Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JWFrACGqXAEPwk5yERzaH1k3xEE.roa
File: JWFrACGqXAEPwk5yERzaH1k3xEE.roa (raw, json)
Hash identifier: eRkSlBoh54+iXz4l+cuyt8uCJGHuQx8lExR+xSC6BSg=
Subject key identifier: 25:61:6B:00:21:AA:5C:01:0F:C2:4E:72:11:1C:DA:1F:59:37:C4:41
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827F066F852323FF2DD44C4086CFE56
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JWFrACGqXAEPwk5yERzaH1k3xEE.roa
Signing time: Thu 02 Jan 2025 17:54:53 +0000
ROA not before: Thu 02 Jan 2025 17:54:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205884
IP address blocks: 2a09:57c0::/29 maxlen: 29
2a09:59c0::/29 maxlen: 29
2a09:5bc0::/29 maxlen: 29
2a0e:b00::/29 maxlen: 29
2a0e:2800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:f0:66:f8:52:32:3f:f2:dd:44:c4:08:6c:fe:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25616b0021aa5c010fc24e72111cda1f5937c441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:45:9e:f4:9c:eb:90:43:ce:fa:9c:e3:09:
94:f7:b2:8d:2e:83:99:77:4a:a2:67:a8:d6:2a:ea:
40:b2:33:c1:01:1e:02:9a:03:91:11:d2:ec:3d:70:
42:43:51:ea:31:25:31:0d:5e:14:d2:04:92:75:af:
5a:aa:28:f1:0d:ed:8e:2a:14:29:81:f2:01:01:a0:
3e:6c:b1:75:31:93:8c:13:39:21:46:86:b9:cf:c6:
28:32:f6:bf:03:9b:ea:22:c9:22:80:6b:13:f8:53:
dd:44:c4:9f:6a:c3:2a:6b:4a:af:12:e3:3c:a3:5a:
35:15:45:9d:93:17:f0:eb:6e:bc:b6:c4:59:b4:4b:
df:0c:b2:5b:6e:42:38:cc:d6:e0:fa:ad:20:7d:ea:
56:f2:06:c5:f7:fa:5b:b6:17:d9:db:37:1e:c7:bb:
1f:3d:88:a2:63:16:65:b0:71:42:fd:41:a8:55:e4:
ee:2f:51:78:67:cb:b1:12:61:59:75:02:96:65:17:
83:c9:c2:86:b4:98:7b:ab:ce:16:a9:da:b2:69:d9:
30:1d:6e:2e:7f:62:89:7a:07:98:72:e7:b8:0e:81:
b6:55:7d:c5:31:1a:fd:98:b7:ef:48:57:4e:46:bd:
39:72:82:d9:17:c8:80:65:26:04:b6:ff:4f:c9:12:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:6B:00:21:AA:5C:01:0F:C2:4E:72:11:1C:DA:1F:59:37:C4:41
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JWFrACGqXAEPwk5yERzaH1k3xEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:57c0::/29
2a09:59c0::/29
2a09:5bc0::/29
2a0e:b00::/29
2a0e:2800::/29
Signature Algorithm: sha256WithRSAEncryption
43:88:5c:73:12:c9:d3:fb:49:34:53:74:50:53:0d:56:cc:29:
43:3c:e9:ea:58:c2:ac:c0:c4:ec:31:2b:83:35:41:a5:49:23:
17:19:97:7a:a9:46:60:36:f9:7f:56:2d:6c:4f:9c:cd:e9:22:
6a:6c:d9:0b:07:7e:f3:0c:7c:24:0e:92:b2:59:16:39:3f:70:
b9:23:98:59:6e:a0:15:35:7e:37:ed:9f:a3:d0:a8:6b:81:2e:
21:e6:9a:6e:c7:36:cf:bd:e1:8e:ac:0e:ca:d2:e9:6f:cd:3f:
22:6b:00:b1:ac:dd:e6:af:5d:78:53:b1:ef:c7:48:43:55:7e:
5d:36:cc:63:b5:83:0d:5c:be:47:f0:b9:d8:5e:4c:69:cb:80:
eb:0d:8f:f4:26:61:06:76:3f:ef:73:78:d4:9e:2c:2a:75:89:
71:32:ca:28:35:ff:82:31:6a:f2:54:a8:f8:df:8c:f1:4b:35:
f8:f2:35:32:6c:ba:d0:54:09:60:f8:a0:51:e7:2d:5c:9c:b3:
ee:1e:ac:3c:71:b3:af:d2:81:12:e3:3d:3a:cd:ad:a5:ef:09:
9d:72:38:3e:9c:50:62:ef:80:71:01:2e:e1:77:e3:0e:f5:c5:
b9:25:14:e9:59:83:ba:25:31:89:0c:88:7a:66:91:f4:08:8a:
b8:dc:26:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:01 2025 by rpki-client