Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/9OAY-jOw3emNDTJkwHz_aLBHU-o.roa
File: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (raw, json)
Hash identifier: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=
Subject key identifier: F4:E0:18:FA:33:B0:DD:E9:8D:0D:32:64:C0:7C:FF:68:B0:47:53:EA
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 019422FB1479CF68EFC6ECCCBC218B84EE2A
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/9OAY-jOw3emNDTJkwHz_aLBHU-o.roa
Signing time: Wed 01 Jan 2025 17:47:47 +0000
ROA not before: Wed 01 Jan 2025 17:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44511
IP address blocks: 2a02:20c8:1241::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:14:79:cf:68:ef:c6:ec:cc:bc:21:8b:84:ee:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4e018fa33b0dde98d0d3264c07cff68b04753ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8f:8a:90:a7:47:be:23:c8:44:61:11:60:ef:
8e:19:3d:17:57:b4:c6:53:ad:af:08:5f:92:0a:59:
d0:ec:eb:b8:03:e2:a6:36:03:66:1e:4b:56:c1:89:
75:c9:99:ae:47:75:5f:25:84:e9:d5:b4:f1:db:c5:
70:96:86:e2:c3:28:59:db:c5:3c:3b:3d:d4:ca:ed:
6d:8b:ae:a3:4b:09:34:5f:cb:24:98:14:ee:ca:1b:
8a:ff:6c:30:fd:33:cb:c0:1a:93:4a:2a:99:07:f1:
da:e1:e4:8d:59:be:96:df:4b:68:a2:84:54:63:85:
9b:f1:3f:e4:3d:af:60:f3:22:12:c3:dd:4c:46:62:
a1:f0:a5:c4:e1:97:c2:93:78:0e:d2:c0:49:60:5c:
13:55:29:ef:6d:40:43:bf:db:c3:71:2c:68:bf:67:
8b:ff:ce:b6:a6:a4:16:de:fa:2d:78:24:1c:bb:f9:
f3:3d:cf:4a:c1:db:6f:b9:94:c8:84:f4:0c:50:f5:
42:bf:7f:7d:62:81:b6:78:3c:67:d3:fb:dc:7d:11:
aa:e1:11:0d:00:84:44:50:24:bc:be:d8:f8:83:ea:
3f:56:79:e9:29:22:c1:7f:8c:9c:1d:a7:b7:c3:3f:
c5:76:5b:df:f1:79:99:5f:4c:66:5b:f5:32:f2:d4:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E0:18:FA:33:B0:DD:E9:8D:0D:32:64:C0:7C:FF:68:B0:47:53:EA
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/9OAY-jOw3emNDTJkwHz_aLBHU-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:20c8:1241::/48
Signature Algorithm: sha256WithRSAEncryption
59:2d:0c:87:40:82:d0:48:b4:8d:77:37:fa:ad:ad:55:fa:91:
ab:b0:2a:97:5e:67:e7:36:76:d4:e1:ad:ba:3b:a3:21:b7:da:
cb:a2:64:f1:d2:06:08:cd:ba:88:59:6e:47:e8:a1:0b:64:3d:
97:5c:e9:39:b6:ab:f4:f6:ce:bf:33:90:01:df:b8:e2:e0:69:
4d:d1:8d:31:af:97:a3:64:d5:f1:92:0d:ae:52:fa:8a:74:86:
12:d8:6a:ce:98:ef:82:7b:0c:25:aa:24:cf:b1:66:3c:5d:91:
fd:51:42:c7:6f:dd:b5:e8:15:40:34:0f:3f:65:b8:f6:ea:f3:
70:47:9c:85:c1:95:c3:61:9b:b2:9b:7a:6e:8b:6b:d9:dc:5c:
2b:68:ed:68:83:e6:e9:51:20:b3:7a:15:6c:44:b2:52:2c:cb:
38:5e:58:63:96:1d:48:23:06:72:9f:29:63:41:96:8b:c0:0f:
25:1f:7f:3a:2b:87:17:c6:25:58:71:8d:df:0b:0f:80:a5:9d:
3a:5a:8e:85:fb:d2:5d:76:7a:f4:a5:e9:4a:d5:90:07:f4:80:
b8:f4:1a:aa:78:05:87:d4:d8:87:9a:25:09:66:82:20:61:f6:
9f:e3:40:fb:50:54:e4:d2:07:26:5b:92:2d:98:8a:71:4e:fc:
da:ec:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:10 2025 by rpki-client