Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa
File: Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa (raw, json)
Hash identifier: ebLELH5oRyZKdj3cm3xGsR3F/jIoIGMnEcP8nrCpL+8=
Subject key identifier: 25:DB:FD:2A:66:E2:17:07:81:1F:B6:44:B7:DE:BF:46:FE:C2:C8:F8
Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial: 01941F8C8FA5750049B4CEAB7651FB164931
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:5a47::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8f:a5:75:00:49:b4:ce:ab:76:51:fb:16:49:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25dbfd2a66e21707811fb644b7debf46fec2c8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:21:04:cd:4b:bc:a7:44:99:6c:a2:49:ca:
05:46:63:56:6d:28:75:77:3b:98:9e:6f:92:81:4c:
4d:45:6b:88:e2:6c:38:12:6a:b0:71:b1:5f:ff:9d:
2e:b4:b4:3a:24:c7:2c:b2:88:cf:1a:e9:9a:de:5d:
60:44:0f:b7:ee:07:69:ca:a9:96:61:51:15:0a:14:
19:6c:d7:02:c4:6c:09:e2:fa:5a:f2:7f:aa:a1:97:
0d:62:a7:e6:bb:92:c3:43:e6:9c:ea:b2:8b:e4:99:
62:4e:19:2a:50:70:64:31:be:fd:44:30:6e:f4:c4:
1b:88:61:dd:a0:be:a1:de:9d:e0:6d:2e:86:e6:64:
11:e8:d1:e2:32:4c:05:c0:11:de:8e:7d:16:07:1a:
0e:58:1d:7f:c7:e2:6c:30:61:3a:fb:2b:af:04:35:
3a:7d:1a:58:7a:db:6f:7f:00:93:09:bf:82:ea:28:
9c:e6:28:71:c1:57:4b:e8:c1:08:0d:9f:fd:84:65:
a7:f3:20:7c:4d:b2:8e:1b:95:5b:ff:ff:6c:4a:96:
5c:50:11:75:43:36:a4:8c:91:c3:6e:83:97:9b:d7:
ca:f5:37:4b:30:25:aa:44:13:37:47:83:17:84:dd:
63:2a:79:9c:f8:29:c4:f4:74:43:f4:af:e6:ed:0b:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:FD:2A:66:E2:17:07:81:1F:B6:44:B7:DE:BF:46:FE:C2:C8:F8
X509v3 Authority Key Identifier:
keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/Jdv9KmbiFweBH7ZEt96_Rv7CyPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5a47::/32
Signature Algorithm: sha256WithRSAEncryption
19:0e:97:9e:c2:a0:db:9e:d6:34:74:4f:0e:44:52:6b:32:01:
32:b0:f4:99:91:b0:98:1d:f1:00:06:8c:66:51:af:b1:f2:44:
ee:62:72:e6:51:07:4f:b3:67:02:a4:d8:ea:69:a0:00:7a:1e:
5e:82:73:17:d3:70:16:1d:50:26:7c:6d:4b:fa:3a:96:bc:a3:
d3:e1:cb:a0:fb:46:a2:b2:0f:c6:dc:a1:c1:71:d1:03:c2:c0:
2b:c8:51:d0:f6:10:15:01:ce:d5:d8:d7:2d:79:19:2c:16:a2:
c8:e7:cd:9a:15:56:b2:24:fc:81:9a:d9:41:10:60:2a:dd:2e:
9f:af:25:8c:dc:c8:21:51:96:09:3c:c5:e3:5c:65:e8:c2:43:
14:40:ce:ee:c7:14:a8:d1:01:87:68:68:fc:70:b1:75:5d:ea:
53:10:22:52:08:99:4f:2f:76:8b:fb:80:d7:2e:8c:cd:a0:da:
a6:81:60:90:b9:70:d6:0f:db:c9:b7:cc:0c:ec:d5:2d:95:09:
18:62:6c:37:a3:57:42:84:d8:bd:16:dc:e6:47:63:d8:e4:b5:
c6:8a:c0:0e:fd:97:91:18:4a:b7:fe:0c:f3:24:c1:2f:49:72:
00:21:88:77:1f:91:d4:79:ce:fe:a5:f2:63:7b:e6:7c:8a:ac:
50:4a:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:02 2025 by rpki-client