Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa
File: rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa (raw, json)
Hash identifier: ogw4H6tz270SkrKMzgOGbWp8o172su6jWT/mKGItQ1o=
Subject key identifier: AC:DA:52:59:39:E5:57:54:A3:37:36:3B:81:87:3A:7C:6A:42:52:0D
Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial: 0194221F9D07302401C9E3152D0346C92791
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133944
IP address blocks: 2a12:f180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9d:07:30:24:01:c9:e3:15:2d:03:46:c9:27:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acda525939e55754a337363b81873a7c6a42520d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:91:9b:05:0c:b9:01:5e:b2:a5:e7:9f:5d:
4c:7e:39:5f:74:32:4e:90:de:ea:7a:66:47:a4:07:
c1:fa:13:55:ad:cf:1e:14:07:36:ff:b6:8b:83:e0:
4f:fb:dc:e3:4a:ba:1c:62:4a:db:7e:1f:e9:a7:06:
bd:f8:4d:7b:4a:44:18:e0:bd:a6:9a:ff:24:69:a3:
1f:91:f9:9d:17:7e:16:41:a7:b2:5b:fd:f8:5c:c3:
c6:d4:0f:5d:97:90:e3:28:8b:a7:b5:aa:6d:5b:10:
0e:35:5a:05:ef:e2:f9:7c:3d:89:88:17:b2:62:e4:
84:68:9c:75:d5:13:ef:a6:e6:bf:67:17:6b:2e:4d:
c6:fc:30:54:d0:63:1d:0c:86:72:7b:77:ea:a2:96:
12:21:31:e6:68:cd:7c:ca:77:6d:72:ff:bb:c7:f2:
c6:db:cb:c4:57:05:79:54:87:67:87:8e:7a:b4:28:
25:6c:66:ca:82:5b:66:e6:92:a0:a9:c5:23:75:c1:
d8:76:e1:f5:72:81:aa:f4:81:04:a8:20:c5:b6:af:
fb:dc:41:01:fd:a6:93:f2:e6:07:d5:57:8d:bf:b7:
44:09:82:41:da:d9:fb:f7:0c:a7:65:a8:66:1b:ce:
3a:d4:75:aa:89:35:43:eb:88:1e:d3:cb:b4:9e:dd:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DA:52:59:39:E5:57:54:A3:37:36:3B:81:87:3A:7C:6A:42:52:0D
X509v3 Authority Key Identifier:
keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f180::/29
Signature Algorithm: sha256WithRSAEncryption
0d:54:80:7e:b8:7b:66:54:6e:5a:15:66:cb:af:b5:bd:fa:3d:
89:4c:f7:cb:b1:31:9b:70:b5:72:26:56:c7:28:7c:ca:eb:44:
ac:2b:c6:48:0b:8b:a9:32:42:3b:52:91:48:91:3e:3f:c0:be:
01:6b:81:46:eb:d1:48:f5:38:d4:80:55:fd:ed:65:e7:a9:a9:
95:41:10:fb:d2:20:27:f1:5c:de:07:84:75:db:6a:2a:b8:90:
b7:36:c8:4e:43:01:3e:8d:25:94:3a:c0:10:8e:3f:45:90:8c:
90:1f:8e:1b:49:85:bb:e0:bf:73:eb:38:72:02:c6:91:34:84:
91:04:92:45:c5:e6:1a:c4:e5:46:2b:77:06:29:45:99:fe:81:
17:28:1a:dd:07:8e:55:98:27:a7:b9:9f:23:54:a7:07:5f:77:
02:45:d3:12:94:18:00:53:5a:96:5a:98:8d:b4:53:d7:e5:f0:
4b:ca:05:dc:5b:52:88:3c:cb:74:a5:52:27:fa:a1:6b:14:29:
21:5b:7b:e5:79:92:a9:7d:32:fe:94:d6:8c:71:82:66:a7:52:
d9:9c:94:b4:c7:2f:c0:75:6b:d1:4f:a4:11:40:4c:58:67:49:
91:a1:72:ae:fb:b3:09:3d:95:7d:93:90:2d:6a:5d:f5:db:35:
49:a6:3b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:16 2025 by rpki-client