Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ubRmnJz_S2C6nk7pAMO3lsADuL8.roa
File: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (raw, json)
Hash identifier: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=
Subject key identifier: B9:B4:66:9C:9C:FF:4B:60:BA:9E:4E:E9:00:C3:B7:96:C0:03:B8:BF
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019427482AE805C7DBC287F9463B6BB21258
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ubRmnJz_S2C6nk7pAMO3lsADuL8.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61120
IP address blocks: 2a10:fa81:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2a:e8:05:c7:db:c2:87:f9:46:3b:6b:b2:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9b4669c9cff4b60ba9e4ee900c3b796c003b8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:68:cd:75:3f:85:7b:94:56:89:9f:d4:f7:
6e:91:38:74:75:dc:bc:68:cf:ce:f5:20:18:3c:5e:
3e:cb:b9:a9:9a:41:e4:15:09:ae:f3:0b:37:14:b8:
33:45:25:a7:6f:68:8c:7b:8b:b2:d6:d2:1d:99:74:
5b:40:ac:ae:56:8a:ec:18:1b:27:1f:8f:e3:27:61:
3d:15:3a:57:03:76:21:a0:e7:55:aa:a2:d6:cb:30:
d5:57:14:47:7e:72:1e:b1:c4:1d:6e:03:da:1e:b3:
6b:a8:e9:d1:eb:80:21:08:03:2b:53:7d:96:fc:bf:
cf:aa:88:6d:4a:31:e0:c5:a2:19:33:74:9d:dd:e7:
26:7e:b7:13:a5:89:3c:cd:98:bf:10:b8:b4:76:88:
1a:20:8a:83:45:3d:9d:d0:d5:78:12:00:05:25:7a:
e3:6e:18:a3:82:1f:d0:3c:a1:93:0a:cb:bb:cd:25:
eb:17:9c:1f:e7:17:02:5f:91:0e:39:69:4a:95:6b:
df:66:2c:6f:93:91:b2:66:24:32:60:7b:f3:bf:85:
13:e5:80:d7:c1:51:74:3b:25:51:41:db:60:53:28:
59:47:56:2a:fb:58:51:6d:80:fb:d0:9b:1e:5e:e3:
5a:ef:f1:5d:f6:1e:76:32:d0:e0:32:d3:aa:cc:39:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B4:66:9C:9C:FF:4B:60:BA:9E:4E:E9:00:C3:B7:96:C0:03:B8:BF
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/ubRmnJz_S2C6nk7pAMO3lsADuL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:2::/48
Signature Algorithm: sha256WithRSAEncryption
2f:35:02:e2:17:27:ae:2a:f0:a8:6a:59:e0:e6:e2:7a:57:0e:
c3:ec:88:4e:a6:3a:0d:27:a9:41:3b:ad:d1:f3:af:04:40:f5:
49:6b:06:7c:17:1d:06:dd:d9:be:20:ce:3f:e7:8c:2b:1d:6d:
2a:1f:2b:4b:3e:94:3d:9e:e2:c7:e2:21:23:3b:59:96:db:36:
30:b0:a5:94:9d:7a:08:4e:5a:aa:1f:6b:57:68:8b:5c:e9:ae:
b3:79:52:26:bf:6b:32:dc:e6:f3:e9:90:31:cd:3b:64:95:d2:
99:c3:34:cc:78:0b:ec:dd:b1:3f:8c:14:cc:cf:e8:57:07:a9:
f9:f9:81:e5:4a:3b:33:ad:41:e3:af:25:a1:d9:be:ae:6e:8a:
7e:01:ee:fd:7e:e9:01:08:d6:99:6b:0a:e9:79:7a:c4:20:dc:
d6:2e:18:02:67:1a:0d:fc:18:ee:67:9b:0f:c2:b4:44:93:e4:
44:e0:1e:3f:72:d7:0d:f3:d2:c7:4d:11:b5:81:14:0c:d7:41:
05:65:fa:a1:f7:07:b6:62:de:3c:6c:ba:94:74:2c:46:e2:71:
2c:10:5b:0f:4b:05:53:42:db:d4:b5:46:d3:a7:3d:87:2e:27:
66:ba:79:bd:4e:90:cd:07:93:c6:12:36:b1:c3:ae:71:bd:2e:
bb:7d:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:56 2025 by rpki-client