Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/opjBwsfQwaZJKVugJJ6MF-vgLQw.roa
File: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (raw, json)
Hash identifier: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=
Subject key identifier: A2:98:C1:C2:C7:D0:C1:A6:49:29:5B:A0:24:9E:8C:17:EB:E0:2D:0C
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01942368F4D9D94AE9F373A8C7C1AD3EE7AA
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/opjBwsfQwaZJKVugJJ6MF-vgLQw.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50113
IP address blocks: 2a07:57c0::/32 maxlen: 32
2a07:9b83::/32 maxlen: 32
2a0a:981::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f4:d9:d9:4a:e9:f3:73:a8:c7:c1:ad:3e:e7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a298c1c2c7d0c1a649295ba0249e8c17ebe02d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:55:79:29:48:25:e3:38:6b:01:b1:22:b8:
e0:d9:9e:34:3b:81:90:ac:5a:ba:8d:d8:ef:37:67:
79:3b:23:29:6f:43:72:cc:f8:f7:69:c5:1d:e9:15:
4f:c1:9c:81:a7:2d:f6:a4:00:7d:74:b5:df:9e:bb:
df:0f:b8:30:0b:81:cd:33:b2:8b:08:70:8d:62:a4:
a0:57:d2:28:53:9e:cd:05:8c:d0:5b:15:90:91:00:
93:cc:e5:dc:24:5c:b5:24:d6:e0:ef:11:42:fb:b9:
d6:6a:62:d4:79:09:67:ff:67:83:9f:7a:a6:21:72:
a2:8b:33:27:d2:37:60:7c:9c:5b:37:63:7e:7a:40:
d0:c6:5a:6a:d3:66:58:58:5c:e2:ed:d4:5f:f3:ed:
32:de:13:55:97:ee:95:e9:d5:f4:0f:c6:c0:8e:04:
2e:8e:60:b6:36:d7:1f:06:96:ee:f9:b3:d7:52:2e:
b5:7c:e1:cf:75:a6:af:d1:be:fa:eb:9f:4e:1e:bf:
47:be:9c:9d:5f:fb:1b:24:72:ee:a0:d0:93:61:78:
aa:ba:bd:e0:3f:69:b3:ce:bb:cb:9d:ad:d0:26:2e:
2d:fb:cb:dd:87:07:4d:0a:68:18:ce:01:c0:be:ce:
2f:b2:8f:60:83:27:dd:84:75:b0:e5:8e:82:fb:18:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:C1:C2:C7:D0:C1:A6:49:29:5B:A0:24:9E:8C:17:EB:E0:2D:0C
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/opjBwsfQwaZJKVugJJ6MF-vgLQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:57c0::/32
2a07:9b83::/32
2a0a:981::/32
Signature Algorithm: sha256WithRSAEncryption
12:6b:52:8a:7b:24:b9:f8:a7:4d:38:e4:10:37:c0:43:d0:0e:
97:1f:80:08:2a:6c:a8:4a:4d:5a:3c:65:62:86:6a:34:00:8b:
13:95:95:8e:22:cd:47:61:2a:fb:89:c7:29:09:19:74:5a:69:
cc:52:7b:da:87:11:c2:7f:a1:e2:0f:f3:e8:28:d3:5a:31:a8:
56:e7:3d:e7:76:8d:9d:89:e3:c5:6f:79:5f:95:dd:e8:bd:6b:
37:fa:31:be:2a:39:33:7c:69:0f:76:20:9c:fd:2b:c7:87:a3:
09:b9:78:58:9a:23:14:ec:93:56:d1:7c:e2:95:af:f3:9e:2d:
6c:b0:fc:87:ee:85:66:70:e3:35:fd:e3:04:90:e2:53:08:75:
96:b3:16:91:be:43:be:bc:a6:a5:6e:cd:7e:46:5e:0e:1c:53:
ce:e2:27:7f:2e:dc:46:b5:09:cd:19:37:86:0c:95:4a:c2:e5:
1b:0d:e6:f1:e8:62:c6:9f:42:aa:b9:70:f3:d9:14:76:c7:11:
f6:1b:0a:c6:36:be:ff:5d:d7:01:4c:e9:c3:f9:52:5d:86:0e:
de:ae:40:6e:80:75:4a:db:a0:0a:6f:9d:a7:ea:05:4e:f6:55:
46:99:7c:72:49:a7:d9:f4:4a:77:26:61:f4:93:e8:cb:2d:db:
29:0f:c8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:16:12 2025 by rpki-client