Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/V3afX5WLrblFZgvp33No0_5obHQ.roa
File: V3afX5WLrblFZgvp33No0_5obHQ.roa (raw, json)
Hash identifier: AOq8YjKh81T7bxdmq4V+dKk/dhzb/X2WSGy/TipmoLQ=
Subject key identifier: 57:76:9F:5F:95:8B:AD:B9:45:66:0B:E9:DF:73:68:D3:FE:68:6C:74
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369FEC9120BDC0F330AA5BD3AA11D09
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/V3afX5WLrblFZgvp33No0_5obHQ.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216438
IP address blocks: 2a0f:7803:fee0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fe:c9:12:0b:dc:0f:33:0a:a5:bd:3a:a1:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57769f5f958badb945660be9df7368d3fe686c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:42:ec:21:14:15:c6:c8:ce:25:a5:20:28:
89:f2:a9:78:c5:93:57:61:85:8e:78:bb:c5:31:e7:
4f:aa:97:d2:ec:32:8c:4a:46:bf:c9:ab:18:e0:48:
1f:3f:a0:51:7b:7b:f4:28:3a:2f:ae:47:1e:37:5c:
f0:d6:1b:94:18:65:fd:dd:fe:f2:26:dd:58:89:31:
71:05:d1:f4:69:f3:68:bd:b0:2d:da:16:48:f6:3a:
c3:d2:43:f7:91:ce:73:07:a3:32:c9:a5:c3:92:14:
20:86:48:c0:5c:b3:68:0f:e1:6e:09:0e:dc:0a:c5:
58:6d:ce:40:6e:23:6c:b6:12:aa:ae:a3:53:8c:ec:
2d:61:96:42:77:d4:bd:62:b1:26:31:1f:01:6f:88:
c9:5a:a3:72:b7:34:63:b1:9c:63:ee:4a:03:3f:2d:
98:79:36:c9:da:6c:c5:40:2e:82:7b:6a:ae:82:01:
57:f4:c9:ef:8f:e0:8a:f5:d3:7f:7f:4b:39:7f:ca:
4c:1b:ca:05:b8:73:16:33:26:ef:79:7e:65:98:e6:
b0:95:f5:37:66:d5:82:ed:64:e8:ea:d3:63:10:86:
53:8f:f0:ca:a0:de:b3:29:9f:40:76:d4:f0:ae:15:
08:3f:2f:92:fe:d0:9e:82:58:23:30:8e:a2:9b:c8:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:9F:5F:95:8B:AD:B9:45:66:0B:E9:DF:73:68:D3:FE:68:6C:74
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/V3afX5WLrblFZgvp33No0_5obHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fee0::/44
Signature Algorithm: sha256WithRSAEncryption
a8:b4:01:9d:5a:a3:8a:56:b2:f6:e0:e3:1e:5e:bc:3f:26:72:
99:aa:c6:92:de:60:df:00:17:dc:40:a7:5a:e2:cc:4a:8e:3a:
72:ef:59:c0:79:ba:71:f6:7e:42:e6:60:80:e1:c1:db:03:ad:
31:b7:29:b7:fc:7e:05:0c:db:87:c7:cc:7e:b2:20:60:8f:46:
f4:61:c9:33:cf:15:68:61:59:ef:5e:b6:3f:73:a8:f4:f5:bc:
74:30:a6:ef:4f:52:4f:5c:87:9a:28:a2:52:1a:e9:77:31:35:
ff:e4:08:de:65:6f:43:12:89:2e:1f:3f:fb:46:83:33:c0:f5:
7b:c0:85:8a:a6:57:9d:b1:40:39:1a:55:9c:03:4e:77:22:35:
49:ba:04:36:f5:0a:4e:a3:63:df:f7:1e:dc:29:b2:11:31:82:
10:5b:9a:50:b5:a4:98:6c:da:61:28:2a:6c:df:57:0b:f8:6a:
7b:51:76:d5:02:a6:7a:55:a5:8c:ff:35:1f:09:80:63:01:9f:
a9:62:a1:0f:e7:9a:d8:64:2a:8a:d1:8b:e8:b7:45:5f:07:78:
37:87:4c:10:34:db:53:ee:70:3a:d2:aa:de:58:dd:21:6a:dd:
d8:25:39:75:7a:e4:d6:d1:6e:0e:ee:d0:82:76:85:a4:35:11:
c6:4b:11:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:13 2025 by rpki-client