Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/p60T_9BRDnROvd9U0mIYWu3JYG4.roa
File: p60T_9BRDnROvd9U0mIYWu3JYG4.roa (raw, json)
Hash identifier: CASmZCb6AimtCFSZaoN9/6dcpSXZ9rOo6eQFeAX0PBw=
Subject key identifier: A7:AD:13:FF:D0:51:0E:74:4E:BD:DF:54:D2:62:18:5A:ED:C9:60:6E
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019427478CCAA9EC15F512442FDFF2A0A2C2
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/p60T_9BRDnROvd9U0mIYWu3JYG4.roa
Signing time: Thu 02 Jan 2025 13:49:47 +0000
ROA not before: Thu 02 Jan 2025 13:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 141.6.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8c:ca:a9:ec:15:f5:12:44:2f:df:f2:a0:a2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Jan 2 13:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ad13ffd0510e744ebddf54d262185aedc9606e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:9f:60:01:68:00:f0:06:72:75:ac:ac:b3:
fd:c7:ed:b9:9f:fa:7b:6f:0b:7b:38:24:01:51:69:
8a:c3:e1:8c:d7:80:12:8b:42:6f:13:f1:85:90:ba:
ec:ab:fb:3f:31:31:ac:f1:b5:74:c7:3f:8e:d2:72:
30:19:11:01:09:15:e2:bf:7d:1d:61:1f:0d:d1:e9:
39:21:c2:24:e9:3a:00:32:fc:f2:f2:20:c6:7d:28:
95:0b:c5:b9:7f:d9:4b:55:4b:5d:20:7c:7e:5b:95:
f3:df:50:e1:ea:a9:da:a9:56:5f:3d:0d:7a:34:c8:
07:79:fa:0e:ad:ce:96:a7:04:b8:f9:b1:d3:aa:fd:
60:09:2e:95:c4:1a:66:3f:67:e8:64:fd:bc:3a:5b:
e9:33:13:b4:f0:5e:69:2f:f5:5c:f5:c9:41:00:80:
cb:de:f8:18:18:6a:61:ce:f0:53:86:da:c6:32:fa:
52:06:a7:11:11:22:28:f3:e9:c3:7d:02:72:8c:d9:
cd:b9:3c:85:a9:a0:44:27:47:8c:63:ff:e9:ab:62:
ef:3f:00:01:79:01:7e:7f:18:c0:cd:c7:d6:a0:f2:
28:05:d6:70:1e:29:10:df:92:ac:8c:6d:3f:12:2c:
38:b0:17:83:1d:bc:b4:61:04:cf:78:dc:fc:e3:96:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:13:FF:D0:51:0E:74:4E:BD:DF:54:D2:62:18:5A:ED:C9:60:6E
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/p60T_9BRDnROvd9U0mIYWu3JYG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:44:16:28:70:cf:ea:37:25:6b:f7:da:38:6f:57:54:7c:ba:
23:ab:d4:a0:e6:15:d9:34:8e:75:cd:f4:6a:28:f7:31:3b:6c:
f9:f7:63:1e:0c:75:9a:ed:74:80:47:d1:54:c3:10:3b:51:5a:
b0:73:dd:df:bf:c9:90:17:f1:85:5d:ab:c6:2e:34:df:b8:63:
75:7c:94:dc:fc:56:a1:d6:8a:44:30:eb:81:78:65:d4:96:d1:
24:dc:12:05:82:d6:56:d6:c6:16:e4:3c:59:90:88:34:e5:1e:
ec:7c:7c:8e:61:02:ca:3f:5c:04:b3:f6:db:a4:94:20:47:12:
3b:28:56:9d:77:4f:ae:de:99:13:66:6c:1f:00:b9:bf:8a:25:
f1:be:38:e3:93:34:bb:19:06:2d:a0:21:84:2a:8e:75:14:df:
c9:c5:7e:4e:61:83:e5:6b:b6:cb:31:8f:2f:ea:95:1a:3e:3f:
eb:21:a3:22:90:77:a9:d4:2d:67:23:c9:fa:ae:3a:49:b3:90:
11:87:a7:48:a7:d6:15:7c:57:4b:9d:f5:1c:31:c9:0e:17:d9:
1a:b6:bb:41:94:bc:c4:bb:96:57:bf:77:4d:d1:85:a2:40:64:
57:20:f1:8e:f1:05:7f:b2:6b:64:35:80:05:83:9e:8a:e1:96:
43:38:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:01 2025 by rpki-client