B0
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/29zMSF3w66sUntVbm7zafoqxL7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6a0:ffe::/47
Signature Algorithm: sha256WithRSAEncryption
12:8d:fb:a2:c9:bf:68:39:dd:63:de:0e:98:83:93:a9:05:6b:
93:49:53:f4:ea:87:48:a9:33:79:c8:5c:8d:e5:b4:31:46:61:
8a:95:55:3d:92:50:23:9f:08:5f:28:5c:27:8b:e7:8f:1b:9f:
ac:68:7b:03:58:85:73:29:6f:f2:39:6f:b6:c7:72:a1:48:df:
6c:03:66:87:c1:36:5d:b2:1a:a6:4f:b7:e1:b3:f8:4f:95:df:
3d:d6:43:13:70:77:e5:58:49:72:d1:51:6f:ed:f0:d3:b7:b6:
2b:46:4f:6d:19:52:e5:e5:0a:ad:2f:70:82:ff:1f:8b:54:92:
a5:4d:9b:94:e5:a0:9f:56:40:7b:68:74:e0:18:b2:6d:99:15:
66:51:6c:62:46:1e:8d:70:d4:09:8d:08:b6:dd:f0:54:3a:4a:
df:45:50:8c:01:5e:51:1e:94:dd:eb:31:f4:3f:1d:c4:ce:22:
bc:c4:71:df:f3:b1:38:c1:9c:0a:1c:62:de:64:c7:51:52:17:
15:3e:18:df:ef:e6:6c:e8:b9:17:6d:7f:94:c8:35:9c:ad:d4:
8b:25:b0:51:39:3a:61:b7:d4:d7:65:9c:84:f7:69:2f:29:72:
66:24:f4:72:56:69:3c:be:d4:4f:91:a3:b2:92:79:2d:d5:9b:
2d:07:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:14 2025 by rpki-client