Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/NggDQ38OB3KjH7Rk18GsEwwb5ZM.roa
File: NggDQ38OB3KjH7Rk18GsEwwb5ZM.roa (raw, json)
Hash identifier: jj8IhfvDF+9yyd0A8Qg2soBLs2Azk3ZZd0kj1LIZsls=
Subject key identifier: 36:08:03:43:7F:0E:07:72:A3:1F:B4:64:D7:C1:AC:13:0C:1B:E5:93
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369E4C1F6AF904D8200B7505D898033
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/NggDQ38OB3KjH7Rk18GsEwwb5ZM.roa
Signing time: Wed 01 Jan 2025 19:48:49 +0000
ROA not before: Wed 01 Jan 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 2a0f:7802:e000::/40 maxlen: 48
2a0f:7802:e100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e4:c1:f6:af:90:4d:82:00:b7:50:5d:89:80:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=360803437f0e0772a31fb464d7c1ac130c1be593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:38:ea:c4:3c:31:b6:ab:dd:c7:8a:7b:10:
85:76:c8:87:4c:2d:81:6e:79:64:00:7c:9c:5e:bf:
6b:8e:50:ba:eb:e2:68:92:66:cf:4c:da:46:ae:56:
a0:30:75:62:4b:c3:de:97:00:92:7a:6b:3c:21:53:
9d:1f:26:f0:d3:97:b3:21:38:f9:24:be:a9:79:8b:
ba:97:2d:46:91:f8:9c:80:84:b7:1f:fb:9a:25:56:
8c:96:bd:52:14:ad:d2:6b:fb:54:c0:1f:02:36:73:
07:74:76:ec:dd:b7:e5:c9:5c:70:67:72:87:00:c1:
80:e5:f8:9b:63:2c:8d:68:19:84:5f:0a:5e:81:d4:
cb:77:c4:c1:14:a2:20:c8:9e:3b:88:e5:1b:94:2f:
c4:5a:2f:f3:e9:88:16:8c:6c:f4:2a:97:96:a1:ab:
61:52:85:bf:4f:15:94:47:6f:65:c5:f6:d7:fd:97:
35:a4:ff:81:3b:9c:36:f7:d6:56:39:8c:7b:17:f6:
8c:b6:a5:a8:af:6f:5f:42:2a:cd:f8:be:4c:45:51:
4e:be:34:c6:ba:11:2e:ca:3f:c4:0f:59:72:97:13:
ab:e0:08:d7:cd:10:de:75:58:2a:e3:15:88:ae:42:
67:96:66:53:8e:52:34:02:b3:e6:96:22:ca:55:b5:
32:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:08:03:43:7F:0E:07:72:A3:1F:B4:64:D7:C1:AC:13:0C:1B:E5:93
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/NggDQ38OB3KjH7Rk18GsEwwb5ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e000::/39
Signature Algorithm: sha256WithRSAEncryption
49:aa:ab:c9:73:01:97:b1:aa:a4:c2:41:f5:bb:27:8e:d8:60:
b0:79:f3:ad:fb:c3:9a:e5:48:ba:7c:09:70:91:8c:91:33:cc:
e3:e9:56:58:95:36:e2:40:1e:53:e7:a4:44:92:7b:07:ba:55:
3e:42:f7:e3:57:ae:97:39:61:3d:5d:09:e5:7b:2e:a9:c8:f1:
67:f2:87:20:65:69:56:fd:41:8b:d9:50:e9:eb:31:99:e3:d4:
00:ba:a9:3a:db:c7:42:bd:4e:ab:d4:46:39:77:ba:24:de:f3:
62:ab:2e:8e:52:ec:2c:45:9d:1d:10:cb:55:c7:b6:0c:ab:3d:
9f:31:66:09:94:18:69:ab:2d:bd:02:0d:b3:65:37:45:3a:1e:
d7:a6:e7:f3:36:3c:3d:f2:3f:dc:bf:74:91:d1:32:5f:44:02:
3f:a6:ba:4b:33:1e:3e:eb:82:e4:8f:c5:f4:bd:67:99:60:80:
fa:f8:7d:a5:61:8d:a9:24:5c:96:9a:89:03:6c:a7:3e:25:2d:
5e:f6:b3:44:b7:32:01:e1:e8:a5:51:57:48:11:ac:29:9b:8b:
ed:3a:34:8a:85:5b:a5:8f:fa:15:24:4f:f6:0b:05:56:e6:fa:
67:2a:ca:19:34:2d:c2:0f:bb:5a:47:86:07:e1:23:7b:1c:41:
67:a3:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:13 2025 by rpki-client