Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/avV3a8U66aMCG_Ql9HqSQbWUBTE.roa
File: avV3a8U66aMCG_Ql9HqSQbWUBTE.roa (raw, json)
Hash identifier: jBW8RmVipk4f6KD9NtsmNDgCKu7/4k6HVMX+qYZRJAA=
Subject key identifier: 6A:F5:77:6B:C5:3A:E9:A3:02:1B:F4:25:F4:7A:92:41:B5:94:05:31
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427481A76FB85763BD694D42E8946D948
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/avV3a8U66aMCG_Ql9HqSQbWUBTE.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 2a0f:e7c3:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1a:76:fb:85:76:3b:d6:94:d4:2e:89:46:d9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6af5776bc53ae9a3021bf425f47a9241b5940531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:e5:16:c4:1d:b3:5d:ed:d4:c8:4a:61:0d:
ce:75:7b:4d:17:f2:66:43:a5:d7:48:09:ff:2a:f2:
e8:75:98:de:4d:c9:4a:42:c6:d8:79:b0:68:38:3f:
93:bf:bf:62:11:47:72:95:b4:57:fd:cf:28:8f:7c:
e6:91:ef:5d:a4:6b:3c:1e:a0:30:3c:4b:d0:91:50:
12:43:47:28:5f:db:c2:9d:3b:2e:8f:0f:f8:63:ee:
be:32:21:73:29:1d:20:18:6b:a2:ec:20:34:91:fc:
0d:25:ba:79:7c:07:b2:fb:50:ae:bc:89:20:29:30:
13:df:8a:d8:89:2b:3d:02:82:43:96:20:ba:fc:f5:
f9:f3:0f:58:fe:c8:d2:cd:ed:46:ee:0d:f2:70:62:
da:dc:f9:c8:5e:33:10:cf:e1:06:bb:8c:49:e1:e4:
49:e2:d9:02:ac:ac:b2:96:71:21:e0:7c:27:9e:21:
6a:a7:89:c5:71:48:df:66:9d:da:ba:9a:1b:32:36:
38:57:fe:5f:0d:d2:73:33:da:a3:82:7e:6c:7c:d5:
c8:75:3f:9b:a0:db:94:fa:76:69:62:ff:3e:c7:de:
be:0e:2b:a2:de:a4:11:57:41:fa:7c:0f:4c:c5:3c:
ca:86:63:f2:e4:09:98:e1:e0:6c:60:8d:47:55:b0:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F5:77:6B:C5:3A:E9:A3:02:1B:F4:25:F4:7A:92:41:B5:94:05:31
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/avV3a8U66aMCG_Ql9HqSQbWUBTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e7c3:1::/48
Signature Algorithm: sha256WithRSAEncryption
5a:40:97:28:7b:94:df:e9:83:63:4e:8c:56:00:2b:12:e8:f7:
99:d3:50:44:33:ba:e9:22:e8:9c:01:b6:81:cd:9c:7e:b3:d2:
fb:33:ab:c8:42:5c:2d:14:bd:bb:22:15:59:b7:34:12:7d:2d:
60:6d:7f:1d:fc:2a:53:64:9f:0a:c0:5d:a6:7d:ec:52:69:4a:
96:3a:ae:23:c3:12:03:2c:51:fe:9d:35:f4:1f:b2:e9:cd:f3:
ca:ce:7d:cf:8f:05:93:d8:ba:e3:9a:ab:21:fe:84:d0:c6:2c:
ad:5d:54:84:ad:01:9e:e6:35:d0:c4:a3:35:22:b0:0f:68:04:
4b:b4:f2:c4:b2:aa:d4:cd:87:b5:59:54:9d:b6:0c:c3:e2:b2:
d0:8c:f0:30:d9:ad:e7:12:8d:1c:8d:d2:f1:5c:a3:a1:48:12:
c0:d1:e2:0c:6b:17:72:bd:5c:e4:da:ac:9d:ef:45:b7:4e:5f:
f9:07:d0:cc:d8:e9:c1:05:ba:a4:16:65:0d:ab:56:29:b8:4b:
86:6a:78:d5:59:b0:f0:f6:95:83:de:93:63:ca:d4:bb:9f:e5:
95:9e:50:84:87:8e:94:14:5c:95:28:eb:a1:ae:6f:a9:a4:c8:
81:09:88:22:cc:d2:15:a3:ae:c0:6c:94:1e:07:dd:8a:7c:ae:
47:c7:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:31:43 2025 by rpki-client