Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa
File: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (raw, json)
Hash identifier: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=
Subject key identifier: 03:D4:CE:26:2E:C1:C7:3E:EF:79:23:8B:50:31:AC:27:8A:4B:F5:1D
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 0194811DE0EE1285DFBD1B4C2A3EE677E80E
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa
Signing time: Mon 20 Jan 2025 00:30:06 +0000
ROA not before: Mon 20 Jan 2025 00:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a13:cc87:fc00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:81:1d:e0:ee:12:85:df:bd:1b:4c:2a:3e:e6:77:e8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Jan 20 00:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03d4ce262ec1c73eef79238b5031ac278a4bf51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:7b:38:9e:4a:5d:78:71:ce:ed:cc:47:10:
4b:05:0a:c7:17:23:5c:6c:6c:dc:73:24:ea:37:40:
6a:d8:03:6e:29:04:42:d8:63:a5:2d:21:96:ef:c0:
0e:ec:94:94:d3:05:fc:d1:35:cf:37:eb:2c:90:e7:
3c:b7:d6:72:57:1a:bc:79:69:f3:c0:a9:86:89:60:
75:1e:21:f7:74:16:44:4e:91:a3:5c:e4:50:e5:bc:
68:f3:fb:0f:52:ff:fc:7a:12:95:3a:2a:03:c6:ab:
2e:54:00:8c:99:43:a3:63:bc:24:f9:78:b5:66:e9:
f2:d9:b0:9f:ba:21:f4:9f:25:aa:95:82:66:27:45:
05:10:d4:81:9c:bd:33:93:37:00:46:14:b9:72:bb:
35:84:57:13:fd:5d:9b:00:ea:fb:91:d4:ec:1a:4f:
2d:54:14:fd:9e:7f:0a:d0:f1:3d:de:92:cf:1d:8a:
3f:6e:93:e7:d6:b9:e2:33:2a:48:55:ae:d0:55:fe:
1f:96:a7:10:18:2e:8a:d2:74:46:5c:2b:24:e5:74:
9e:d3:95:87:97:b5:83:5d:88:8f:c8:a2:98:2c:14:
17:ad:eb:00:49:e7:b5:8d:05:95:27:d1:1d:4d:b9:
37:ba:c0:64:26:d6:c1:9d:e8:dd:a0:75:43:4a:fd:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:CE:26:2E:C1:C7:3E:EF:79:23:8B:50:31:AC:27:8A:4B:F5:1D
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc87:fc00::/48
Signature Algorithm: sha256WithRSAEncryption
cd:7a:e6:5f:c8:6c:aa:c8:5f:8b:e5:2e:9d:2b:30:b9:61:f9:
fb:61:11:8b:c4:9b:ee:b4:be:2b:af:c7:ab:2d:bc:b7:07:ee:
af:6c:f6:94:2e:c1:68:f0:54:74:cd:eb:40:56:46:57:03:27:
65:5d:f7:80:cd:01:e3:2a:e8:0a:26:7f:96:82:30:82:d7:f8:
b9:9f:70:01:c4:b4:75:f1:b5:71:ab:2f:63:f1:a2:36:92:26:
73:d6:dd:ba:46:d8:88:86:89:c3:26:eb:3c:3d:59:81:89:d9:
cd:79:a7:d0:63:27:c0:10:d9:9e:b4:8e:24:98:38:88:7d:8d:
be:10:46:7e:00:d8:65:ac:90:78:55:be:e2:2d:93:9a:f9:6a:
eb:d9:16:bd:b2:2b:35:7b:02:bf:7a:d8:1c:87:d2:b5:c1:d0:
01:8a:f8:8f:59:3f:e4:10:f8:45:45:17:58:ed:fd:19:ec:3e:
25:7c:f9:ca:96:5e:5a:ea:f4:02:d9:e0:9c:12:54:75:91:33:
fe:a1:42:37:7d:14:43:5b:11:6c:7a:59:ec:8e:16:da:6f:a8:
6a:aa:b6:db:9a:0a:ad:21:06:40:79:9d:25:73:80:00:b4:c5:
9d:50:73:96:b6:c1:27:cd:d5:8b:fa:de:24:8e:76:17:a2:57:
32:23:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:15 2025 by rpki-client