Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa
File: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (raw, json)
Hash identifier: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=
Subject key identifier: 5D:73:2A:28:D5:9C:74:72:B9:E9:93:96:EA:E4:97:B7:4B:59:3A:4D
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAF88DAB77611786E636C943307BF8
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57429
IP address blocks: 2a0f:607:1024::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f8:8d:ab:77:61:17:86:e6:36:c9:43:30:7b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d732a28d59c7472b9e99396eae497b74b593a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:4e:ab:87:43:06:b6:13:77:df:aa:6f:5c:
83:76:09:39:b8:cc:12:ed:a7:6f:a3:f7:f8:83:5e:
09:5b:07:54:be:d3:d5:fa:68:bc:dc:8c:f3:bf:d4:
40:59:e7:19:9f:7e:c0:db:6b:b7:df:c4:4f:92:51:
74:a0:54:ff:be:9d:3c:ed:d0:e7:b2:5a:da:f8:35:
74:47:9f:f2:d0:f4:e5:e6:7e:c2:86:b2:b0:c0:ee:
7a:78:07:33:a0:08:51:40:8d:a4:09:a3:df:5b:b4:
22:c6:69:5b:91:e6:16:65:c5:d5:70:22:3f:99:d7:
0b:2f:a5:fd:f2:c6:f2:81:06:ff:52:1c:61:24:10:
ff:d8:dd:5d:4e:5c:02:c7:be:bf:3a:db:2b:f0:67:
7d:9e:65:31:43:31:50:f5:33:b9:1f:be:06:9f:02:
64:2f:1d:af:14:7f:9e:7b:8b:ae:22:65:70:4e:41:
c4:a4:e2:78:77:1e:20:c5:5d:23:90:63:23:b0:96:
46:73:20:74:2d:cf:ba:a0:f6:67:dd:37:61:b4:b6:
97:56:17:3b:83:88:e8:55:bc:40:04:62:65:b2:76:
6a:82:e2:53:50:5d:bd:69:35:cf:a5:9b:dc:c8:83:
53:3f:75:c1:5e:8c:bc:84:44:a9:32:16:9f:31:ae:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:73:2A:28:D5:9C:74:72:B9:E9:93:96:EA:E4:97:B7:4B:59:3A:4D
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1024::/48
Signature Algorithm: sha256WithRSAEncryption
8a:81:57:ce:1a:92:18:00:3b:62:a9:6e:6d:55:c3:1a:fc:92:
77:38:85:d1:f6:2a:37:16:66:9a:07:45:9c:94:69:04:68:9d:
4f:e0:42:0f:f1:eb:db:e4:4e:e2:f0:17:01:b6:84:c1:66:a3:
56:be:23:c4:45:b2:ad:1d:47:17:29:d6:cc:9e:d2:fb:9d:d7:
02:fc:7f:e5:12:49:23:b9:22:66:0e:e0:b6:7a:9c:8b:f7:cf:
c5:a7:bc:4a:99:b6:b2:9e:a0:8e:3e:04:86:c4:ee:ed:0f:ea:
13:31:59:b6:12:dd:55:be:2d:8e:b8:91:8f:ef:2b:6d:5e:dc:
f6:1b:75:55:88:76:a6:ad:3d:86:ff:1d:d4:13:71:d5:6e:e3:
c2:74:76:84:71:93:be:24:85:56:ee:c8:e1:29:2d:2a:8b:1c:
c9:6a:b2:d8:5d:38:a3:25:1a:e3:0e:e1:31:e7:b3:1e:7e:b5:
ca:f1:4c:35:72:d4:d9:aa:8e:bd:e0:64:0d:71:11:8b:78:e3:
b1:1e:f7:b0:f3:8b:24:1a:46:2b:af:c8:f0:39:f7:61:28:55:
da:5b:4e:17:f5:bb:17:de:c1:6a:89:df:52:3b:7d:a0:98:c5:
7d:ac:53:fb:f7:d5:7d:f5:94:3d:fc:3e:bd:4a:5f:d7:b5:45:
bb:4b:d7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:09 2025 by rpki-client