Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/SmAcFee67aQLcPrKmiXZ94F0DAo.roa
File: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (raw, json)
Hash identifier: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=
Subject key identifier: 4A:60:1C:15:E7:BA:ED:A4:0B:70:FA:CA:9A:25:D9:F7:81:74:0C:0A
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 0194258F640D0B4EF102345A59B14B230183
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/SmAcFee67aQLcPrKmiXZ94F0DAo.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208745
IP address blocks: 2a01:f900:102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:64:0d:0b:4e:f1:02:34:5a:59:b1:4b:23:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a601c15e7baeda40b70faca9a25d9f781740c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:99:18:e7:38:be:70:9f:3c:ba:c9:d8:05:
f7:c3:e9:7a:54:31:2b:15:70:21:37:fa:1a:19:d9:
b9:dd:07:91:84:4f:ca:99:b7:aa:e0:4e:20:2f:16:
fd:0c:39:e3:dc:56:39:46:ae:c4:dc:7d:d8:18:57:
6a:ac:73:51:f3:07:5c:2b:4e:41:49:ec:ee:5f:ad:
08:58:21:4b:4a:f2:54:ea:a9:fc:37:af:fe:da:71:
01:4e:63:01:a1:c7:bf:20:7f:52:ad:51:07:76:3b:
8a:ef:ea:5b:c3:67:dc:84:06:b8:25:fc:a9:68:75:
7f:54:93:1d:ea:88:8f:f9:b6:d0:d7:08:85:a4:21:
41:36:ce:1d:dd:c0:20:67:73:33:07:c8:2f:57:4e:
3c:fb:05:4f:9c:6c:10:72:50:47:7a:85:fe:38:d1:
d4:78:e6:11:74:e5:08:e9:e5:85:73:6e:94:21:3f:
1c:9a:f8:63:bf:69:3a:4a:12:0a:eb:14:f6:3b:c0:
b1:72:0d:c9:66:94:40:d2:af:25:e2:24:e2:34:a4:
80:7b:9c:b7:af:47:df:34:94:29:89:21:76:0b:bf:
ba:be:22:54:c8:16:ad:a1:59:51:45:7d:af:79:a0:
3a:6c:4f:5d:43:fb:0e:42:17:87:fc:bc:5b:8c:68:
7e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:1C:15:E7:BA:ED:A4:0B:70:FA:CA:9A:25:D9:F7:81:74:0C:0A
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/SmAcFee67aQLcPrKmiXZ94F0DAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f900:102::/48
Signature Algorithm: sha256WithRSAEncryption
85:e3:ef:70:9e:50:0b:1b:84:e4:07:8e:85:61:44:59:ed:82:
67:92:a7:e9:82:88:94:6b:dd:a2:46:0f:d7:27:9c:de:25:7c:
fc:0d:fa:72:91:67:3b:e0:20:f6:7f:09:fa:25:6b:5e:2d:7a:
46:bc:d1:98:5b:b6:ee:d0:6c:58:31:1e:28:d5:3b:81:de:36:
93:36:0f:a0:43:d8:6e:59:21:eb:3a:fa:5d:02:b7:cd:12:4f:
b8:1d:a6:98:e1:cf:07:59:4b:f7:fd:8c:8f:57:0f:69:63:eb:
d7:b3:32:da:8a:64:12:6a:a6:f2:bb:9a:66:77:a5:d4:70:25:
07:35:da:ac:60:d9:23:93:98:86:93:3a:50:59:84:80:30:62:
d0:9b:e4:b8:72:7b:a1:30:88:83:e6:70:e4:de:d7:10:7c:19:
7e:2c:c9:50:c3:5f:9b:66:cc:f5:c3:ef:2b:a4:69:b0:44:3a:
12:30:60:7b:09:77:bb:ad:39:4b:2c:47:62:a8:ad:d7:c6:08:
40:ff:29:af:26:52:18:eb:7c:d7:2e:2a:8e:5e:6c:79:31:73:
f9:8a:a3:2c:1c:e2:bb:a0:b9:d9:cb:0e:04:f0:3b:b8:3a:c4:
14:cd:36:b0:12:bd:fd:75:ee:05:97:ab:89:ce:4e:e0:b5:35:
95:c7:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:25:58 2025 by rpki-client