Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/08x65D62xajmjuWxGOGX--5GFZ4.roa
File: 08x65D62xajmjuWxGOGX--5GFZ4.roa (raw, json)
Hash identifier: ku01TCluM3ObD1DEPpsLr/8jGhA1O5espf/zteTKSkk=
Subject key identifier: D3:CC:7A:E4:3E:B6:C5:A8:E6:8E:E5:B1:18:E1:97:FB:EE:46:15:9E
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 019427486F8E3762D5D270B32CAA477AEA1F
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/08x65D62xajmjuWxGOGX--5GFZ4.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51699
IP address blocks: 2a05:4741:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6f:8e:37:62:d5:d2:70:b3:2c:aa:47:7a:ea:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3cc7ae43eb6c5a8e68ee5b118e197fbee46159e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:34:45:69:1e:ec:40:9d:57:75:cd:17:84:
24:67:2b:30:c3:cd:34:ba:42:d9:d6:8e:af:5f:19:
91:d1:39:d6:81:7f:23:0b:eb:d8:c9:ec:22:c6:ea:
31:0b:cc:78:55:cd:01:35:ba:9b:c2:64:bc:45:42:
76:e3:d0:4c:17:75:52:e1:15:b5:bc:c2:5a:02:78:
99:ca:16:e0:1f:6a:33:05:28:b0:19:55:fe:32:bf:
48:f0:c5:d7:d8:22:91:63:6f:ec:f8:34:72:de:fd:
ec:66:6c:c0:5f:29:86:00:bc:de:cc:f6:e9:fc:07:
9e:d8:43:c0:f1:64:b5:30:a5:07:e2:76:3b:c2:c8:
f1:67:a6:eb:74:36:26:0e:04:5a:5f:9d:7e:73:8e:
5d:f2:c2:6f:5f:78:9b:64:48:d7:c6:e5:ec:5a:ef:
ed:84:35:44:62:d1:e9:70:13:32:25:46:5f:c7:67:
ba:32:b1:86:38:f1:5a:e9:41:67:07:e2:4a:31:8c:
83:c5:72:66:73:1e:9f:e0:08:70:b5:a7:8f:78:ba:
c8:bb:97:9b:64:86:d4:50:0e:91:db:94:39:67:e7:
4d:81:ac:66:e8:fa:54:d6:cf:68:11:f5:4a:14:ee:
c1:e0:57:a7:ab:76:ff:26:be:22:4b:91:66:90:80:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:7A:E4:3E:B6:C5:A8:E6:8E:E5:B1:18:E1:97:FB:EE:46:15:9E
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/08x65D62xajmjuWxGOGX--5GFZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4741:6::/48
Signature Algorithm: sha256WithRSAEncryption
01:b3:65:94:fc:8f:8d:29:98:17:f4:87:5f:8a:48:07:75:1c:
d5:14:97:9e:a7:f9:2a:1f:ee:e6:b4:55:86:ca:ad:11:a2:9c:
9c:69:54:d3:23:eb:cf:49:f9:39:f3:e3:6e:04:e5:ca:79:c1:
4f:cb:3d:ab:69:0f:70:4d:55:9c:77:2b:28:58:5a:19:a6:28:
b8:68:a4:2a:36:95:27:d3:3a:44:03:16:0f:28:54:35:08:d6:
98:f5:31:f0:d7:3e:7d:68:e5:63:2e:21:68:dd:a6:93:d2:df:
f5:b7:65:fe:0f:50:fa:95:06:6a:42:3f:32:05:a7:a9:89:44:
2b:23:e1:10:8a:43:5a:a8:00:5f:96:d7:fa:dc:b7:07:6a:32:
5c:76:5e:1c:20:8f:d4:b6:a5:ba:0a:ee:cc:11:cc:8e:f5:9d:
e0:1e:75:23:ad:6c:08:d9:30:69:17:ab:45:64:dc:01:e2:32:
c3:eb:55:16:10:e4:81:1c:e0:b1:35:9e:fa:f1:35:3d:ed:46:
3c:2f:51:4b:54:dc:56:50:60:7f:de:c6:4e:16:e5:f3:79:c2:
21:89:c2:90:17:da:62:1b:63:e9:16:1a:d0:e6:61:d8:3d:90:
db:c1:94:87:d4:d8:44:72:33:5d:89:8c:53:c2:0d:83:e2:de:
55:ab:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:23 2025 by rpki-client