Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa
File: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (raw, json)
Hash identifier: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=
Subject key identifier: 23:E4:3E:A4:C8:02:1D:0F:56:FE:3A:56:0E:EC:77:3F:B7:19:21:C6
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 0194221FBD8DBB58476D27F786E8239EB6D4
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 2a00:b703:fff1::/48 maxlen: 48
2a00:b703:fff2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bd:8d:bb:58:47:6d:27:f7:86:e8:23:9e:b6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23e43ea4c8021d0f56fe3a560eec773fb71921c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:ae:20:06:3b:0f:f6:ce:e0:73:cf:e6:59:
b5:73:24:d7:97:67:46:41:7c:91:f3:fb:dd:bc:94:
3c:cd:4b:bf:06:b1:01:92:cc:c7:69:f9:f3:dd:e1:
e4:d0:0c:fd:82:5c:96:eb:8c:67:18:d5:da:62:6e:
ec:1c:00:f1:ad:01:f3:07:4f:6c:c5:04:eb:72:24:
e0:c4:7f:88:ea:dc:41:c5:92:c9:db:5f:86:81:b0:
0e:d0:a0:72:a7:45:c9:1e:02:cc:ff:4c:26:86:85:
36:33:ed:1f:ab:12:f9:b8:cd:af:c2:26:80:dd:d7:
7a:28:1a:c5:d1:5c:71:d0:33:8e:76:0a:2f:ea:c8:
07:3a:67:e8:6d:97:07:2e:66:c3:76:23:31:e0:0b:
8c:67:2c:9e:df:62:2b:fa:a8:4c:5d:31:3b:52:84:
1d:0e:c6:aa:e6:b5:59:26:25:58:9a:0d:bd:a8:44:
89:4f:f2:e6:89:2f:9e:38:e1:d5:18:3e:67:34:c0:
17:bc:c8:52:66:b4:4f:76:81:8d:f2:10:39:14:80:
33:9f:5c:ac:57:15:12:a2:bd:f7:b4:48:c4:53:4d:
3a:f8:9a:aa:89:a0:d2:18:a3:3a:f4:39:81:be:dc:
97:0b:07:72:90:bd:f6:62:c3:ec:7f:88:10:47:08:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E4:3E:A4:C8:02:1D:0F:56:FE:3A:56:0E:EC:77:3F:B7:19:21:C6
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:b703:fff1::-2a00:b703:fff2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:ae:9f:77:c2:17:23:64:26:99:3e:a4:02:59:27:4b:d1:b1:
78:48:15:39:8b:51:11:29:1a:3b:1b:c4:a5:fc:ba:fd:e5:73:
de:cc:28:09:a8:c6:2e:24:d0:d8:6a:f7:fb:45:7d:88:78:63:
c6:f3:69:ec:9d:94:2d:94:d3:02:c8:6a:13:75:8a:e3:1b:7b:
cf:b4:00:43:f8:c4:fe:41:a1:59:ba:07:ae:4d:65:66:c4:bd:
e4:02:fc:97:d4:bd:8f:60:b3:1e:b7:70:da:99:4b:74:f4:df:
58:58:7c:61:40:83:18:d0:3a:8b:b3:d2:95:41:29:af:62:29:
54:fb:23:96:05:b8:4c:1a:29:dd:a1:13:1c:44:4e:fb:7e:21:
86:f5:6f:a9:96:a2:29:35:cd:22:7d:5a:f8:c5:75:0c:78:b4:
5d:cb:d3:9f:8b:55:85:29:d7:92:b3:56:39:56:96:88:b3:ab:
95:68:97:a7:d6:ad:05:3e:a9:52:1e:f5:a9:e6:74:99:c5:7d:
5b:5a:f0:bf:8e:3e:fd:10:ee:38:15:62:5d:77:48:53:aa:25:
f1:af:f0:8f:b0:81:c7:48:65:c9:2d:b2:60:9b:8e:71:f7:9c:
9c:13:1b:cf:d7:d4:3f:49:c2:87:f2:f5:d6:aa:3b:ad:ad:5e:
37:55:04:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:25 2025 by rpki-client