Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/CPESOVR7NuUuiT1fk3xOj3g1BJ4.roa
File: CPESOVR7NuUuiT1fk3xOj3g1BJ4.roa (raw, json)
Hash identifier: 94N98AuoHMwP3zuYxAtYTYC9OnoRJx4KYvMXL1js6yw=
Subject key identifier: 08:F1:12:39:54:7B:36:E5:2E:89:3D:5F:93:7C:4E:8F:78:35:04:9E
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 01942521FC81C79075FEDDF951617BBEDB4B
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/CPESOVR7NuUuiT1fk3xOj3g1BJ4.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215633
IP address blocks: 2a0c:6e00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fc:81:c7:90:75:fe:dd:f9:51:61:7b:be:db:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08f11239547b36e52e893d5f937c4e8f7835049e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:98:83:62:d7:7b:ae:b2:60:ee:bc:cc:9b:
fb:e5:dd:fc:57:31:de:f0:4c:c4:52:ae:03:03:50:
68:a5:d0:3f:bd:fd:76:68:be:77:cc:70:56:3f:dd:
47:25:8b:bd:86:4e:15:b6:90:43:f1:14:bc:45:c0:
01:28:09:1c:fc:08:00:99:0c:92:82:f5:5e:ad:1b:
3d:f5:26:f1:98:28:2e:bc:75:e5:ec:6e:42:b3:a6:
9b:1d:b8:9c:c0:21:e4:cf:49:8d:e4:e5:6f:ae:8f:
a9:42:e2:a8:d6:99:d5:0b:24:27:eb:c6:08:08:cf:
2e:18:c3:da:45:c2:d0:dc:95:d3:e4:ea:89:76:fd:
9b:bf:80:5b:bb:d8:bc:a6:fa:83:e3:0f:14:85:70:
b2:6f:ff:9a:7a:ac:b6:b4:4d:ad:55:32:4b:23:98:
52:1c:0f:09:9b:9a:b8:48:e3:f4:66:aa:92:77:49:
c9:44:e5:34:ac:4d:87:60:63:de:7f:4b:97:b3:0b:
29:d3:fe:cf:b1:00:34:28:df:82:83:7f:be:7b:da:
5d:8a:40:7f:6f:97:3c:86:72:af:c6:e3:7b:ec:7c:
09:48:b5:ee:f2:b1:1c:57:15:35:0e:67:84:ac:08:
37:f2:70:56:d3:ba:cf:30:73:74:01:1a:15:d3:d2:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F1:12:39:54:7B:36:E5:2E:89:3D:5F:93:7C:4E:8F:78:35:04:9E
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/CPESOVR7NuUuiT1fk3xOj3g1BJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6e00::/32
Signature Algorithm: sha256WithRSAEncryption
93:56:36:31:ac:58:a5:c9:d4:d5:f6:9b:1a:9a:94:7c:81:81:
98:7c:65:10:4d:2e:8a:cf:a9:33:5f:04:97:c6:b2:b6:50:28:
36:41:74:ec:df:68:8c:99:22:d8:f8:32:9e:30:da:57:a6:3e:
52:70:4a:ac:68:a3:24:1e:c4:fd:3d:5e:e0:c0:2b:31:d8:54:
ca:61:78:05:15:84:6b:fc:05:d1:fe:48:16:2d:0e:d0:ed:85:
cb:83:c1:d7:01:70:4f:a8:7c:9b:11:96:94:9e:5a:2c:3b:bc:
0f:42:4f:8c:3e:10:21:b1:0f:f0:a4:11:39:ab:ae:04:e4:e8:
8a:cd:85:f1:b0:49:39:9f:09:15:a2:9b:c1:d2:b8:5a:28:b9:
a8:17:d1:72:14:97:49:52:60:73:13:81:07:b4:5a:36:cd:2c:
3e:18:b4:52:6b:b6:be:86:a7:2b:dc:60:7d:73:a6:11:a8:be:
9a:e7:3f:a2:4a:ed:da:1f:0e:00:d8:86:bb:3c:a3:df:60:f6:
27:fc:e2:38:0b:0d:38:3f:15:f2:78:38:3f:6e:6f:af:78:23:
98:d0:88:30:56:54:fd:bf:99:51:2a:3d:23:4a:39:a4:75:b5:
72:88:8f:c4:b6:be:78:d6:65:26:10:9a:f6:3c:07:e6:81:33:
97:fa:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:30:57 2025 by rpki-client