Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa
File: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (raw, json)
Hash identifier: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=
Subject key identifier: 9E:A5:19:7F:51:8B:89:50:CF:86:CA:7C:1C:4B:59:32:58:69:DC:16
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019424B27AD6E682F4AF2C1CF9A7023F3C74
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa
Signing time: Thu 02 Jan 2025 01:47:44 +0000
ROA not before: Thu 02 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12929
IP address blocks: 2001:2020::/31 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7a:d6:e6:82:f4:af:2c:1c:f9:a7:02:3f:3c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ea5197f518b8950cf86ca7c1c4b59325869dc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:f9:e8:af:a8:e6:06:e8:6e:c2:2f:45:8a:
e5:70:6f:b9:a7:d8:6e:56:46:f6:ad:2c:9c:13:b5:
7e:71:f6:8c:90:8c:c9:dc:1d:3e:3b:22:29:b9:6c:
f9:1e:a1:a8:2c:5a:a4:03:01:b6:6b:da:95:b4:07:
10:8f:56:e0:36:6a:bb:05:ac:9e:27:a0:cb:b1:ef:
92:cc:b7:c0:f5:ce:ea:06:f7:b7:ec:7e:91:ca:f5:
dd:28:88:fb:1a:9b:d1:6e:ec:1c:66:73:26:5c:2a:
e9:98:e7:03:15:b2:00:71:4c:b2:14:ed:d2:9f:97:
3a:47:fe:7e:d3:c5:76:01:58:33:aa:ff:6a:ea:61:
b9:e1:3f:44:3d:69:98:19:0e:2f:8c:50:d5:d9:2d:
03:36:a7:16:1e:da:2e:59:fa:0f:84:01:f5:28:86:
4f:0f:93:1c:f2:4b:6a:cf:48:87:1e:8d:fe:72:b9:
ec:ec:ae:58:3a:a0:b6:4d:b9:59:a7:c3:8c:e1:05:
27:f7:e0:3d:f7:bb:7e:b1:38:dc:c7:21:b0:c6:80:
b3:0e:e7:10:cc:97:42:5a:38:4f:81:71:aa:a3:d4:
cb:da:3b:2b:a9:89:fe:cb:68:f9:df:1b:d7:1e:30:
4a:3c:9e:1c:52:39:1f:be:8f:ba:b5:c0:84:73:28:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A5:19:7F:51:8B:89:50:CF:86:CA:7C:1C:4B:59:32:58:69:DC:16
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:2020::/31
Signature Algorithm: sha256WithRSAEncryption
30:19:ef:3c:50:3f:5c:74:18:f1:06:de:71:95:a3:28:40:3f:
b0:0d:bc:66:bb:7b:a0:22:31:00:55:f3:8d:6c:b4:78:d7:b7:
ba:ed:6d:70:35:58:60:04:ef:8d:91:23:87:af:30:6e:9d:bb:
a2:c8:b4:3b:f4:72:a0:89:d3:11:f6:1f:81:e9:fd:07:ae:f3:
2d:c1:73:73:8c:9d:34:b9:58:de:bf:82:08:99:2e:2c:3c:8a:
0f:13:60:42:8d:51:01:9d:c2:f0:4b:3c:b8:71:4c:ab:69:80:
0d:e8:9c:76:71:21:bc:f1:94:82:11:df:65:dd:83:35:c6:04:
82:f4:41:0d:1e:d7:9b:3b:74:c8:3d:5a:3a:26:13:c2:d8:f1:
e9:1d:86:f3:02:90:05:7f:d1:cf:2a:47:94:64:ea:61:48:fa:
a1:da:e8:1d:28:d3:18:80:c2:20:e9:80:92:cc:f7:33:74:c6:
53:f6:6d:58:72:04:c8:f3:f7:aa:f1:61:ca:37:e8:9c:8d:aa:
1b:9a:b0:cc:c7:42:f3:57:90:69:11:91:86:0c:1f:b1:0f:47:
97:78:52:3e:f0:44:99:83:61:89:c3:3e:1b:2c:2a:88:f7:ed:
1a:bd:4b:9b:0e:1f:5b:e6:54:c3:d4:f1:3d:eb:2f:87:62:89:
7e:a9:3a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:54:50 2025 by rpki-client